last executing test programs: 2m3.639444521s ago: executing program 32 (id=50): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r1, &(0x7f0000000240)=""/50, 0x32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'macvlan1\x00'}}, 0x1e) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x4044805) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./config\x00', 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200fec4f1f7000300000010040000000000000000000009010000000000000000000004070000000000"], 0x0, 0x3e}, 0x28) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', r1, &(0x7f0000000200)='.\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='usbip-vudc.0', 0x14) write(r4, &(0x7f00000004c0)='\n', 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x99, 0xffffffffffffffff, 0x0, 0xb, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd2d, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffe95}, 0x3f) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$inet_mptcp(0x2, 0x1, 0x106) 2m2.997623783s ago: executing program 33 (id=59): socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x5ef, &(0x7f00000002c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3, 0x4}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="010000400000000000000100000008000100020000002c000480050003000500000004000300000000000500030001000000050003000500000005000300092800000800020002", @ANYRES16=r0, @ANYRESOCT=r4, @ANYRES64=r4, @ANYRES8=r1, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r2, @ANYBLOB='\x00'/20, @ANYBLOB="23ee864006cb367aa2d44e24aab46d062062fef69babfb0411594d00c572371f7b749b1f1bbed0cb8db55343ec0be6f9dce3091430c50d3c918511c7589757cc6ca954f131643db53f1a04c1e3a68b1b5f888448ceac9537f642c74730288de08c2f59a5368414c7df07eae8d401730cdc97143a2d50b235844a3e1a64eabbe09966f803c2ada9fa7bab2d94d191ff1fdacf4fb321405b1881bf5cf3fa3cfd0a98ff827cfdd0d163a37cca2fd58ab8b0a6ea706836c642e4fa1e5da8f53088e49d9e42c0fab1ff6251408ccf52", @ANYBLOB="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", @ANYBLOB="000000000000416c3ccc0000000000fe950000000000090000000000000000f0f4ace7b9377c1df19b371efe50f5791286fd6e090000000000000038eb6452b42871b869b84badf166643a9de9e7dada1e054fc9514a44bc0dc73d1c1aefc9d4dd3491903352d253da0bb27563eed455c3fef1c367e51431f10776e3342843ff1495a28dbcd9cef9db1ba0cade289303ad10d53f226823aba1945a669d52c5d6889cbb82926c8a284f9d9c49288daad3b567c3a20c2a5bc6872ae08aeadf506cec2f6659e853e20cca851e1f45815cd56cd016108c3362161e8379775e29e6425435a7434084eb7cc60234a0474f3e071c48574483f56f2216c2ed72b49dffe33bd53f360a6d6791600fff3e0ad22c33cb7abad94ce3dbe192cc3a976e210756534deee1"], 0x48) write$char_usb(r2, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x12, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00'}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0x4, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') read$eventfd(r7, &(0x7f0000000340), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0011000000000000000000000000000000dc98ad3a140000000000004b5a43fe2a992a0e0bbff3160128ca000000006b70c1aa70895fa701413cc009ea715e63990f188012553941668950b95aa2a90e0452"], 0x50) r8 = syz_io_uring_setup(0x4175, &(0x7f0000000280)={0x0, 0x1bf5c, 0x10000, 0x2, 0x2d0, 0x0, r7}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) ioctl$BLKRRPART(r7, 0x125f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r9, &(0x7f0000000000)='7', 0x1) add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) clock_getres(0x3, 0x0) 1m52.185500747s ago: executing program 34 (id=126): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000001840)={&(0x7f0000001740)=[{0x8000, 0x1, 0x0, {0x2, 0x100, 0x1}}, {0x0, 0x1, 0x0, {0x4, 0x100, 0x2}}, {0x4, 0x2, 0x0, {0x5, 0x7ff, 0x1}}, {0x5, 0x1, 0x0, {0x80000001, 0xb94b, 0x1}}, {0x8, 0x1, 0x0, {0xaa08, 0x4, 0x2}}, {0x8, 0x1, 0x0, {0x7876, 0x6, 0x2}}, {0x7fff, 0x0, 0x0, {0xc10d, 0x2}}, {0x6, 0x2, 0x0, {0x8001, 0x0, 0x1}}], 0x8, 0x20, 0x6, 0x7}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) close(0x3) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x181080, 0x30) io_setup(0x1, &(0x7f0000000400)) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60481, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x28020400) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 1m41.716071246s ago: executing program 35 (id=199): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x251, &(0x7f0000000900)="$eJzs2k9rXFUYB+D3pq1NU9KJ+I8WxIMu1M2lydpFgzQgBhTtCFWQ3pobHXKdCblDYERMVnXrR3AtLt0J0qWbbPwELtxINll2IV7JzGiaEiVZpBP1eTbzwjk/zns5h8NZzO5rX326tlrnq0U/prIspm7EdjzIYi6m4k/b8erLt398/t3b77+5uLx8852UlhZvzS+klK688MMHn3/74v3+5fe+u/L9xdiZ+3B3b+GXnWd3ru7+fuuTTp06der2+qlId3u9fnG3KtNKp17LU3q7Kou6TJ1uXW4cGl+teuvrg1R0V2Zn1jfKuk5Fd5DWykHq91J/Y5CKj4tON+V5nmZngkctXTr+3PY3D5om9poLd6Jpmktfx+X7MftztCJ7MmVP3cieuZM9t51d3Wua1mm2zMTY//+3hy716Yjqy832Znv0OxpfXI1OVFHG9WjFb7F/TMZG9dIbyzevp6G5uFdtjfNbm+1zh/Pz0Yq5o/Pzo3yKe9WvT4yW3dpsX4yZiAsR4/xCtOLpo/MLB/nh+ueG60/HKy89tH4erfjpo+hFFSuxnz3IfzGf0utvLafD/V8bzvsn06e8NwAApyFPfzny/Zbnfzc+yp/gffjI++p8XDs/2W8noh58tlZUVblxrGJ/R489+V9YTJ+NNv4LRUQ2PGDZ+KBNuh/FCYuJXks8JgebPulOAAAAAAAAAAAAOInH8XfCSX8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtv0RAAD//11yztI=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x3}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x7a8580, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3, 0x4}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@noinit_itable}]}, 0x4, 0x521, &(0x7f0000000640)="$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") socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0xffffffff}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 1m19.649310073s ago: executing program 6 (id=416): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x3, 0x3, 0x9}) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) 1m19.626146803s ago: executing program 6 (id=417): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x20, r2, 0x503, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x815}, 0x4084) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000100)='.\x00'}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000140)={0x9, 0x6, 0xc7a0, 0x9, 0x8, 0xb62}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") unlinkat(0xffffffffffffff9c, 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x2710}}) unshare(0x24060400) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000067907812000228250000000000000000000000e0000002e0000001000000000000000000000000a9a0d7111777902c3d6a47383139052be615afa584b6be0a037acfb399f5a6e24a5474f57f96f55cc1f2bf40f4927cf026e10011b6931c6bbfef8c25f20a3a0ef2347d3973ddb59176eb"], 0x0) ioctl$TCSETA(r9, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x2, 0x2, "e5d5d01bee270008"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80000001}]}}}]}, 0x48}}, 0x0) 1m19.333791099s ago: executing program 6 (id=419): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x2, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x20005, 0x708e, 0x8001, 0xc0, 0x9, 0xf7ff}) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000140), 0x0}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x48000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x2, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec060000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ff"], 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x7, &(0x7f0000000200)=[{0x7, 0x5, 0x7, 0xe20}, {0x0, 0x9, 0x1, 0x2}, {0x4081, 0x7, 0x9, 0x1}, {0x10, 0xed, 0x9, 0x6}, {0x8, 0x0, 0x4, 0x6}, {0x8, 0x9, 0x30, 0x4}, {0x9, 0xfd, 0xf, 0x8}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0xce68c72d15b47c92, 0x1, 0x2, 0x0, {{0x5, 0x4, 0x2, 0x31, 0x14, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @loopback}}}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010002000fcffffff8000082000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b00010062726964676500000c000280050029000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="cafbd0e38e2aaa701cf14684812173e5a96992e4a2b9c68500cc56ae36a92e64c3bb0d65126550d7fa5026fe3f87b0a1c9837e81e6ba2c9ed3a9e8f8f18e87cfd0b36106829036fb1961ec1e6095c619f5241e107d74d2451a6a440cd6669446424d41a66ed4629124d98bbc89293161ede8162adf98d9656d00ec0250f23643c971038271cc63939e1e1ea2ea3da10b0fdacf4742ca9cd979dd9d3e822f2f0a55bf1590ef7e536df72ad62e2fad402ea948f64d1b196587d451f5f2c74da7062c4950669625925303970378533e2e4b005b88f4cdb899a4933b5aea7e1e2e5034fa1a5d5f35"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40040) 1m18.491719535s ago: executing program 6 (id=428): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x5c, 0x4) (async) mount$cgroup2(0x0, 0x0, 0x0, 0xc0, &(0x7f0000000140)=ANY=[]) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x100d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x100000000, 0x6}, 0x1e51, 0x1, 0x0, 0x7, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x301f699}, 0x250, 0x1, 0xbd6, 0xe, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") (rerun: 32) r2 = open(&(0x7f0000000400)='./file1\x00', 0x4827e, 0x20) fallocate(r2, 0x0, 0x0, 0x8800000) pwritev2(0xffffffffffffffff, &(0x7f00000038c0)=[{&(0x7f0000000340)="ed9003c516596b1a6e0fd5de7d761b1b0a43fede2fcb9476b3d903513bcaabb880f128ad1c92775fe1a9636ce01fbbfaed73cd4ce8276c48d3142cca0a2e859fc542fe14d5e78e35543cfe71fc743e3f3f112ad7b8a56c3a64980bd646f8eb789992f9db22e967cc43ac85ab3daf80a800b603374869a72cf6", 0x79}, {&(0x7f0000000480)="88be290184651922b93aa1878d360fe4002d28417c7ec614f02f168a8fda2019daff04f31e0cd10646c6fb942007ff17dfeb1c3cd304192ba4f48683bbc8af5e0c5bb09e0ee9fe0aa824e38de78a9752c78a2c768348b72e16efb3a10c793ed3450065e55781e0b6a80fc2c4ea2e357b1d0676abd1f1e77971fbbb658f2d615fb0838b39458e0d5b93142e514cdad9c71a193324b75cc2657bf881e47eea23f607591a280fcb22dbc8132a27182e2a971c4d974b0b65213a3c9ff62b44e7d0ab", 0xc0}, {&(0x7f00000005c0)="7ab0cc6daf37aa45cf2624ba53f4715e7cf551f68a30866f9f2e562b5e87a7f58027607ce0019fc2ae07292b76d49d20ab1718b15d94df686fa120e30c132fe0fd851f9a6ab1a69e15625ee233c4874f7e576c3e6fc824a7c9a3db21a87f5a53adc1d12f0d4f7c026b59083656ab13445dd498794b92f9d7a18e1a07d95fa2c4", 0x80}, {&(0x7f0000000640)="d9e54d80e17415aad34a92e16029bc5522bb816a8a3755570d56879d3e5bf69374ca3f4ccf8588ab67c2ee54dd477f8c34371f446d95e75d3d8a0e615b0cc4b89ee7e603ef8316daa9590b7b4227506721927542311a470f72075d7c5795ed915684fc9184344c3c3debeb3c2c245a2cd6ee443a79ef6520ef47cc29ba95eb288bf62af72124e8b303992bae13b7bcd1ce707b8e7e293718ab12afa5ea4b0cf9160de49ca1deaf0334a8d4a2c3ffc3253eabac951676880b7a66407f55a19d3fc6cdf00b3f4918058cc42bce29ce71526c82911def722a8f28ed62492615", 0xde}, {&(0x7f0000000b80)="14575659fc06a24c1d1cdddd7349bf4e0d163e9993bfeca8e7b3bcb6660365de7c4f968bddf0ce739b34f9c51a4d13c545cee04bc561c115f75c396785780b16592202cd7ad5224ff4acd87cb96a5c09bce3e48ed678dcf622f2186e653c0d84b0dfbbd9bda765fa55d75e60a9c441c1f348fb5350927bfd1ad88e9ce7741c752a9e2e11dde442dc6c86ab4cc539b5b5bc1a51104e72bedc0ceb23a729409c96ce8442c2c7a14f378716e4cf3a9a8a462032271fe78ef98701cc1e2f1255cf34a5310931051a7ff9d280d775fab5c8e400008cae2d3f37f2f298ce5412f4d1b906e3fa027df6e40209d2d3a0ca2bd730b1f59053cc59b2f3aa2072654b10313488af3c3fcef48d18d864429bdc92a3f497e3dd076ed637", 0x117}, {&(0x7f0000002600)}, {&(0x7f0000003600)="931dfb6f9609c719122559152b0f0496845dac32caac17d1f94b687cd2e678faf7a013b1c4efc9b7d960918d71bad503caa16a7d", 0x34}, {&(0x7f0000003700)}, {&(0x7f00000037c0)="ccca3e565a51b47282acc70c19bb744e4b4da57d9fd3deb8e25217ca54e1a310409129806476e261eb2015364b5111b546237335e045f6984346bfdfa0fbc0340a89024e89405660c081216e5b16be82ad620d8f2800f2fcc61b6ba8f0794585dc9cab15a8564c54fbdafa30ee76c01ddcd3c42eb64a66a43335f37770d65848fa7eb020daf7fab01c943af3", 0x8c}], 0x9, 0x5a00, 0x0, 0x3) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) (async, rerun: 32) r3 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000003c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711203000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000180)=0x79, 0x4) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x3, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f000041f000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) (async) r5 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000002000/0x2000)=nil, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 1m17.845897247s ago: executing program 6 (id=430): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000040)=0x7fffffff) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x78) 1m17.67749542s ago: executing program 6 (id=431): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b3, &(0x7f0000000c80)="$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") syz_open_dev$sg(&(0x7f0000000000), 0x1ffc, 0x80543) 1m17.657626321s ago: executing program 36 (id=431): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b3, &(0x7f0000000c80)="$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") syz_open_dev$sg(&(0x7f0000000000), 0x1ffc, 0x80543) 1m10.003715976s ago: executing program 7 (id=473): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) alarm(0xfd48) r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x81, 0x6, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) sched_setscheduler(0x0, 0x2, 0x0) setns(0xc9, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) (async, rerun: 32) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (rerun: 32) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) (async) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, r4}, 0x94) 1m9.932694907s ago: executing program 7 (id=474): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0xffff000000000000}]) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1m9.784635959s ago: executing program 7 (id=475): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'vcan0\x00'}}, 0x1e) syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r5) r6 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @private}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x21, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r6, @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m8.71488602s ago: executing program 7 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x82) ioctl(r0, 0xc178fd0c, &(0x7f0000000138)="0400") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x7, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x50421, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x302, 0xb91, 0xe0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x4f, 0x208201) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x6, 0x28, 0xe, 0x6, 0x6, 0x2, 0x0, 0xeb, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa, 0x0, 0xfd}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) 1m7.868095836s ago: executing program 7 (id=488): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f00000003c0)=@generic={0x1e, "9237c142aa9cd9d4571171249da1b1bc2cebe5e5f743fe6f8b4e7c7272934b604bf71e8108fce910b206ca0b34d54bd28c0c31e24341470e2aed11e2160c4b07c123c9c489458f330b558dfc26807d300f4b47c366c885e2ff25531d9d6446eb76ecf9aa996d418a12f7c2fb489d83cd97a0a5de299b1e58b7797c3d5c43"}, 0x80, 0x0}, 0x200000ea) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x22, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) chown(0x0, 0x0, 0xee01) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x20}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4c005a216b792066a22fc9ee240000", @ANYRES16=0x0, @ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20008040) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xffe0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390423bd7000fbdbdf2500000000", @ANYRES32=r11, @ANYBLOB="8185c092484266b0000000000000180012800b0001006970366772650000080002820400120009fb2f546c73f90716aa69d035437c5a402ca8dd56f640642a56f30a"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x181001, 0x0) ioctl$PTP_SYS_OFFSET(r12, 0x43403d05, &(0x7f0000000480)={0x18}) ptrace(0x10, 0x0) 1m6.622549239s ago: executing program 7 (id=491): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000020000b1739af0ff00000000ce09020000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.58575172s ago: executing program 37 (id=491): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000020000b1739af0ff00000000ce09020000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.576370379s ago: executing program 9 (id=500): r0 = socket$inet6(0xa, 0xa, 0x8) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x8002, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x8000, 0x7, 0x800, {{0x3e, 0x4, 0x0, 0x2, 0xf8, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@cipso={0x86, 0x6e, 0x1, [{0x6, 0x10, "1b9d2eda0d63678845287e72bd2e"}, {0x6, 0xa, "68b2435d5f630b18"}, {0x2, 0x3, "91"}, {0x6, 0x8, "a6d39bcd774d"}, {0x0, 0xc, "3d018d080f8b680d08d7"}, {0x1, 0x11, "d6286bb6f280384fc945e1c27b0b74"}, {0x5, 0x8, "1648d6323b89"}, {0x7, 0xd, "1f35879d7333012ac74e43"}, {0x6, 0x11, "48dbb895d137e68d4b3a52ef914a60"}]}, @ssrr={0x89, 0x3, 0x1f}, @end, @end, @ssrr={0x89, 0x13, 0xeb, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback]}, @noop, @cipso={0x86, 0x39, 0x2, [{0x0, 0xa, "56f0481b1318b3e7"}, {0x2, 0xc, "1e60faf521271167b28a"}, {0x0, 0xb, "f1dca78ee66591bb4f"}, {0x7, 0x3, '@'}, {0x1, 0xf, "7e21917f068a7a394cf42eda11"}]}, @timestamp_prespec={0x44, 0x24, 0x6e, 0x3, 0x6, [{@broadcast, 0x4}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0f, &(0x7f0000000000)="0400000000000000000000003801") 1m5.435381922s ago: executing program 9 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 1m4.99776375s ago: executing program 9 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ff0f", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x100, 0x0, 0x3}}}}}}}, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x400c8a4) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x800, 0x70bd2d, 0x25dfd9fc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c2b385bb9850761b8644c61eb3b41f292900318933e5881"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25233ccf3553d48a07006b147311aed9f7113ed2116eb1e5"}]]}, 0x68}}, 0x1) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) 1m4.978191841s ago: executing program 9 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x82) ioctl(r0, 0xc178fd0c, &(0x7f0000000138)="0400") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x7, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x50421, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x302, 0xb91, 0xe0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x4f, 0x208201) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x6, 0x28, 0xe, 0x6, 0x6, 0x2, 0x0, 0xeb, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa, 0x0, 0xfd}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) 1m4.777669325s ago: executing program 9 (id=507): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0xd8e, 0x1) 1m4.517718019s ago: executing program 9 (id=509): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x1, 0x8, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @rand_addr=0x64010101}}}}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') readv(r0, &(0x7f00000042c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x923}, 0x14}}, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$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") (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='*e') (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x106097, 0xa2, 0x100, 0x7, 0x7f, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) socket$kcm(0x29, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x10080, 0x0, 0x1b}, 0xfffffffffffffe25) ptrace$cont(0x21, r1, 0x8, 0x4) 1m4.445324231s ago: executing program 38 (id=509): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x1, 0x8, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @rand_addr=0x64010101}}}}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') readv(r0, &(0x7f00000042c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x923}, 0x14}}, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$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") (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='*e') (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x106097, 0xa2, 0x100, 0x7, 0x7f, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) socket$kcm(0x29, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x10080, 0x0, 0x1b}, 0xfffffffffffffe25) ptrace$cont(0x21, r1, 0x8, 0x4) 40.70767325s ago: executing program 2 (id=683): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000007c0)={{0xffffffffffffffff, &(0x7f0000000040)='#^[\x00', 0x200000, &(0x7f0000000080)={@align=0x2, {0x0, 0x0, 0x6, 0x5}}, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0xd}, 0x5, &(0x7f0000000700)=[{0x3, 0x7fffffff, &(0x7f0000000240)='\\\'#@$\x00', &(0x7f0000000280)="a6fd4746c0cffca46d33056c36d47dd17adf6bd02bbdf86fb45f56245980ded34fa5aa93ed3d150d49b4bc695e73475d30f7f860b066e431d504afbcb58671a175818d53138d4c35bc27f32f5420d6f07445f8e488d626e85dc51cd0c4ba0bbdfcf1dd099f2bc304354a14d7cd54ca665be742c98a83fd83d829f5d2341b4fcd6af1990a60fe6f1964e02027b48f43af0fcd638811e9f8a5dd7fe4f6cae865972e036b08ee7a87d9cc0f20530b3db4540ced4d5ea6ed3805755cf2efa14c59ae489402", 0xc3, 0x2}, {0x1, 0xfffffffe, &(0x7f0000000380)=',\x00', &(0x7f00000003c0)="4ede2cd88244906fa29163", 0xb}, {0x2, 0x8, &(0x7f0000000400)='\x00', &(0x7f0000000440)="5f64ea101dd469ab43ddfde7f593bb7d834631c3a634d95778f610dc9e51f5f484a4fb946244e91a67edd086f29e20ece8a53c2da130a6298e46f4f05bbf91bcfa6ca2af1cfc1a5949775162f31265f1f988102fd127b1e7d82ca94cd7a1ae09e09b029bbfaafaea", 0x68}, {0x1, 0x3, &(0x7f00000004c0)=']/\x00', &(0x7f0000000500)="b59583dad878fa0d5fda90ffe871cfd52bb4c49c4ccf89062ca6cbe6c457ef08d90fcc78e9e35ec057db72b056e8e6cb959e388bd6738399e5565d2179052d46fbba54d8c40927d02061ad67a4d6b6ec2ed2accab4906e02b1c4e151d7163272ca9241bfa26412f20928fe1a45970dcd43b141bb47bd7af0d99dfc8564afc155ba81ac51876d984528d4", 0x8a, 0x20}, {0x2, 0x2, &(0x7f00000005c0)=':\x00', &(0x7f0000000600)="acebb0ec9b40ecc2313981301f4dae8ede253fffab23a64ad30209a8c2cc570c1defa8d37f7550b936d0b73b6fd4ff2955298523bf2ac1b453144eec5a9cd2a6931d627e05850835a02be1ce6853d71f483243252dcc4c6023335da9d3e29e87221da2d298e8212cb776bd4ed75d1868c736db1ba8cd21d439c3e22d3c883ad87c5bed9c19aea50a52efabfb48a0ca2ddeaf1d745e7433389f69aa1168de76f60b4f9be618ddf9543ba8edb678cdffbdf9b5b855a94d8cb964d5e5df301e4207cb7d2a90b0d80745331abdb841c955647156559b3960", 0xd6, 0x14}]}) unshare(0x40400) pipe2$9p(&(0x7f00000001c0), 0x80000) vmsplice(r0, &(0x7f0000000880), 0x0, 0x8) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000840)={0xe, 0x6, 0x0, 0x80000001, 0xc, "57091bb145990355e8d21fdef27d9431f3f4a7", 0xa, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 40.500802474s ago: executing program 2 (id=688): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x303, 0x8, 0x0, 0x2, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendmsg$xdp(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x32, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_TARGET={0xfffffffffffffff1, 0x1, 0xb3}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x68}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x99d3, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 39.521696533s ago: executing program 2 (id=702): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000a0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) chdir(&(0x7f00000000c0)='./sys\x00') r3 = openat(r2, &(0x7f0000004280)='.\x00', 0x100, 0x10) getdents64(r3, &(0x7f0000000140)=""/46, 0x2e) getdents64(r3, 0xfffffffffffffffe, 0x29) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x0, 0x72836c836a8ea0b8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 39.298557367s ago: executing program 2 (id=711): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="8ba0", 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x5, 0x8ffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f80)=@filter={'filter\x00', 0x4, 0x4, 0x518, 0xffffffff, 0x2f8, 0x228, 0x2f8, 0xfeffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xff], 'vlan1\x00', 'vlan0\x00', {}, {}, 0x32, 0x4, 0x0, 0x1e}, 0x2f2, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'macvlan1\x00', {0x80000000, 0x8000, 0x48, 0x0, 0xffff, 0x8, 0x196, 0xf, 0x18, 0x8}, {0x4f400000}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x9}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x29, 0x8, 0x6, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_virt_wifi\x00', {0xa, 0xd164, 0x4, 0x6fd, 0x6, 0xa, 0x2, 0x8, 0x18}, {0x200000}}}, @common=@icmp6={{0x28}, {0x8, "b349", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5ce) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x10) 39.169500029s ago: executing program 2 (id=715): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x7, 0x80006) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16], 0x90}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f00000000c0)=0x18) iopl(0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000000070102000500000096efb7110c72774f0000000700000609000100"], 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000003c0)={0xa0, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7d5}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2d3e850f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9dae}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x80) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006003c000e0002000000e0000009006700000000000000020001000000000000000000000000f7ffffff40c565a6f8493ba45432000000000000"], 0x50}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x98, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x400, 0x10000}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r4, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB="980100003d00200028bd7000fbdbdf25010000009d0057800400b480abe54666de188cd1978d6506a0168c8db03e23bf9884a2b7ea54c55f0ad258dff2e5c9ff6f07661024b2f14cab0e20ab29bd6cb63a90cfcaab6e520ca6af95b80f7eccb4b3312451a83be57ccf858c75012ae53272589795af796880cffcb419e4757371561a863498fe2e8a3c92afb40a31294c9bffd479db139757e31f7c9a25aa6af315f2eebb87ff66933609770d8760df7ff400000008003d00", @ANYRES32=0xee01, @ANYBLOB="27001b80efd0a97bd61a042348dfd1e457c735b78f0f6e45534a9f8356ad88bf0864ee271db629152182077e214ed6d6350f875e81d98000b5363846be1f9afc5a52b5a5d73a55f750ad9a22fd001f346cf47736ff1b16ef3ab5ecde656623ed353cd1b82fde7dfe30ea6d5079c93d373bd18a3215957b385673f68c5f3e2dd4c6ec0ad2c44cff10e0fcd100b682a752d7e068b42fe1e35d2f99305ab10a6268be300841513d7ebb4587b962dbf4866c815c75498e2998ca462ef73f68f9f77ca7e0bb88a58608f1242793d8ec91e5773b13fff8d78e"], 0x198}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$inet_int(r6, 0x0, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7220000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 38.998496082s ago: executing program 2 (id=722): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000a0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) chdir(&(0x7f00000000c0)='./sys\x00') r3 = openat(r2, &(0x7f0000004280)='.\x00', 0x100, 0x10) getdents64(r3, &(0x7f0000000140)=""/46, 0x2e) getdents64(r3, 0xfffffffffffffffe, 0x29) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x0, 0x72836c836a8ea0b8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 38.980213933s ago: executing program 39 (id=722): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000a0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) chdir(&(0x7f00000000c0)='./sys\x00') r3 = openat(r2, &(0x7f0000004280)='.\x00', 0x100, 0x10) getdents64(r3, &(0x7f0000000140)=""/46, 0x2e) getdents64(r3, 0xfffffffffffffffe, 0x29) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x0, 0x72836c836a8ea0b8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.962437688s ago: executing program 3 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102020, 0x2e, 0x0, 0x4, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) 6.523761467s ago: executing program 3 (id=844): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@i_version}, {@block_validity}], [{@obj_user={'obj_user', 0x3d, '\xdf\xff\xff\x15\xe5\xff\xc0\xff\xb5\x8d\xb5\xca\xb1\xcb\xc9\xd6+q\x1e\x87\xdf8\xd5\xb4\x9d\xc1#\xb66/\xc9\x9f\x1c\xf0\x0e\xc99\xd4\x83\t\x00\x00\x00\xe4\xf3'}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) epoll_create1(0x0) write$evdev(r1, &(0x7f0000000040), 0x0) r2 = syz_open_dev$usbfs(0x0, 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2ff, 0x8, 0x1f, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000005dc0)='.\x00', &(0x7f0000005e00), 0x1000000, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd}, 0x0) 6.075353016s ago: executing program 3 (id=847): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x1480e, &(0x7f0000000080)=ANY=[], 0xfd, 0x735, &(0x7f0000000b80)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x840040, 0x4) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x0, 0x45833af96e4b39be, 0x0) 5.528683435s ago: executing program 3 (id=852): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000003000000000000010000000400048008000200010000000800010000ee8f000400088018000c8014000b8008000a008fee00000800"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) (async) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='\'', 0x1) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000680)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@bh}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$eJzs3MtrXFUYAPDv3jz7TKz10Vo1WoSgmDRp1S7cKAoiFQVd1GVMpiV02kgTwT6wUcSVIAVdi0vRv0DciCDqSnAluHIlhaLZtHUVuTP3JplJJm2aSSZkfj+YzDlzz51zvrmvc8+ZSQBtayD7k0Tsjog/I6Kvmq0tMFB9ujl3efzW3OXxJObn3/wnqZS7MXd5vCharLcrzwymEenHSV5JrekLF8+Mlcul83l+eOZsT54cO106XTo3evz4saMjzz07+kxT4sziunHwg6lDB155++pr4yevvvPLt1l7d+fLl8axRn8MN1gwkAX+73xF/bIn7rKyrWrPknTS2cKGsCYdEZFtrq7K8d8XHbG48fri5Y9a2jhgQ/Wsvnh2HtjGst480I6KC/3OuY7x7B54+X1w30Z1PbaE6y9Ub4CyuG/mj+qSzkjzMl1197fNNBARJ2f/+zJ7xPrGIQAA7sin41+c6I6IS7e+eTXreyz29tLO+yvPf1X+7s17gv0RcU9E7IuIeyNif0TcFxFZ2Qci4sF1tmd5/ye9ts63XFXW/3s+n9uq7f8Vvb/o78hzeyrxdyWnJsulI/lnMhhdPVl+ZJU6fnjp988aLVva/8seWf1FXzBvx7XOukG6ibGZsUqntAmufxhxsDNJlsefLMwEJBFxICIOru2t9xaJySe/PtSo0O3jX0UT5pnmv8rCm822/2zUxV9IqvOT7w5PX7j49OTZ+vnJ4d4ol44MF3vFcr/+9skbjeqvxt+b5/L45/tq4t+x/jAbul6qPi/Z/kuWLhwDi/O1082t/073/6Vz0hNjM2l38lZlnrk7f+39sZmZ8yMR3cmJSr7m9dHFdYt8UT7b/wcPr3z878vXyep+KCKynfjhiHgkIh7N2/5YRDweEYdXifHnF28ff6R3sf83QRb/xIrnv4VPvD+p2f5rT3Sc+em7RvXf2fY/VkkN5q9Uzn91krr8Ss3pjOipa2D9agAAALAtpZXvwCfp0EI6TYeGqt/h3x870/LU9MxTp6beOzdR/a58f3SlxUhXXz4eWp4sl0aS2fwdq+Ojo/lYcTFeejQfN/68Y0clPzQ+VZ5ocezQ7nY1OP4zf3e0unXABuuuyRUTwKPdLWkMsMnq59HT2uyV18PJALYrv9eG9nWb4z/drHYAm8/1H9rXSsf/lbq8uQDYnlz/oX05/qFNpT+u+PL3m94QoBVc/6Etred3/RuY6N0azWhNYrM3SqypcBSJtOUfVLMSvbElmtEgUfz7l1XKXMqLNLP2Fp6UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmuj/AAAA//8NLdKk") (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000680)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@bh}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$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") socket$netlink(0x10, 0x3, 0xf) (async) r3 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000001c0000042bbd7000fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0000a0050a0001000180c2000003000008000a0007000000060006004e2000000a000100aaaaaaaaaaaa000008000400010000000a000200011631b3f3cf000014000100000000000000000000000000dfd54829"], 0x6c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f000000b400)={0x0, 0x0, &(0x7f000000b3c0)={&(0x7f0000000bc0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0x8, 0x7}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4c020) (async) sendmsg$nl_route_sched(r3, &(0x7f000000b400)={0x0, 0x0, &(0x7f000000b3c0)={&(0x7f0000000bc0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0x8, 0x7}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4c020) 5.169495813s ago: executing program 3 (id=857): syz_read_part_table(0x5e4, &(0x7f0000000600)="$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") 4.881112518s ago: executing program 3 (id=858): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d05000003"], 0x50) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket(0x2b, 0x6, 0x7ff) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000009c0), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x1000, r0}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsmount(0xffffffffffffffff, 0x1, 0xfa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000042000000020000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000006eb95005242b7ef73bbef61fd2f11921300b0e77141035e007665a07150eeb5ed6e8fe9c76b58cebb6dd6ad953cd27f4c5811d21b680ec230517b1cf1bd22b96eac3aaca4f27957e852ee2d5fce920d125b1f589eea8834ecab32e9ccee3299d16010c2c4059f5ec7d027e2e48bce64b5778e28241f3642482ac7c932721591de1a436c4aeaba556646a8d2f272e214ed3c25ef0787af1fe1681ae7284a7a8a1109a922f889422f3568ff59c40dab576212b2500284e3d7e84cbc5fc1e0444e04f8443991a328a195513d3b04770fe699c23ccdc805eabb6f9cb61099b22cecb21a8422a34d900577b1b4c8bdf86d74e564e06ce8a3c9c2eddb3651550b8950d469cd05dddb296e587247e793002c8c4d2f056b10f6415e8c129253901478f3a91cd4d7f6e421d2c0c0e125136f99bad2580d34654800cc7d6be2e8e10fc133b2ae06e95c111264c5ee47c598532b1e615190a698e16e333d81f7d074f5dafd3b30e032d9a9dc72837fbb030e7c3571021f9af02bb3a2df464a59eb97a0b3b3e91833de7761a4782fa32d8d02082db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ff9000/0x2000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10f000, 0x0) 4.815075469s ago: executing program 40 (id=858): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d05000003"], 0x50) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket(0x2b, 0x6, 0x7ff) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000009c0), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x1000, r0}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsmount(0xffffffffffffffff, 0x1, 0xfa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000042000000020000000800000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ff9000/0x2000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10f000, 0x0) 3.137339001s ago: executing program 0 (id=867): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = getpgrp(0x0) fcntl$setown(r1, 0x8, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 2.802639747s ago: executing program 0 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102020, 0x2e, 0x0, 0x4, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) 2.475753584s ago: executing program 4 (id=870): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) close(0x3) inotify_init1(0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000070900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000084120000060a010400000000000000000100000008000b40000000005c1204806c0101800c00010062697477697365005c010280080003400000000208000140000000140800024000000012040005803c0105806a000100359f10c4d84709663f1f4cafe01884a559a8899fb64d71495656a64638368033d41e28260eeeedc6b6521e16437b6fabd769dbbda481d14712200eb952adc9d9c915ae435e52c401ce78efc4dfacdc3b8916065e517b9ba9c827c9f77057a3f4ba20652f4a9c00005c000280080003400000000408000180fffffffb08000180fffffffd08000180fffffffe08000180fffffffe08000340000000030900020073797a3000000000080003400000000308000180fffffffe0900020073797a3000000000640001002f8ecbd93d5cebcb8344c2f74fcb207d38f36fbd3ff2f90de4e995f0507c8811a122df5e70bda9286fd7dbc4524936d55cd6becb1e152adbf3d977bbca821831f6fc4853421b03c43dbb0075f04e8cea4aa0244ed2b02381f4b22f5c9a3707190c00028008000180fffffffd340001800b000100657874686472000024000280080001400000000c080003400000007a0800044000000022050002008900000054000180090001006861736800000000440002800800074000000001080004400000000a08000340000000250800014000000011080002400000001608000740000000010800014000000002080001400000000f100001800c00010062697477697365005410018008000100636d70004810028008000240000000052c10038023000100b1f7ccd9f16df3730b31dacada9103c9fa3251c4bbfa2fb2036a412467052800041001005e0340c31033f7f82bcdfcf318ee9e6b5ef749df5c02042319b2a72a4deb89619f0c6fd88fd8a481d30dcba1fbe6b583c5b6503f85ca58a6f2c44572836f31c2a3640b2988e494d42ad02b7f739d2d3689feaa9698953806596235235103aad4ef1a4f40d262956e0482dd5159e1b4be784b8fc7abf5c2d8fcb8fe7193b14946e38fdfe7c62ea883a349e22fb26d4594d53b9f258fc7eeb418c0b1a02697c61527120990371710068fd9de20c921cc141c02db2bc1ce71b58e1caadd317ae2df1d6902b5dbfe08c0c33cce4dce6040547e61a31c63d690916d5e1deff742c64e7603b2824e7731f23db891d301a130fbc1cab131a0c699a217e00cac73aef60c7e958f33952c6a4e3997eea0b503a8048cea0ce5fa20e73deb3ad3ba26fc4c2cdf0efceade6bde4ad35976b0bb943cbb82315127a671732cac23b2386460f4bf58ace56168b22736667192122c05e0e37d119d0f6b62335c60b2eb696bce2590131c728144ffec8b0ac0fa26b0797f250fdf9788a932ba22f8763114bd32b94ac4be9dad11f11cbd25429121ec82daaf8941b981859d40639a5e1fa030482b54eac0fd4c26d13c7790b0b8876c154613dbf3def79e05119bdfdf198821a080860b9f87a7038e40be67cc7c25129b5917aa8adf98ce1122e03720c650a3eb7702006f9e67bbabb0c282db0481df82b2d8b87a75048855ee8c1a9c79d9fcdb8d3a55219998704e6b3d4d50c9954482d7c45332310c2eac2f059c3c0d6996ed64f1bf3670c63140d93d66c949ab3030f2b3eb8a56673c06400a38f20b6d7d9486aaaef63c8302714c0530761de48a281befee0bb04fa28c192c5e0f93e2c13b303ee6bdd5ad42625a5f2a5da603570a3a84885dfbce844923053eb1ea481239db1f327fb727604eb48d30c4172cfa72b57e0114fd227869980f816ab514901e457e13946a426619726a34c5de933d5e7eb552945695e15fd796dac5d40a8a17e9352e2a33b0593374151dbd31736ad55ef9d29a66339dc5673c77663e10d65ce23ca78a72a5c67794c529195078bde8804c3da0942d2ea95fc882337c2a18a698d9ebc10bad1b995c7e65f9bc43fbc8efaa3c314c5b67e103f95af72efb0f2661f42e56e70c0b366cf2416b8adccad742e2536253d49dc2d2469b84b841eef77e68b69d0ca4df6ef87ec3c9c50c0fad8f47746027dc499b1463e53c22919380359a847e3f457b0dda53c34caf48e6693fbd29f3a3d0ce2a9f459afe17cd00a43619928448da396393f65fb561a5dc4ef55e5084a65e98d37a61b0e2fd7b8cef310e2be67665d59f9ffe80147de2197101c290b0a4d6a49a76d31d1f2f496263ee92d2c5169b95ceebe256d5ec84840a3cf814c5b3dde313556d8b4fd1eea5232022b76f487724ba828c7f08872b93b00b6b7d600cf74206db2f2348b980c1e93d6a0d3aecbbff6b21f0793bbbe93f5fba74ccc9b9aab32d343c5e7f81dee37c4efb4ac4d84fe9a7a06ac5d71c4096693d0c7f0defb61d2d17a41307bb2dc841da4252f1c90f7f4d8454229f0598c4a0d036e32ca295facefb131a3da3c2e89de7e4690df8972bb4d961b4afd166136a4489ccb58a6df2ab127790d1b646354a5bfff399b9d510a867060ee3a948fdf35822a3e9ec85e07a6dcce96a23df3962f8a3548d07a8cfe5d8aad7cdc687a4a8de2019db3618f2efccfe0d13f73e1d4ab0e880665ee639fff9a130c32387539ce776f0ce949be4b8d32993401dffbe60296e77ccec132b97a18531a37ccc615aa12237b592c0e1bdc904f6341c1849d82f1e00e8a27211b5710ff401dcf7de409f90ff63d0cd1bd702fcb64e4546002994e89e007a13dd274252f98ff2ebb342752095b0f7761450e417d104e7f29c79a5e597f2b2b52db2f240bd637f7916488e18e3e71ff8b8de1607889eca1d3f5c7abbf8eedabe2e574c610cd7809e8ad8472415b5695f792ead3359e2aae18c755f73e0b4c196a45f9d54e21aae811e772dae62466e5797e2ef038ac725983f7b5b0ec0b08eccf3d9f83195af77328cc8aa6d047b695143e349bee7f95e5907d943629e5821b226cd43904bbd5cdda85d07d9dc23362d11d845939f4790242b8ab67afb38a8cefe78af32dff5e5f94db4be7af21e2a85e6a5f851682e1e09bc9268cd09ad1b686081bb4918741736894b9bc0cea4be470c88888e2f244b3e5acdd2715515ff669c06b958d1a2d3ca503c22a9ae51dd5d273395cea1cb7e980ed4652d90de281c3097dd631f582f7ba3a8e42345a3eaf5bc08e1168977e4406353b39b52cfa21e64dace90424487097df9d04684b1988deb6393aae08eb5641bd9d391e9ee0452071999730a7523414aca82de80cf6adfc4bb03b15b9e4876c2f9ba7fa02c55eda51c3711a38f60e9390fb23e3b6245889aefec136e38715fcf74ad137afc1295051d45fd6eb85f72c44c630f1829c6145d3944d46202049227045dfb7396f847d578df547730908e1783ad5a63e8be89486b44989c02d41e5b46581207fac6f96bbf50cf1f2eb6c2b19bb282a93fc60d582d80c95d0fb3358139341b262d8bf7460629b85252ab9fdb4144c33fe9b0e41e6f2f4c99efa2922a7aab9a759b6508f5c8b9c6711d98dff2b0f69ce3239e0ad9f99bd4983c707853d3c6e40be815fbaa2e17d618656ec28002e4b2ff239dbef666d784df888a873211e16f47fec476b52eb58d3ad37968a691f96942e16519a3eb306a77f268c0baf0af19d133859792b6fcc114db185ebe51119d66bf250eccbb24c0af6dad9f46b3cbaa2d152074dfe750f8eaefd6fb381799c3c8e35c8bc3b3509edf189aece823bf43c4d9bf6a73fa8d27ee1083230954b3bf41e1ed902ac47c6a1b9ce1d00a72926d0af1b4b162419dd947143560e706b35c8d714b0addb47d37c87e88bd9cf4fd50dacaf1edda9bbecb87b9ec5c928813103f5d5a9cd08b9ac800e376d62a91bb3ffce7b7af5dcda20f417fe8f046e8f49eb89f204caeed1921f58f2654725b7eff4afe8bff8c9443b448af73fac4ee949589ca2f228433bc47fb64a3c890537339c8fe8a39c4afbfa827b253dac455bb90c1245bebaa4bfc5759b96b883d0bbe8a476bfd96b1814e50c3a66d0c689f13f5bcbb2842a074cd8538f81c7bb271ec646d09de89e99a4c660437762a9817fa4f5cc5a30cd8739230879f54f2d40ca982b2cd3663a55d275b14025ae4b66a023f122fb9832677abe9c63786451cc4d353eb97cf92ad62d61ff97b861adfbcb1cdcf507a4fa14e540b12b97304d594192e58a006512823b1ebf027f04c09ff04157aa1de4e271f6f20cd8c4b1460f08386a637a53014b0df111190718e5ad7ec1f28ba70001ba2663f11159e44369efbfc987f998b0bffbd3850ab52d8ef25de273e110be32c0c5ea1c3fbe4f434f80abbc214c27529adec0f99a6037f0ad417b22279e2a8a9f4fb5997c9457d5470ef312b262d50b463116d74f1995e3933a8a1ade675d6904c55e68d341fc0e02e841fddd2b7d370b84be6eaa7bb9c7e9624eb870ac7d4f0c01f2bef8fbfa93c7a87414d213c593a8e00cc040008fa83ce76eb6318e7da4ed6c89e4d7dc215d56683d37298c74b3a2238c0c4de9645962d62391311a59b4ed123868ca71bccceab67dee3f0c55a36f1473ffbe8b5ac1c6e58e212b42cca0578c190048a14d970c943c9ef390b5249b4475e3150af556814afc56894c7d0f4911afbaef2607b00ed44f611dc6cd241b87cad534676854aeafa886de48a7740893686b6d968efcded76b8f130fee67febd7e65bb057777d470949181db09301c375ecf2107d2d11c614139ada2840764b033dd880b98b66490ea7d14c72dc3ecd8507fd9b460cbab733f3a038e5016bd4009d96002ee3af74c40de90cf53b072dff464a8e704cf0f1d0ecea12438b83b06946de426983fef80a4866a90de6a436e55986708945064258bd5761ae985b9c268b45ba8a2bb4e85c408f9bda67bf08a771b8e05a49b78391cf43f29b8f369a3728bd03d2b3e4c9fac4a487fc9dcdc822cede4fdb8ab9c5f10aaf4918d1282cd3d6935f6fca43730856f8a8bd32c9f59d0d96b896cb1a3c679b5c37277432cab01377350d4038b2bb14478b2b0d2196c48e67c74b4b1a641853287435b29af17427aea72672efd203f059d07e2505ef0ba472a7c4b86701cdb080be4dc543e1d5867d649fd705fde53cce0bda43e2dc8b155276c5f02a6145a7276ad87edbfc06d6b25074363198de7104ab1c120dca75c4997af562dcb92f8721ac821ee8f33c99ec4e0e7a2007a4f366cdbaec807f09011024c0bef3ee29366f93fac149b6a45a4b1fcec279afe406a4cc373ee5b083b4bf657b6a5a39073a12466f4a1f0aee9218747dd8dfdb6f19d90ac68b5055c627b77cad0f2e6b0a48e5e0e0362bce9526cfe74a5e582fb15522972366a7f0cb215356744431c7467beec0f3f85402b562ec2cfe2df97c767bac02d3754655503cbb9202dceb9f919e040ce661fe69d5bf771c7467ba72462b08553f3a2a5c8279b2c281963b329bf32a6523c8da4c4e3df521fc2dcc17c63644488e41565ddc8479dedfa0c54af4f7193ade1cfc5e8adf5bc9fc10da24e9b38bb1e218071282bdaf1b3f4124a751d0a203919bfde5b0d075f0f172a9e60348a4d13f83e15ee02faa697c1f40341b3fcd8e0d313883bce282c9af26080296fa82e170398ecfbda2f5922c887aaca2843e8acea312e54e19b5ee492ade1e46f146078176771f51392188c06ecab0c8592b1d964a3cb99ba5692100ac0739b371f2f2c6846d11281b96582d51a0b1ed08b6d12f7f03ce7b10dbdd81292d8e07d617c827b300fc736e434675b5b08a4cb96d479209107e7d0e408d46e6a5e664352501aab32a2137b40f52a62d2dab7df57420266766fe3316d8218dc4094488949be798edbd7859e4f58bed176a34b2236e6bbdc10c067154b9871f1852805e3b834448ffb3c0ecf1a6a6151674f3781227c0637d097c393165d58e2e132798aba12129978b098a22773aa9597377968306f1968264b6e55d934941811c2671ea4aa8d2ef0dc3990f5947bada874da9bd645a5f4b3695a56ff26ac85d21581ea7305b9cdc6d88aae794aa5125e40ea5679dc9256a69b4b83d872f03e1766fa32e26e60916ca46bbabca29e0f49a306f2205ecb3103b116b743b651ba60085b791d5ed10142f87833b765648db6235c81a1c861347beee8f8ce3c01f55911fa426c434d3e25ed7a5358bed9c7552b02e49160538d682bf47079c59b0ff5cde00a08d9887ce57321f866c4d66bf8c50c077548fdfecef73db4611f4b9e694e0af5f2641e103165d432ce7bb640bb8e31e634769a647698880630e1b0ecf89ba1f806866fb8ed98cf5ecf3e66cc961af1bc211c4e904e3da477f43746875703aaddbcc9533ede0413a5f3c73e906cb101e8a2429c5ce4d98a3f4d9555794fe7100356e4772665eb953558b32abec057229c0abc2f69ac11d581fd8861dfa0be7564a39dc4c07c849e362a7034e441692ae71bd3317429a87293d75794fe8f6302af104752642e0f8b4610667ee9652a309f61ba49023fa7ea13829bf8126faa9260e219efc8b660f27b015a32fe9055a79d0435a7e109bfa7c0f568b99a3ae0521213bdd8aa5e7aadade60c9aa51b14ae7b771bc178b9dd343fb64ee77944d9427d73f7c42dfe963e11e8d87a96971e09a1da7b84af182946c83ba2da209f21c194464f21dd068a13d8fb5b4483b7b06b093080002400000000308000140000000160900010073797a30"], 0x12f8}}, 0x40) r2 = syz_io_uring_setup(0x574e, &(0x7f0000000280)={0x0, 0x3b40, 0x1, 0xffffffff, 0x2af, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.453417224s ago: executing program 0 (id=871): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'vcan0\x00'}}, 0x1e) syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r4) 2.366804686s ago: executing program 4 (id=872): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0xf0ff, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.196241989s ago: executing program 4 (id=874): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x2000000, 0x0) close_range(r1, r0, 0x2) membarrier(0x2, 0x0) gettid() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x4, 0x7, 0x20, @local, @mcast2, 0x7, 0x80, 0x4, 0x7}}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x70) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)={0x40000004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000feffffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) move_pages(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000140)=[0x2], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x2) 1.715812458s ago: executing program 1 (id=879): keyctl$get_keyring_id(0x0, 0x0, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0xff, 0x8cd, 0x8, 0x2}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff, 0x40}}) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffa) keyctl$invalidate(0x15, r1) 1.641603909s ago: executing program 1 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1c0) link(&(0x7f0000000240)='./debug\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x3}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x1808442, &(0x7f0000000740)=ANY=[], 0x13, 0x240, &(0x7f00000008c0)="$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") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210003c0000000000000e00001c"], 0x4a) 1.493106192s ago: executing program 0 (id=883): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x20) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x20028800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000) unshare(0x28020400) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) write$P9_RREADLINK(r3, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) geteuid() setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r5, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x44}, 0x8) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 1.320673565s ago: executing program 4 (id=886): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000001c0)='btrfs\x00', 0x0, &(0x7f00000010c0)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\x01\x0e\xd9\v\xda\xbfS\x16Ka\x03\x9a\xe4;\x86\xbf\xb6&\x96 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.020001911s ago: executing program 8 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0xed, 0x4, 0x2, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @call={0x85, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x94000516) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) connect$pppoe(r1, &(0x7f0000000740)={0x18, 0x0, {0x103, @empty, 'bond0\x00'}}, 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) 906.405213ms ago: executing program 8 (id=892): syz_read_part_table(0x5e4, &(0x7f0000000600)="$eJzs3L+LHGUYB/DvzM7+guj5B1gspBEFI9iJi2k0pguinaCtxYnEQixkd1ER/PEHpBUtjEKItYWCBDGdlQiHFiL2FqbweGVnZ2YP1MY7xMDnU9zzvO/M8z4z986Us+HuVg6SUiW329GHozY0dTLdJr8kb4+TzQvNUDDuYpXkuetPPnV5caWaDnPb2XV3dLrvMulik0WXfdHkg+uX3mnzdaqs0qUZfzbJtl1TdnXX/nrRd6qM0pzp/4F/pfmy7DZiku/yeZLDarTd/GmyycfJfZm1511IMiqltNu8TubJaHgqTuHG8tbmiS6fp3vSxrvR6t2qPNIdG6eUUuqszveVo+T+xy9c/btF2/pNe3v9VCllfK6vrWfDgcPjSZ8++s1Pq2xmw+op9X7Jo3nyytEzD7dXsn056v2bBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8cDrz74Vd0PLrZ/qyF/+pPU+1PXyR99vpidUf8by1sHb751tc7ry5e+f/mNny/9mt+SjJOcS6bDeS/uws332tB0s6NT9z88rieffvT1fJjolq6Sb8//cKf0HY66+NpjJ4qX9an7AwAAAAAAAAAAAAAAAAAAwNbNXF5cqfNsUuX57D/3L5klVdUPZ0kppfxeWv3H/5Nr93bZ7R9TbYtSqpOrX0wO7knK9P2H2p8V2BWWUpq2RfXf3CP/7M8AAAD//4G2Ylo=") (fail_nth: 3) 764.460806ms ago: executing program 8 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102020, 0x2e, 0x0, 0x4, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) 764.256936ms ago: executing program 5 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000b30000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020003642564000000000900010073797a30000000000800054000000002"], 0x40c4}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000b30000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020003642564000000000900010073797a30000000000800054000000002"], 0x40c4}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 761.281116ms ago: executing program 0 (id=895): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7777, 0xdca, 0x10000, 0x2, 0x6, 0x0}) capget(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000140)={0x2, 0x9, 0x3, 0x1a, 0x8, 0x4}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r2, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)='\a', 0x1}], 0x1}}], 0x1, 0x2006c0c0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x22f8, 0x8d, 0x2}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x200005, 0x44, 0x2, 0xb, 0x400, r3}, 0x20) sendto$inet(r2, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7777, 0xdca, 0x10000, 0x2, 0x6}) (async) capget(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000140)={0x2, 0x9, 0x3, 0x1a, 0x8, 0x4}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) (async) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) sendmmsg(r2, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)='\a', 0x1}], 0x1}}], 0x1, 0x2006c0c0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x22f8, 0x8d, 0x2}, &(0x7f0000000280)=0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x200005, 0x44, 0x2, 0xb, 0x400, r3}, 0x20) (async) sendto$inet(r2, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) (async) 606.710519ms ago: executing program 8 (id=896): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='proc_dir/scsi/scsi\x00', 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0xdd, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) creat(&(0x7f0000000080)='proc_dir/scsi/scsi\x00', 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0xdd, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) (async) 575.221489ms ago: executing program 1 (id=897): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000005608000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) 517.81495ms ago: executing program 8 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x40, 0xe7, 0x8, 0xe, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x10, 0x1, 0x5}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@loopback, @loopback, 0x0}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004081}, 0x4) r6 = io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x87c62, 0x3201, 0x3, 0x969}) (async) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a300000000028000480080001"], 0x154}}, 0x8044) (async, rerun: 32) io_uring_enter(r6, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 500.002311ms ago: executing program 1 (id=899): perf_event_open(&(0x7f0000000140)={0x2, 0xa7, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1221, 0xfffffffb, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000019040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r1 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000019080)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000006"], 0x48) listns(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = accept(r0, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x12, 0x0, 0x0) ptrace(0x10, r1) 434.786132ms ago: executing program 5 (id=900): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") pipe(&(0x7f0000000000)) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x3}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xf}, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4b4483, 0x0, 0x8}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) iopl(0x2) clock_getres(0x6, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x105002, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) fchown(r1, 0x0, 0xee01) 340.029184ms ago: executing program 4 (id=901): recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2}, 0x10102) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/icmp6\x00') pread64(r0, &(0x7f0000000140)=""/184, 0xb8, 0xd) creat(&(0x7f0000000080)='./file0\x00', 0xb7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x320c8d4, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030342c636f6e74657874b6"]) 272.795745ms ago: executing program 4 (id=902): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x79, 0x3, 0xa8, 0x9, 0x0, 0x7, 0xc0141, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}, 0x40, 0x9, 0x5, 0x6, 0x2, 0x6, 0x5, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) pwrite64(r2, 0x0, 0x0, 0x7ff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0xffffffff, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x100000}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}], 0x0) (async) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf251100004008000100", @ANYRES32=0x0, @ANYBLOB="0800150001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) (async) socketpair(0x11, 0xa, 0x300, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x1, 0x8, 0x3fe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x198, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x101}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x4, "02528240bf8633cc2316be070461599202291aa7e0265f769d445c3e3f3a"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x6, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x0, {{0x2, 0x4e23, @empty}}}, 0x88) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async) setuid(0xee01) (async) statfs(&(0x7f0000000200)='.\x00', 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000074000880700000804800098028000080060001000a0000001400020000000000000000000000ffff0a01010105000300000000001c000080060001000200000008000200ffffffff05000300020000002400010000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000034e0591cce50d30a60c31630c5031cfbc88d273338ba5f676f419366f8002976ab14c79005e6e2b4cb9b0b72f419893b0bd050bb2d35bb6bafeb8af144691de41d865c496b133780ff4463ad2669022530c3e57f493c2e4356ad3c98fada1c498c0d67cc3c2ab4e46441ec5059b2ebd39d73bfdc704ae4b2f5a3e1e2a43fe2cbe2da49fa92e0f681c8314208a331488990d87caaa0c7ceb48fde3847fa8010480c05b8dfd79dda094c5549ea926f7ffff2e9d079a4120000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 226.826246ms ago: executing program 0 (id=903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xffe0, 0x10}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="710301ff050102153127c0081d70bde172d985fc0870523050c04b0872e2"], 0x1e) socket$inet(0x2, 0xa, 0xf) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 147.274858ms ago: executing program 5 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xb0442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000002e000000850000001100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1bdfffffffffffffff0000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000002200000000000000bc95d7f033cbe4e8667d8d614625b743cb19859659a3f6ce18587537a6750f7bf7a702d0e3909104b4fe0af85349d4e90bb1ed70830b9f39b51fb982508d425f4ef470add15b91b9aec095dd9b719f8bf342e989a9a84d656850d3fac65394086ae97fdd4087efe0bc7d4a4dc8ee0d18c1bc147a96c77852a39a015836fc4ce31471b1f8d34da81e34ac2b864b8cd76b25b719bf78133417e65b54dff0fd24d32c30e7c003223009f60fd960347dd8fe47aa10d54e2babaf247fb70846", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="018e8c40bf5ffae243941e000000000000f43e0600000000000000004400002589721e4dbf000000001936dd2100"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6(0xa, 0x80000, 0x8000000003c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r8, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r11, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r11, @ANYBLOB="f9ff0200ac1e0001"], 0x44}}, 0x40848c0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) 78.702259ms ago: executing program 1 (id=905): r0 = socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x2, 0x7, 0x7fffffff, 0x4, 0xc4c, 0x5}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r2, &(0x7f0000000680)=[{&(0x7f0000000080)=""/127, 0x7f}], 0x1, 0xfffffffd, 0x558, 0x16) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) getsockopt$sock_buf(r1, 0x1, 0x10, 0x0, &(0x7f00000000c0)) 72.324169ms ago: executing program 8 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102020, 0x2e, 0x0, 0x4, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) 0s ago: executing program 1 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1c0) link(&(0x7f0000000240)='./debug\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000380)) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000000200)='G', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010002fff0000000080000000001bb2007e9dd1aa1c83838d820fe8d6bd6e62316fbccac181ec2325", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r8, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) kernel console output (not intermixed with test programs): 972 comm=syz.0.426 [ 98.265038][ T5976] loop6: detected capacity change from 0 to 512 [ 98.273254][ T5976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.619757][ T5982] loop7: detected capacity change from 0 to 512 [ 98.651507][ T5982] EXT4-fs (loop7): orphan cleanup on readonly fs [ 98.654575][ T5982] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 98.656623][ T5982] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 98.658214][ T5982] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.429: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 98.658411][ T5982] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.660045][ T5982] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.429: couldn't read orphan inode 13 (err -117) [ 98.660189][ T5982] loop7: lost filesystem error report for type 5 error -117 [ 98.665535][ T5982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.060732][ T4737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.074606][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.122961][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.186189][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.225810][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.271560][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.271596][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.271746][ T5987] bridge_slave_0: entered allmulticast mode [ 99.272153][ T5987] bridge_slave_0: entered promiscuous mode [ 99.273155][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.273185][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.273277][ T5987] bridge_slave_1: entered allmulticast mode [ 99.273706][ T5987] bridge_slave_1: entered promiscuous mode [ 99.286392][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.287807][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.330100][ T5987] team0: Port device team_slave_0 added [ 99.331245][ T5987] team0: Port device team_slave_1 added [ 99.344558][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.344573][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.344654][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.345292][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.345303][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.345337][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.436029][ T31] bridge_slave_1: left allmulticast mode [ 99.436050][ T31] bridge_slave_1: left promiscuous mode [ 99.436217][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.452575][ T31] bridge_slave_0: left allmulticast mode [ 99.452596][ T31] bridge_slave_0: left promiscuous mode [ 99.452724][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.523063][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.533862][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.543786][ T31] bond0 (unregistering): Released all slaves [ 99.545629][ T31] bond1 (unregistering): Released all slaves [ 99.555428][ T5987] hsr_slave_0: entered promiscuous mode [ 99.556239][ T5987] hsr_slave_1: entered promiscuous mode [ 99.556442][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 99.556454][ T5987] Cannot create hsr debugfs directory [ 99.591707][ T31] hsr_slave_0: left promiscuous mode [ 99.597216][ T31] hsr_slave_1: left promiscuous mode [ 99.597738][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.597753][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.603010][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.603024][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.613752][ T31] veth1_macvtap: left promiscuous mode [ 99.614162][ T31] veth0_macvtap: left promiscuous mode [ 99.614310][ T31] veth1_vlan: left promiscuous mode [ 99.614345][ T31] veth0_vlan: left promiscuous mode [ 99.691527][ T31] team0 (unregistering): Port device team_slave_1 removed [ 99.698907][ T31] team0 (unregistering): Port device team_slave_0 removed [ 100.600723][ T5947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.622669][ T5987] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 100.645967][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.646533][ T5987] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 100.670178][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.677840][ T4306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.752598][ T5987] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 100.763952][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.772687][ T5987] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 100.799603][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.839319][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 100.839359][ T29] audit: type=1400 audit(1788026434.739:1248): avc: denied { write } for pid=6008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.847848][ T6032] loop7: detected capacity change from 0 to 512 [ 100.893796][ T29] audit: type=1400 audit(1788026434.799:1249): avc: denied { write } for pid=6036 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.953724][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 100.965008][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.986114][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.995566][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.995602][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.006016][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.006051][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.149278][ T29] audit: type=1400 audit(1788026435.049:1250): avc: denied { write } for pid=6046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.240361][ T29] audit: type=1400 audit(1788026435.139:1251): avc: denied { write } for pid=6063 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.292713][ T6051] tmpfs: Bad value for 'size' [ 101.474289][ T29] audit: type=1400 audit(1788026435.379:1252): avc: denied { write } for pid=6072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.480946][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.487059][ T6051] __nla_validate_parse: 3 callbacks suppressed [ 101.487082][ T6051] netlink: 48 bytes leftover after parsing attributes in process `syz.8.437'. [ 101.495609][ T29] audit: type=1400 audit(1788026435.379:1253): avc: denied { map } for pid=6048 comm="syz.8.437" path="socket:[15456]" dev="sockfs" ino=15456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.497141][ T29] audit: type=1400 audit(1788026435.379:1254): avc: denied { read } for pid=6048 comm="syz.8.437" path="socket:[15456]" dev="sockfs" ino=15456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.648199][ T29] audit: type=1400 audit(1788026435.549:1255): avc: denied { write } for pid=6100 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.713431][ T6109] loop7: detected capacity change from 0 to 128 [ 101.723522][ T29] audit: type=1400 audit(1788026435.639:1256): avc: denied { getopt } for pid=6103 comm="syz.7.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.779283][ T5987] veth0_vlan: entered promiscuous mode [ 101.787213][ T5987] veth1_vlan: entered promiscuous mode [ 101.817392][ T5987] veth0_macvtap: entered promiscuous mode [ 101.824424][ T5987] veth1_macvtap: entered promiscuous mode [ 101.843480][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.857369][ T29] audit: type=1400 audit(1788026435.769:1257): avc: denied { setopt } for pid=6120 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.857532][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.863354][ T6123] vcan0: tx address claim with dlc 6 [ 101.996958][ T6136] loop8: detected capacity change from 0 to 4096 [ 102.008823][ T6136] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.009915][ T31] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.010016][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.010051][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.010084][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.084622][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 102.177103][ T6136] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 102.208754][ T6154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1053 sclass=netlink_route_socket pid=6154 comm=syz.3.447 [ 102.208901][ T6155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1053 sclass=netlink_route_socket pid=6155 comm=syz.3.447 [ 102.246649][ T6154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.246816][ T6154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.281311][ T4785] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.365899][ T6174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.375179][ T6174] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 102.375252][ T6174] SELinux: failed to load policy [ 102.385557][ T6175] ip_tables: iptables: counters copy to user failed while replacing table [ 102.662619][ T6183] netlink: 'syz.3.454': attribute type 3 has an invalid length. [ 102.673699][ T6183] loop3: detected capacity change from 0 to 2048 [ 103.710243][ T6208] loop3: detected capacity change from 0 to 1024 [ 103.720201][ T6208] EXT4-fs (loop3): invalid inodes per group: 204800 [ 104.611615][ T6217] loop3: detected capacity change from 0 to 1024 [ 104.766957][ T6219] dummy0: left promiscuous mode [ 104.816274][ T6222] loop3: detected capacity change from 0 to 512 [ 104.828978][ T6222] ext3: Bad value for 'mb_optimize_scan' [ 104.886739][ T6219] bond1: left promiscuous mode [ 104.973819][ T6138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.327801][ T6219] syz.3.465 (6219) used greatest stack depth: 9448 bytes left [ 105.829663][ T6257] loop3: detected capacity change from 0 to 1024 [ 105.842089][ T6257] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.843069][ T6257] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.869593][ T6257] JBD2: no valid journal superblock found [ 105.869853][ T6257] EXT4-fs (loop3): Could not load journal inode [ 105.963643][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 106.504388][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 106.504413][ T29] audit: type=1400 audit(1788026440.409:1278): avc: denied { write } for pid=6262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.670098][ T29] audit: type=1400 audit(1788026440.579:1279): avc: denied { write } for pid=6278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.716847][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 106.877394][ T29] audit: type=1400 audit(1788026440.779:1280): avc: denied { write } for pid=6280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.922642][ T29] audit: type=1400 audit(1788026440.829:1281): avc: denied { write } for pid=6299 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.064270][ T29] audit: type=1400 audit(1788026440.969:1282): avc: denied { read } for pid=6301 comm="syz.7.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.173436][ T29] audit: type=1400 audit(1788026441.079:1283): avc: denied { write } for pid=6303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.248318][ T29] audit: type=1400 audit(1788026441.149:1284): avc: denied { write } for pid=6318 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.428428][ T6323] netlink: 'syz.0.477': attribute type 21 has an invalid length. [ 107.428478][ T6323] netlink: 128 bytes leftover after parsing attributes in process `syz.0.477'. [ 107.428867][ T6323] netlink: 'syz.0.477': attribute type 5 has an invalid length. [ 107.429008][ T6323] netlink: 'syz.0.477': attribute type 6 has an invalid length. [ 107.429097][ T6323] netlink: 3 bytes leftover after parsing attributes in process `syz.0.477'. [ 107.607869][ T6323] tipc: Started in network mode [ 107.615422][ T6323] tipc: Node identity ac14142f, cluster identity 4711 [ 107.626897][ T6323] tipc: New replicast peer: 127.0.0.1 [ 107.638238][ T6323] tipc: Enabled bearer , priority 10 [ 107.648791][ T6323] tipc: New replicast peer: 172.20.20.11 [ 107.654997][ T29] audit: type=1400 audit(1788026441.559:1285): avc: denied { write } for pid=6320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.710098][ T29] audit: type=1400 audit(1788026441.619:1286): avc: denied { write } for pid=6341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.784513][ T29] audit: type=1400 audit(1788026441.679:1287): avc: denied { listen } for pid=6342 comm="syz.8.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.796424][ T6347] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 107.796455][ T6347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.796499][ T6347] vhci_hcd vhci_hcd.0: Device attached [ 107.800302][ T6353] vhci_hcd: cannot find the pending unlink 4096 [ 108.041330][ T6353] vhci_hcd: connection closed [ 108.042154][ T12] vhci_hcd vhci_hcd.8: stop threads [ 108.042177][ T12] vhci_hcd vhci_hcd.8: release socket [ 108.042215][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 108.060689][ T24] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 108.082015][ T6372] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 108.111211][ T6376] loop9: detected capacity change from 0 to 512 [ 108.115658][ T6376] ext4: Bad value for 'data' [ 108.128216][ T6376] netlink: 96 bytes leftover after parsing attributes in process `syz.9.484'. [ 108.381687][ T6398] loop9: detected capacity change from 0 to 512 [ 108.739379][ T3612] tipc: Node number set to 2886997039 [ 108.758642][ T6398] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 108.758851][ T6398] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #11: comm syz.9.484: corrupted inode contents [ 108.758873][ T6398] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.773425][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 108.773449][ C0] EXT4-fs (loop9): initial error at time 1788026442: mb_free_blocks:2049: inode 11: block 64 [ 108.773489][ C0] EXT4-fs (loop9): last error at time 1788026442: mb_free_blocks:2049: inode 11: block 64 [ 108.821409][ T6398] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #11: comm syz.9.484: mark_inode_dirty error [ 108.821488][ T6398] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.821627][ T6398] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.484: invalid indirect mapped block 1 (level 1) [ 108.821655][ T6398] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.821784][ T6398] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #11: comm syz.9.484: corrupted inode contents [ 108.821808][ T6398] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.822062][ T6398] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem [ 108.822079][ T6398] loop9: lost filesystem error report for type 5 error -117 [ 108.822180][ T6398] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #11: comm syz.9.484: corrupted inode contents [ 108.822204][ T6398] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.822311][ T6398] EXT4-fs error (device loop9): ext4_truncate:4721: inode #11: comm syz.9.484: mark_inode_dirty error [ 108.822335][ T6398] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.822499][ T6398] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 108.822516][ T6398] loop9: lost filesystem error report for type 5 error -117 [ 108.822653][ T6398] EXT4-fs (loop9): 1 truncate cleaned up [ 108.822983][ T6398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.138017][ T5987] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.170119][ T70] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.233884][ T6446] unsupported nlmsg_type 40 [ 110.250911][ T6446] ±ÿ: renamed from lo (while UP) [ 110.281855][ T70] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.286743][ T6446] netlink: 160 bytes leftover after parsing attributes in process `syz.9.493'. [ 110.346359][ T70] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.392999][ T70] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.432739][ T6466] loop9: detected capacity change from 0 to 512 [ 110.439603][ T6466] EXT4-fs: inline encryption not supported [ 110.447466][ T6466] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 110.447503][ T6466] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.447593][ T6466] EXT4-fs (loop9): The Hurd can't support 64-bit file systems [ 110.581136][ T6485] loop9: detected capacity change from 0 to 512 [ 110.653448][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.9.499'. [ 110.956805][ T70] bridge_slave_1: left allmulticast mode [ 110.956831][ T70] bridge_slave_1: left promiscuous mode [ 110.957050][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.958505][ T70] bridge_slave_0: left allmulticast mode [ 110.958533][ T70] bridge_slave_0: left promiscuous mode [ 110.958700][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.241832][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.254836][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.264470][ T70] bond0 (unregistering): Released all slaves [ 111.268696][ T70] bond1 (unregistering): Released all slaves [ 111.320050][ T70] hsr_slave_0: left promiscuous mode [ 111.354351][ T70] hsr_slave_1: left promiscuous mode [ 111.355026][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.355041][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.368646][ T70] veth1_macvtap: left promiscuous mode [ 111.368768][ T70] veth0_macvtap: left promiscuous mode [ 111.368922][ T70] veth1_vlan: left promiscuous mode [ 111.368982][ T70] veth0_vlan: left promiscuous mode [ 111.536702][ T70] team0 (unregistering): Port device team_slave_1 removed [ 111.547448][ T70] team0 (unregistering): Port device team_slave_0 removed [ 111.638260][ T6505] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 111.638294][ T6505] bond1: option packets_per_slave: allowed values 0 - 65535 [ 111.656816][ T6505] bond1 (unregistering): Released all slaves [ 111.791911][ T6525] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 111.802033][ T6509] batman_adv: batadv0: Interface deactivated: macvtap1 [ 111.820824][ T6509] batman_adv: batadv0: Removing interface: macvtap1 [ 111.861680][ T6512] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 111.864392][ T6512] bond1 (unregistering): Released all slaves [ 112.054321][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.054362][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.054629][ T6450] bridge_slave_0: entered allmulticast mode [ 112.055066][ T6450] bridge_slave_0: entered promiscuous mode [ 112.056199][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.056229][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.056332][ T6450] bridge_slave_1: entered allmulticast mode [ 112.056758][ T6450] bridge_slave_1: entered promiscuous mode [ 112.068834][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.070368][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.082121][ T6450] team0: Port device team_slave_0 added [ 112.083318][ T6450] team0: Port device team_slave_1 added [ 112.094126][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.094149][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.094177][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.094704][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.094715][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.094746][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.124469][ T6450] hsr_slave_0: entered promiscuous mode [ 112.126868][ T6450] hsr_slave_1: entered promiscuous mode [ 112.357352][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 112.357383][ T29] audit: type=1400 audit(1788026446.259:1303): avc: denied { write } for pid=6537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.396138][ T70] IPVS: stop unused estimator thread 0... [ 112.407560][ T29] audit: type=1400 audit(1788026446.309:1304): avc: denied { write } for pid=6563 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.461871][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 112.497672][ T70] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.537949][ T6570] netlink: 108 bytes leftover after parsing attributes in process `syz.0.511'. [ 112.554851][ T70] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.623865][ T70] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.648630][ T29] audit: type=1400 audit(1788026446.549:1305): avc: denied { write } for pid=6572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.691409][ T29] audit: type=1400 audit(1788026446.599:1306): avc: denied { write } for pid=6584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.718015][ T70] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.771859][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 112.822233][ T6450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.836037][ T6450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.848135][ T6450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.851365][ T6450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.852050][ T6450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.858014][ T6450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.863899][ T6450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.873020][ T6450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.901181][ T70] bridge_slave_1: left allmulticast mode [ 112.901252][ T70] bridge_slave_1: left promiscuous mode [ 112.901339][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.912990][ T70] bridge_slave_0: left allmulticast mode [ 112.913011][ T70] bridge_slave_0: left promiscuous mode [ 112.913193][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.026142][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.037010][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.046770][ T70] bond0 (unregistering): Released all slaves [ 113.084494][ T70] hsr_slave_0: left promiscuous mode [ 113.084822][ T70] hsr_slave_1: left promiscuous mode [ 113.085603][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.085618][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.110644][ T29] audit: type=1400 audit(1788026447.019:1307): avc: denied { write } for pid=6593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.135617][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.135640][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.144119][ T70] veth1_macvtap: left promiscuous mode [ 113.144147][ T70] veth0_macvtap: left promiscuous mode [ 113.144190][ T70] veth1_vlan: left promiscuous mode [ 113.144247][ T70] veth0_vlan: left promiscuous mode [ 113.146489][ T29] audit: type=1400 audit(1788026447.049:1308): avc: denied { write } for pid=6611 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.302723][ T70] team0 (unregistering): Port device team_slave_1 removed [ 113.312902][ T70] team0 (unregistering): Port device team_slave_0 removed [ 113.354976][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 113.416950][ T6614] geneve2: entered promiscuous mode [ 113.477656][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.477695][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.477821][ T6556] bridge_slave_0: entered allmulticast mode [ 113.478414][ T6556] bridge_slave_0: entered promiscuous mode [ 113.511821][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.511863][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.511942][ T6556] bridge_slave_1: entered allmulticast mode [ 113.512529][ T6556] bridge_slave_1: entered promiscuous mode [ 113.582557][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.586124][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.604345][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.622866][ T6556] team0: Port device team_slave_0 added [ 113.623733][ T6556] team0: Port device team_slave_1 added [ 113.641425][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.657657][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.657710][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.668243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.668322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.676101][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.676115][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.676162][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.677850][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.677892][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.677977][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.807029][ T29] audit: type=1400 audit(1788026447.709:1309): avc: denied { write } for pid=6620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.819830][ T6556] hsr_slave_0: entered promiscuous mode [ 113.820186][ T6556] hsr_slave_1: entered promiscuous mode [ 113.820489][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 113.820502][ T6556] Cannot create hsr debugfs directory [ 113.859951][ T29] audit: type=1400 audit(1788026447.769:1310): avc: denied { create } for pid=6630 comm="syz.8.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.932199][ T29] audit: type=1400 audit(1788026447.839:1311): avc: denied { ioctl } for pid=6630 comm="syz.8.514" path="socket:[16777]" dev="sockfs" ino=16777 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.936579][ T29] audit: type=1400 audit(1788026447.839:1312): avc: denied { write } for pid=6640 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.964583][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 114.049515][ T6654] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 114.049549][ T6654] SELinux: failed to load policy [ 114.092582][ T6665] tc_dump_action: action bad kind [ 114.161348][ T6672] ip_tables: iptables: counters copy to user failed while replacing table [ 114.213057][ T6672] loop3: detected capacity change from 0 to 512 [ 114.224203][ T6672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.278378][ T6672] EXT4-fs (loop3): 1 truncate cleaned up [ 114.283481][ T6672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.588918][ T6556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.598802][ T6556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.603816][ T6556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.613178][ T6556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.616576][ T6556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.632417][ T6556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.635151][ T6556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.645446][ T6556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.744298][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.769770][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.779069][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.779117][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.788001][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.788035][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.823436][ T6703] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.848015][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.914748][ T6703] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.947310][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.985164][ T6703] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.058533][ T6703] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.180319][ T3599] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.193891][ T3599] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.219603][ T3599] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.706750][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.714824][ T6450] veth0_vlan: entered promiscuous mode [ 115.722041][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.733691][ T6450] veth1_vlan: entered promiscuous mode [ 115.755283][ T6450] veth0_macvtap: entered promiscuous mode [ 115.766837][ T6450] veth1_macvtap: entered promiscuous mode [ 115.798097][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.805089][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.849927][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.850171][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.850253][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.850299][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.198671][ T6800] loop3: detected capacity change from 0 to 1024 [ 116.208708][ T6800] ext4: Unknown parameter 'euid<00000000000000000000' [ 116.270478][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 116.270619][ T6794] ip6tnl0: Caught tx_queue_len zero misconfig [ 116.271975][ T6556] veth0_vlan: entered promiscuous mode [ 116.285079][ T6556] veth1_vlan: entered promiscuous mode [ 116.329790][ T6556] veth0_macvtap: entered promiscuous mode [ 116.338023][ T6556] veth1_macvtap: entered promiscuous mode [ 116.368664][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.383046][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.444896][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.469327][ T3599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.470076][ T3599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.470193][ T3599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.470231][ T3599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.316421][ T6895] tc_dump_action: action bad kind [ 117.328321][ T6895] loop4: detected capacity change from 0 to 256 [ 117.528073][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 117.528098][ T29] audit: type=1400 audit(1788026451.429:1337): avc: denied { write } for pid=6900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.575726][ T29] audit: type=1400 audit(1788026451.479:1338): avc: denied { write } for pid=6913 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.751899][ T29] audit: type=1400 audit(1788026451.659:1339): avc: denied { write } for pid=6915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.797438][ T6930] 9pnet_fd: Insufficient options for proto=fd [ 117.821429][ T29] audit: type=1400 audit(1788026451.719:1340): avc: denied { write } for pid=6936 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.927103][ T6941] loop2: detected capacity change from 0 to 164 [ 117.963155][ T6941] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 118.018774][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 118.018856][ T6941] vcan0: entered promiscuous mode [ 118.018890][ T6941] vcan0: entered allmulticast mode [ 118.098761][ T29] audit: type=1400 audit(1788026451.999:1341): avc: denied { write } for pid=6942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.166728][ T29] audit: type=1400 audit(1788026452.069:1342): avc: denied { write } for pid=6961 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.195231][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 118.230681][ T29] audit: type=1400 audit(1788026452.139:1343): avc: denied { ioctl } for pid=6963 comm="syz.0.543" path="socket:[18722]" dev="sockfs" ino=18722 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.248767][ T324] Bluetooth: hci1: Frame reassembly failed (-84) [ 118.412408][ T29] audit: type=1400 audit(1788026452.319:1344): avc: denied { write } for pid=6970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.461316][ T29] audit: type=1400 audit(1788026452.359:1345): avc: denied { write } for pid=6983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.461512][ T6969] Bluetooth: hci0: command 0x1003 tx timeout [ 118.463421][ T4149] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.503517][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 118.647376][ T29] audit: type=1400 audit(1788026452.549:1346): avc: denied { write } for pid=6986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.906803][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 119.300039][ T7023] tc_dump_action: action bad kind [ 119.319874][ T7023] loop2: detected capacity change from 0 to 256 [ 119.584547][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 119.628395][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.549'. [ 119.628572][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.642708][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.975452][ T7065] netlink: 56 bytes leftover after parsing attributes in process `syz.4.552'. [ 120.093403][ T7074] loop4: detected capacity change from 0 to 512 [ 120.112181][ T7074] EXT4-fs: dax option not supported [ 120.299695][ T3546] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 120.353602][ T7090] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 120.539026][ T7104] loop2: detected capacity change from 0 to 512 [ 120.540709][ T7104] ext4: Unknown parameter 'measure' [ 120.581766][ T7104] SELinux: Context system_u:object_r:dpkg_exec_t:s0 is not valid (left unmapped). [ 120.778632][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.553'. [ 121.386925][ T7132] bond1: entered promiscuous mode [ 121.387119][ T7132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.608607][ T7052] kexec: Could not allocate control_code_buffer [ 121.622337][ T7149] loop2: detected capacity change from 0 to 1024 [ 121.681794][ T7149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.764146][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.860499][ T7159] loop8: detected capacity change from 0 to 512 [ 121.875816][ T7159] EXT4-fs (loop8): invalid #clusters per group: 95 [ 122.926607][ T7275] loop3: detected capacity change from 0 to 8192 [ 122.986453][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 122.986479][ T29] audit: type=1400 audit(1788026456.889:1385): avc: denied { read write } for pid=7274 comm="syz.3.569" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.986538][ T29] audit: type=1400 audit(1788026456.889:1386): avc: denied { ioctl open } for pid=7274 comm="syz.3.569" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 123.741005][ T4149] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.901146][ T3304] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 123.901177][ T3304] FAT-fs (loop3): Filesystem has been set read-only [ 124.369426][ T7127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.401654][ T7188] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 124.401674][ T7188] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.566'. [ 124.401704][ T7188] netlink: 9 bytes leftover after parsing attributes in process `syz.2.566'. [ 124.559935][ T7301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.573'. [ 124.607455][ T7301] loop2: detected capacity change from 0 to 736 [ 124.656305][ T7301] rock: directory entry would overflow storage [ 124.656323][ T7301] rock: sig=0x3b10, size=4, remaining=3 [ 124.810831][ T29] audit: type=1400 audit(1788026458.719:1387): avc: denied { write } for pid=7321 comm="syz.2.580" name="core" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.810884][ T29] audit: type=1400 audit(1788026458.719:1388): avc: denied { write } for pid=7321 comm="syz.2.580" name="core" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.811021][ T29] audit: type=1400 audit(1788026458.719:1389): avc: denied { remove_name } for pid=7321 comm="syz.2.580" name="rd_mcp_0" dev="configfs" ino=19068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.811045][ T29] audit: type=1400 audit(1788026458.719:1390): avc: denied { rmdir } for pid=7321 comm="syz.2.580" name="rd_mcp_0" dev="configfs" ino=19068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.813560][ T7322] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.580'. [ 125.357227][ T29] audit: type=1400 audit(1788026459.269:1391): avc: denied { read } for pid=7328 comm="syz.3.581" path="socket:[19076]" dev="sockfs" ino=19076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.469101][ T7332] netlink: 34 bytes leftover after parsing attributes in process `syz.2.582'. [ 125.548982][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 125.699760][ T7303] kexec: Could not allocate control_code_buffer [ 125.713535][ T7349] loop3: detected capacity change from 0 to 512 [ 125.746474][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.591'. [ 125.767226][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.591'. [ 125.859150][ T29] audit: type=1400 audit(1788026459.759:1392): avc: denied { mount } for pid=7358 comm="syz.0.589" name="/" dev="rpc_pipefs" ino=17853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 127.594368][ T7379] loop4: detected capacity change from 0 to 7 [ 127.618457][ T3896] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.620945][ T3896] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.622237][ T3896] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.624762][ T3896] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.628089][ T3896] Buffer I/O error on dev loop4, logical block 0, async page read [ 128.116289][ T7388] netlink: 36 bytes leftover after parsing attributes in process `syz.8.597'. [ 128.498748][ T29] audit: type=1400 audit(1788026462.399:1393): avc: denied { read } for pid=7419 comm="syz.2.606" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.500539][ T7420] tmpfs: Bad value for 'mpol' [ 128.702322][ T7430] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 128.708899][ T7430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.802096][ T7443] tc_dump_action: action bad kind [ 128.868370][ T7443] loop4: detected capacity change from 0 to 256 [ 129.033874][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'. [ 129.258841][ T29] audit: type=1400 audit(1788026463.159:1394): avc: denied { listen } for pid=7461 comm="syz.8.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.290683][ T7434] loop3: detected capacity change from 0 to 2048 [ 129.292398][ T29] audit: type=1400 audit(1788026463.199:1395): avc: denied { read } for pid=7461 comm="syz.8.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.393128][ T7434] loop3: p3 p4 < > [ 129.393365][ T7434] loop3: p3 size 201326592 extends beyond EOD, truncated [ 129.432773][ T29] audit: type=1400 audit(1788026463.339:1396): avc: denied { write } for pid=7450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.491686][ T29] audit: type=1400 audit(1788026463.389:1397): avc: denied { write } for pid=7488 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.593582][ T7499] tc_dump_action: action bad kind [ 129.615113][ T7492] loop3: detected capacity change from 0 to 1024 [ 129.615706][ T7492] EXT4-fs: inline encryption not supported [ 129.615759][ T7492] EXT4-fs: Ignoring removed bh option [ 129.625423][ T7492] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 129.655062][ T7499] loop2: detected capacity change from 0 to 256 [ 129.673046][ T7470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.677384][ T7492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.760287][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.957788][ T7509] ip6t_hbh: Not strict - not implemented [ 129.987087][ T7518] loop2: detected capacity change from 0 to 128 [ 129.999909][ T7518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 130.000027][ T7518] System zones: 1-3, 19-19, 35-36 [ 130.000672][ T7518] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.074144][ T7518] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.106032][ T29] audit: type=1400 audit(1788026464.009:1398): avc: denied { write } for pid=7517 comm="syz.2.623" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.136195][ T29] audit: type=1400 audit(1788026464.039:1399): avc: denied { read } for pid=7521 comm="syz.8.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.217702][ T29] audit: type=1400 audit(1788026464.119:1400): avc: denied { write } for pid=7517 comm="syz.2.623" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.316835][ T29] audit: type=1400 audit(1788026464.219:1401): avc: denied { map } for pid=7517 comm="syz.2.623" path="/30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuacct.usage_percpu_user" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.414490][ T29] audit: type=1400 audit(1788026464.319:1403): avc: denied { cpu } for pid=7517 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.634825][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 130.639003][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 130.694764][ T6556] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.865043][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.637'. [ 130.898296][ T7565] loop8: detected capacity change from 0 to 512 [ 130.910980][ T7565] ext4: Unknown parameter '.' [ 130.945876][ T7573] tc_dump_action: action bad kind [ 130.953194][ T7573] loop3: detected capacity change from 0 to 256 [ 130.994437][ T7564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.637'. [ 131.102013][ T7578] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 131.126503][ T7586] tc_dump_action: action bad kind [ 131.147355][ T7564] loop2: detected capacity change from 0 to 1024 [ 131.149548][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.149730][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.164839][ T7586] loop3: detected capacity change from 0 to 256 [ 131.188044][ T7564] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 131.224532][ T7564] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.637: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.224637][ T7564] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.240713][ T7564] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.637: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.240882][ T7564] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.243327][ T7564] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.637: Failed to acquire dquot type 0 [ 131.243482][ T7564] loop2: lost filesystem error report for type 5 error -117 [ 131.257858][ T7564] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 131.258008][ T7564] loop2: lost filesystem error report for type 5 error -117 [ 131.260660][ C0] EXT4-fs (loop2): error count since last fsck: 4 [ 131.260741][ C0] EXT4-fs (loop2): initial error at time 1788026465: ext4_map_blocks:790: inode 3: block 2 [ 131.260963][ C0] EXT4-fs (loop2): last error at time 1788026465: ext4_reserve_inode_write:6517 [ 131.261731][ T7564] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.637: mark_inode_dirty error [ 131.261841][ T7564] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 131.264142][ T7564] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 131.264698][ T7564] EXT4-fs (loop2): 1 orphan inode deleted [ 131.271168][ T12] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.271209][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.271395][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 131.271419][ T12] loop2: lost filesystem error report for type 5 error -117 [ 131.304731][ T7564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.423315][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.423415][ T6556] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 131.423441][ T6556] loop2: lost filesystem error report for type 5 error -117 [ 131.423734][ T6556] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 131.423770][ T6556] loop2: lost filesystem error report for type 5 error -117 [ 131.423902][ T6556] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 131.423925][ T6556] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.424263][ T6556] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 131.424329][ T6556] loop2: lost filesystem error report for type 5 error -117 [ 131.545372][ T7595] netlink: 52 bytes leftover after parsing attributes in process `syz.3.643'. [ 131.545501][ T7595] lo: Caught tx_queue_len zero misconfig [ 131.607372][ T7578] netlink: 'syz.0.635': attribute type 16 has an invalid length. [ 131.607415][ T7578] netlink: 'syz.0.635': attribute type 17 has an invalid length. [ 131.685682][ T7578] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 131.814405][ T7626] netlink: 'syz.8.649': attribute type 1 has an invalid length. [ 131.880788][ T7635] batadv_slave_1: entered promiscuous mode [ 131.882587][ T7635] batadv_slave_1: left promiscuous mode [ 131.886579][ T7637] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 131.918557][ T7640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.988460][ T7644] tc_dump_action: action bad kind [ 132.008119][ T7644] loop4: detected capacity change from 0 to 256 [ 132.072547][ T7650] loop3: detected capacity change from 0 to 764 [ 132.474616][ T7664] loop3: detected capacity change from 0 to 512 [ 132.481057][ T7675] netlink: 'syz.0.659': attribute type 39 has an invalid length. [ 132.534452][ T7664] EXT4-fs (loop3): orphan cleanup on readonly fs [ 132.550277][ T7664] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.657: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 132.550369][ T7664] loop3: lost filesystem error report for type 5 error -117 [ 132.566954][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 132.566978][ C1] EXT4-fs (loop3): initial error at time 1788026466: ext4_xattr_inode_iget:473 [ 132.567002][ C1] EXT4-fs (loop3): last error at time 1788026466: ext4_xattr_inode_iget:473 [ 132.603585][ T7664] EXT4-fs (loop3): 1 orphan inode deleted [ 132.632225][ T7664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.794781][ T7692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.848018][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.866430][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.933821][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.8.664'. [ 133.096495][ T7700] team0: Port device team_slave_0 removed [ 133.111501][ T7713] tc_dump_action: action bad kind [ 133.673846][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 133.673887][ T29] audit: type=1400 audit(1788026467.579:1760): avc: denied { write } for pid=7715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.740793][ T29] audit: type=1400 audit(1788026467.649:1761): avc: denied { write } for pid=7735 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.934728][ T29] audit: type=1400 audit(1788026467.839:1762): avc: denied { write } for pid=7741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.956055][ T29] audit: type=1400 audit(1788026467.839:1763): avc: denied { write } for pid=7754 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.083839][ T29] audit: type=1400 audit(1788026467.989:1764): avc: denied { write } for pid=7757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.102957][ T29] audit: type=1400 audit(1788026467.989:1765): avc: denied { write } for pid=7771 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.160697][ T7776] netlink: 'syz.8.671': attribute type 15 has an invalid length. [ 134.163392][ T7768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7768 comm=syz.8.671 [ 134.266904][ T7784] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 134.267574][ T7784] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 134.267694][ T7784] EXT4-fs (loop8): orphan cleanup on readonly fs [ 134.269497][ T7784] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.269528][ T7784] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 134.270596][ T7784] EXT4-fs (loop8): 1 orphan inode deleted [ 134.271137][ T7784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.373794][ T29] audit: type=1400 audit(1788026468.279:1766): avc: denied { write } for pid=7779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.393355][ T29] audit: type=1400 audit(1788026468.279:1767): avc: denied { write } for pid=7797 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.494999][ T29] audit: type=1400 audit(1788026468.399:1768): avc: denied { write } for pid=7800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.550701][ T29] audit: type=1400 audit(1788026468.449:1769): avc: denied { write } for pid=7811 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.583481][ T4785] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.633220][ T7817] netlink: 48 bytes leftover after parsing attributes in process `syz.8.673'. [ 135.325142][ T7897] set_capacity_and_notify: 3 callbacks suppressed [ 135.325166][ T7897] loop2: detected capacity change from 0 to 512 [ 135.325656][ T7897] EXT4-fs: Ignoring removed bh option [ 135.347593][ T7897] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 135.347629][ T7897] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 135.347651][ T7897] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.676: Corrupt directory, running e2fsck is recommended [ 135.348667][ T7897] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 135.348759][ T7897] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.676: corrupted in-inode xattr: e_name out of bounds [ 135.348785][ T7897] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.348942][ T7897] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.676: couldn't read orphan inode 15 (err -117) [ 135.348968][ T7897] loop2: lost filesystem error report for type 5 error -117 [ 135.349929][ T7897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.350282][ T7897] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 135.350301][ T7897] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 135.350368][ T7897] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.676: Corrupt directory, running e2fsck is recommended [ 135.351597][ T7897] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 135.351622][ T7897] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 135.351722][ T7897] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.676: Corrupt directory, running e2fsck is recommended [ 135.353979][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 135.354169][ T7897] netlink: 'syz.2.676': attribute type 21 has an invalid length. [ 135.354315][ T7897] netlink: 128 bytes leftover after parsing attributes in process `syz.2.676'. [ 135.354366][ T7897] netlink: 'syz.2.676': attribute type 5 has an invalid length. [ 135.354403][ T7897] netlink: 'syz.2.676': attribute type 6 has an invalid length. [ 135.354467][ T7897] netlink: 3 bytes leftover after parsing attributes in process `syz.2.676'. [ 135.600538][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.906862][ T7705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.978445][ T7917] loop3: detected capacity change from 0 to 512 [ 136.004229][ T7917] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.680: Failed to acquire dquot type 1 [ 136.004262][ T7917] loop3: lost filesystem error report for type 5 error -117 [ 136.004702][ T7917] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.680: Failed to acquire dquot type 1 [ 136.004729][ T7917] loop3: lost filesystem error report for type 5 error -117 [ 136.007499][ T7917] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.680: bg 0: block 248: padding at end of block bitmap is not set [ 136.007642][ T7917] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 136.008047][ T7917] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.680: Failed to acquire dquot type 1 [ 136.008338][ T7917] EXT4-fs (loop3): 1 orphan inode deleted [ 136.008811][ T7917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.008934][ T7917] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.049568][ T7917] futex_wake_op: syz.3.680 tries to shift op by 144; fix this program [ 136.050270][ T7917] futex_wake_op: syz.3.680 tries to shift op by 144; fix this program [ 136.132746][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.271842][ T7941] batadv1: entered promiscuous mode [ 136.271875][ T7941] batadv1: entered allmulticast mode [ 136.317956][ T7945] sctp: [Deprecated]: syz.3.690 (pid 7945) Use of int in max_burst socket option. [ 136.317956][ T7945] Use struct sctp_assoc_value instead [ 136.343910][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.688'. [ 136.512199][ T7954] geneve2: left promiscuous mode [ 136.515812][ T7954] 8021q: adding VLAN 0 to HW filter on device eth0 [ 136.519777][ T7954] 8021q: adding VLAN 0 to HW filter on device eth1 [ 136.523535][ T7954] 8021q: adding VLAN 0 to HW filter on device eth2 [ 136.527979][ T7954] 8021q: adding VLAN 0 to HW filter on device eth3 [ 136.531435][ T7954] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 136.558524][ T70] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.559203][ T70] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.579540][ T70] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.579628][ T70] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.786730][ T7957] loop8: detected capacity change from 0 to 256 [ 136.798998][ T7957] FAT-fs (loop8): Directory bread(block 1285) failed [ 136.799058][ T7957] FAT-fs (loop8): Directory bread(block 1286) failed [ 136.799117][ T7957] FAT-fs (loop8): Directory bread(block 1287) failed [ 136.799149][ T7957] FAT-fs (loop8): Directory bread(block 1288) failed [ 136.813102][ T7957] FAT-fs (loop8): Directory bread(block 1285) failed [ 136.813153][ T7957] FAT-fs (loop8): Directory bread(block 1286) failed [ 136.813171][ T7957] FAT-fs (loop8): Directory bread(block 1287) failed [ 136.813190][ T7957] FAT-fs (loop8): Directory bread(block 1288) failed [ 136.813243][ T7957] FAT-fs (loop8): Directory bread(block 1285) failed [ 136.813262][ T7957] FAT-fs (loop8): Directory bread(block 1286) failed [ 136.875412][ T7960] loop3: detected capacity change from 0 to 512 [ 136.875766][ T7960] EXT4-fs: inline encryption not supported [ 136.877230][ T7960] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.901346][ T7960] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 136.901714][ T7960] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.695: bg 0: block 248: padding at end of block bitmap is not set [ 136.901775][ T7960] fserror_report: 3 callbacks suppressed [ 136.901787][ T7960] loop3: lost filesystem error report for type 5 error -117 [ 136.902411][ T7960] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.695: Failed to acquire dquot type 1 [ 136.902434][ T7960] loop3: lost filesystem error report for type 5 error -28 [ 136.905637][ T7960] EXT4-fs (loop3): 1 truncate cleaned up [ 136.906003][ T7960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 136.953180][ T7970] tc_dump_action: action bad kind [ 136.958133][ T7969] loop4: detected capacity change from 0 to 512 [ 136.963942][ T7969] EXT4-fs: Ignoring removed i_version option [ 136.964295][ T7970] loop8: detected capacity change from 0 to 256 [ 136.964785][ T7969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.985670][ T7969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.985747][ T7969] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.012595][ T7969] sctp: [Deprecated]: syz.4.696 (pid 7969) Use of int in max_burst socket option deprecated. [ 137.012595][ T7969] Use struct sctp_assoc_value instead [ 137.102992][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 137.104877][ T31] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 1 [ 137.104903][ T31] loop3: lost filesystem error report for type 5 error -117 [ 137.132128][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.407397][ T8004] tc_dump_action: action bad kind [ 137.418524][ T8004] loop8: detected capacity change from 0 to 256 [ 137.464090][ T8008] loop2: detected capacity change from 0 to 1024 [ 137.471659][ T8008] EXT4-fs: Ignoring removed bh option [ 137.491488][ T8008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 137.529522][ T8014] netlink: 'syz.8.712': attribute type 1 has an invalid length. [ 137.541831][ T8008] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 137.591973][ T8019] ip6t_srh: unknown srh invflags 4000 [ 137.592373][ T8019] syz.8.714 (8019): attempted to duplicate a private mapping with mremap. This is not supported. [ 137.730455][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 137.789675][ T8040] netlink: 72 bytes leftover after parsing attributes in process `syz.0.721'. [ 137.879059][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.928335][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.963739][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.021396][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.140998][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.725'. [ 138.141037][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.725'. [ 138.332999][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.333044][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.333153][ T8094] bridge_slave_0: entered allmulticast mode [ 138.333816][ T8094] bridge_slave_0: entered promiscuous mode [ 138.362490][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.362537][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.362640][ T8094] bridge_slave_1: entered allmulticast mode [ 138.363093][ T8094] bridge_slave_1: entered promiscuous mode [ 138.404783][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.415765][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.438791][ T8094] team0: Port device team_slave_0 added [ 138.445661][ T8094] team0: Port device team_slave_1 added [ 138.465058][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.465080][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.465118][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.510511][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.510530][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.510567][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.590620][ T8094] hsr_slave_0: entered promiscuous mode [ 138.591003][ T8094] hsr_slave_1: entered promiscuous mode [ 138.591296][ T8094] debugfs: 'hsr0' already exists in 'hsr' [ 138.591313][ T8094] Cannot create hsr debugfs directory [ 138.739983][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 138.740126][ T29] audit: type=1400 audit(1788026472.649:1799): avc: denied { mounton } for pid=8119 comm="syz.0.727" path="/155/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 138.777359][ T8131] tc_dump_action: action bad kind [ 138.827937][ T8131] loop3: detected capacity change from 0 to 256 [ 139.004468][ T8143] loop3: detected capacity change from 0 to 1024 [ 139.006900][ T8143] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 139.011005][ T8143] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.729: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.011221][ T8143] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.011426][ T8143] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 139.011524][ T8143] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.729: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.011562][ T8143] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.011708][ T8143] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 139.011726][ T8143] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.729: Failed to acquire dquot type 0 [ 139.011784][ T8143] loop3: lost filesystem error report for type 5 error -117 [ 139.011872][ T8143] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 139.011893][ T8143] loop3: lost filesystem error report for type 5 error -117 [ 139.012025][ T8143] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.729: mark_inode_dirty error [ 139.012062][ T8143] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 139.012120][ T8143] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 139.012147][ T8143] EXT4-fs (loop3): 1 orphan inode deleted [ 139.012829][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.045191][ T8066] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.060344][ T8066] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 139.060369][ T8066] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:33: Failed to release dquot type 0 [ 139.127086][ T8150] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ' [ 139.157694][ T12] bridge_slave_1: left allmulticast mode [ 139.157717][ T12] bridge_slave_1: left promiscuous mode [ 139.157863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.201580][ T12] bridge_slave_0: left allmulticast mode [ 139.201599][ T12] bridge_slave_0: left promiscuous mode [ 139.201746][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.239447][ T29] audit: type=1400 audit(1788026473.119:1800): avc: denied { write } for pid=8123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.315056][ T29] audit: type=1400 audit(1788026473.219:1801): avc: denied { write } for pid=8158 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.349213][ T29] audit: type=1400 audit(1788026473.249:1802): avc: denied { write } for pid=8139 comm="syz.3.729" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.424434][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.436436][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.437336][ T12] bond0 (unregistering): Released all slaves [ 139.440038][ T12] bond1 (unregistering): Released all slaves [ 139.469074][ T8148] tipc: Started in network mode [ 139.469119][ T8148] tipc: Node identity 2000004, cluster identity 4711 [ 139.469201][ T8148] tipc: Node number set to 33554436 [ 139.472165][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 139.518423][ T12] hsr_slave_0: left promiscuous mode [ 139.524387][ T12] hsr_slave_1: left promiscuous mode [ 139.525010][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.525025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.533659][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.533678][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.545514][ T12] veth1_macvtap: left promiscuous mode [ 139.545544][ T12] veth0_macvtap: left promiscuous mode [ 139.545588][ T12] veth1_vlan: left promiscuous mode [ 139.545629][ T12] veth0_vlan: left promiscuous mode [ 139.572996][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.584924][ T8066] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.585010][ T8066] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.585192][ T8066] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 139.585210][ T8066] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:33: Failed to release dquot type 0 [ 139.585230][ T8066] loop3: lost filesystem error report for type 5 error -117 [ 139.585456][ T3304] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.585479][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 139.585668][ T3304] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 139.585686][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 139.585765][ T3304] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 139.585787][ T3304] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.585851][ T3304] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.585941][ T3304] loop3: lost filesystem error report for type 5 error -117 [ 139.674521][ T8169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.674584][ T8169] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.764888][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.815329][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.834620][ T12] team0 (unregistering): Port device team_slave_0 removed [ 140.014732][ T8193] tc_dump_action: action bad kind [ 140.225698][ T29] audit: type=1400 audit(1788026474.129:1803): avc: denied { write } for pid=8188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.335383][ T29] audit: type=1400 audit(1788026474.239:1804): avc: denied { write } for pid=8210 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.448015][ T8215] binfmt_misc: register: failed to install interpreter ./file2 [ 140.496775][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 140.530779][ T8225] No source specified [ 140.534009][ T8221] set_capacity_and_notify: 3 callbacks suppressed [ 140.534027][ T8221] loop8: detected capacity change from 0 to 1024 [ 140.537348][ T8221] EXT4-fs: Ignoring removed orlov option [ 140.537385][ T8221] ext4: Bad value for 'inode_readahead_blks' [ 141.316016][ T8240] loop8: detected capacity change from 0 to 1764 [ 141.481575][ T8094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.500016][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.508581][ T8264] tc_dump_action: action bad kind [ 141.521180][ T8264] loop8: detected capacity change from 0 to 256 [ 141.558974][ T8094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.568926][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.569715][ T8094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.580648][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.581476][ T8094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.591858][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.618103][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 141.657960][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'. [ 141.737427][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.762644][ T8294] loop3: detected capacity change from 0 to 512 [ 141.770444][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.778555][ T8294] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.779195][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.779254][ T8075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.786271][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.786312][ T8071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.803201][ T8300] loop4: detected capacity change from 0 to 512 [ 141.841524][ T8294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.841555][ T8294] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.871301][ T8300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.871438][ T8300] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.874863][ T8294] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.752: Allocating blocks 41-42 which overlap fs metadata [ 141.874951][ T8294] loop3: lost filesystem error report for type 5 error -117 [ 141.876901][ T8294] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.752: Allocating blocks 41-42 which overlap fs metadata [ 141.878759][ T8294] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.752: Failed to acquire dquot type 1 [ 141.879038][ T8294] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 141.879101][ T8294] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.752: corrupted inode contents [ 141.879123][ T8294] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 141.879769][ T8294] EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #12: comm syz.3.752: mark_inode_dirty error [ 141.879795][ T8294] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 141.880552][ T8294] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.752: corrupted inode contents [ 141.880644][ T8294] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 141.882475][ T8294] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.752: mark_inode_dirty error [ 141.882528][ T8294] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 141.882990][ T8294] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.752: corrupted inode contents [ 141.883033][ T8294] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 141.887796][ T8294] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 141.887921][ T8294] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.752: corrupted inode contents [ 141.888021][ T8294] EXT4-fs error (device loop3): ext4_truncate:4721: inode #12: comm syz.3.752: mark_inode_dirty error [ 141.888115][ T8294] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 141.888275][ T8294] EXT4-fs (loop3): 1 truncate cleaned up [ 141.888759][ T8294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.903030][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.753: corrupted xattr block 6: invalid header [ 141.903240][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 141.903370][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.753: corrupted xattr block 6: invalid header [ 141.903520][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 141.903638][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.753: corrupted xattr block 6: invalid header [ 141.903757][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 141.903852][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.753: corrupted xattr block 6: invalid header [ 141.904771][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 141.904856][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.753: corrupted xattr block 6: invalid header [ 141.905057][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 141.910926][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.753: corrupted xattr block 33: invalid header [ 141.911188][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 141.911214][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.753: corrupted xattr block 33: invalid header [ 141.911386][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 141.911622][ T8300] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.753: corrupted xattr block 33: invalid header [ 141.912745][ T8294] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 141.915997][ T8300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 141.942749][ T8294] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 141.950680][ T8294] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 141.958388][ T8294] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.752: Allocating blocks 41-42 which overlap fs metadata [ 141.958666][ T8294] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.752: Failed to acquire dquot type 1 [ 141.961040][ T8294] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.752: Allocating blocks 41-42 which overlap fs metadata [ 141.961302][ T8294] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.752: Failed to acquire dquot type 1 [ 141.983329][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.086065][ T3380] dummy0: entered promiscuous mode [ 142.136169][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.319984][ T8333] loop8: detected capacity change from 0 to 512 [ 142.328962][ T8333] EXT4-fs: Mount option(s) incompatible with ext2 [ 142.507534][ T8366] loop4: detected capacity change from 0 to 7 [ 142.514481][ T4207] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.514572][ T4207] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.514669][ T4207] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.514738][ T4207] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.521943][ T4207] Buffer I/O error on dev loop4, logical block 0, async page read [ 142.584239][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.597091][ T8333] loop8: detected capacity change from 0 to 8192 [ 142.604075][ T8333] vfat: Unknown parameter ' P÷Íbš[ÓiQ¦2ÿý¶õú#âÄÌ¿_eSlP?' [ 142.716508][ T8339] loop3: detected capacity change from 0 to 32768 [ 142.760087][ T8339] loop3: p1 p3 < > [ 142.911550][ T8416] tc_dump_action: action bad kind [ 143.634868][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 143.650668][ T8094] veth0_vlan: entered promiscuous mode [ 143.662452][ T8094] veth1_vlan: entered promiscuous mode [ 143.697774][ T8094] veth0_macvtap: entered promiscuous mode [ 143.708374][ T8094] veth1_macvtap: entered promiscuous mode [ 143.736196][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.797356][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.813838][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 143.813866][ T29] audit: type=1400 audit(1788026477.719:1883): avc: denied { bind } for pid=8452 comm="syz.0.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.833977][ T8458] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 143.840994][ T8069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.841253][ T8069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.841365][ T8069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.841484][ T8069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.069980][ T29] audit: type=1400 audit(1788026477.939:1884): avc: denied { write } for pid=8447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.096235][ T29] audit: type=1400 audit(1788026477.999:1885): avc: denied { write } for pid=8476 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.339497][ T8489] loop4: detected capacity change from 0 to 7 [ 144.456782][ T8494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.456855][ T8494] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.459402][ T29] audit: type=1400 audit(1788026478.319:1886): avc: denied { write } for pid=8481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.459515][ T29] audit: type=1400 audit(1788026478.339:1887): avc: denied { write } for pid=8505 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.465322][ T29] audit: type=1400 audit(1788026478.369:1888): avc: denied { write } for pid=8493 comm="syz.5.723" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.473474][ T29] audit: type=1400 audit(1788026478.379:1889): avc: denied { write } for pid=8493 comm="syz.5.723" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.475298][ T29] audit: type=1400 audit(1788026478.379:1890): avc: denied { write } for pid=8493 comm="syz.5.723" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.478004][ T29] audit: type=1400 audit(1788026478.379:1891): avc: denied { write } for pid=8493 comm="syz.5.723" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.046535][ T29] audit: type=1400 audit(1788026478.949:1892): avc: denied { write } for pid=8507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.521615][ T8094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.266959][ T8631] set_capacity_and_notify: 2 callbacks suppressed [ 146.266990][ T8631] loop3: detected capacity change from 0 to 512 [ 146.283789][ T8631] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 146.283846][ T8631] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 146.287142][ T8631] EXT4-fs (loop3): 1 truncate cleaned up [ 146.287706][ T8631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.304525][ T8631] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 146.315611][ T8631] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 146.362096][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.541477][ T8606] loop4: detected capacity change from 0 to 1024 [ 147.387064][ T8693] loop3: detected capacity change from 0 to 8192 [ 147.512380][ T8713] FAULT_INJECTION: forcing a failure. [ 147.512380][ T8713] name failslab, interval 1, probability 0, space 0, times 0 [ 147.512434][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.512455][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.512472][ T8713] Call Trace: [ 147.512480][ T8713] [ 147.512491][ T8713] __dump_stack+0x1d/0x30 [ 147.512519][ T8713] dump_stack_lvl+0x95/0xd0 [ 147.512544][ T8713] dump_stack+0x15/0x1b [ 147.512568][ T8713] should_fail_ex+0x262/0x280 [ 147.512623][ T8713] ? ioctx_alloc+0xe3/0x480 [ 147.512652][ T8713] should_failslab+0x8c/0xb0 [ 147.512682][ T8713] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 147.512791][ T8713] ? ioctx_alloc+0xe3/0x480 [ 147.512822][ T8713] ioctx_alloc+0xe3/0x480 [ 147.512853][ T8713] __se_sys_io_setup+0x6b/0x1b0 [ 147.512940][ T8713] __x64_sys_io_setup+0x31/0x40 [ 147.512966][ T8713] x64_sys_call+0x1a9f/0x2550 [ 147.513069][ T8713] do_syscall_64+0x112/0x360 [ 147.513097][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.513123][ T8713] RIP: 0033:0x7fa520d1e159 [ 147.513140][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.513184][ T8713] RSP: 002b:00007fa51f777028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 147.513213][ T8713] RAX: ffffffffffffffda RBX: 00007fa520fa5fa0 RCX: 00007fa520d1e159 [ 147.513235][ T8713] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 000000000000007f [ 147.513249][ T8713] RBP: 00007fa520db5024 R08: 0000000000000000 R09: 0000000000000000 [ 147.513264][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.513278][ T8713] R13: 00007fa520fa6038 R14: 00007fa520fa5fa0 R15: 00007fff07c2acb8 [ 147.513336][ T8713] [ 147.580266][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.793'. [ 147.580817][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.793'. [ 147.762198][ T8723] loop4: detected capacity change from 0 to 512 [ 147.782093][ T8723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.782246][ T8723] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.948730][ T8524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.115678][ T8723] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: comm syz.4.800: invalid size [ 148.127793][ T8723] EXT4-fs (loop4): Remounting filesystem read-only [ 148.171408][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.801'. [ 148.171434][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.5.801'. [ 148.210179][ T8729] netlink: 'syz.5.801': attribute type 3 has an invalid length. [ 148.322857][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.322990][ T8079] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 148.323033][ T8079] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 148.541249][ T8764] loop3: detected capacity change from 0 to 512 [ 148.551169][ T8764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.551271][ T8764] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.554613][ T8764] netlink: 72 bytes leftover after parsing attributes in process `syz.3.810'. [ 148.650236][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.831976][ T8787] loop3: detected capacity change from 0 to 736 [ 148.832261][ T8787] iso9660: Bad value for 'map' [ 149.262009][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 149.262032][ T29] audit: type=1400 audit(1788026483.169:2045): avc: denied { create } for pid=8793 comm="syz.5.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.293635][ T29] audit: type=1400 audit(1788026483.199:2046): avc: denied { create } for pid=8793 comm="syz.5.816" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.315389][ T29] audit: type=1400 audit(1788026483.199:2047): avc: denied { create } for pid=8793 comm="syz.5.816" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.426735][ T8813] loop4: detected capacity change from 0 to 128 [ 149.433871][ T29] audit: type=1400 audit(1788026483.339:2048): avc: denied { write } for pid=8804 comm="syz.4.818" name="63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.666712][ T8774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.685342][ T29] audit: type=1400 audit(1788026485.589:2049): avc: denied { write } for pid=6450 comm="syz-executor" name="63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.712245][ T29] audit: type=1400 audit(1788026485.619:2050): avc: denied { write } for pid=6450 comm="syz-executor" name="63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.739312][ T29] audit: type=1400 audit(1788026485.639:2051): avc: denied { write } for pid=6450 comm="syz-executor" name="63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.766486][ T29] audit: type=1400 audit(1788026485.649:2052): avc: denied { write } for pid=6450 comm="syz-executor" name="63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.766529][ T29] audit: type=1400 audit(1788026485.649:2053): avc: denied { write } for pid=6450 comm="syz-executor" name="63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.766581][ T29] audit: type=1400 audit(1788026485.649:2054): avc: denied { write } for pid=6450 comm="syz-executor" name="63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 158.120318][ T29] audit: type=1400 audit(1788026492.029:2055): avc: denied { write } for pid=8818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.143644][ T29] audit: type=1400 audit(1788026492.049:2056): avc: denied { write } for pid=8829 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.679140][ T29] audit: type=1400 audit(1788026492.579:2057): avc: denied { write } for pid=8832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.703257][ T29] audit: type=1400 audit(1788026492.599:2058): avc: denied { write } for pid=8843 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.929784][ T29] audit: type=1400 audit(1788026492.839:2059): avc: denied { write } for pid=8846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.966379][ T29] audit: type=1400 audit(1788026492.869:2060): avc: denied { write } for pid=8857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.119968][ T29] audit: type=1400 audit(1788026493.029:2061): avc: denied { write } for pid=8860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.158164][ T29] audit: type=1400 audit(1788026493.059:2062): avc: denied { write } for pid=8871 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.456058][ T8883] syzkaller0: entered promiscuous mode [ 165.456086][ T8883] syzkaller0: entered allmulticast mode [ 165.484858][ T8883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.575536][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.463318][ T8888] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20002 [ 166.762224][ T29] audit: type=1400 audit(1788026500.669:2063): avc: denied { firmware_load } for pid=8887 comm="syz.0.824" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 167.216693][ T8897] loop5: detected capacity change from 0 to 512 [ 167.241986][ T8897] EXT4-fs: Ignoring removed orlov option [ 167.309572][ T8897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.375886][ T8897] netlink: 'syz.5.825': attribute type 2 has an invalid length. [ 167.375913][ T8897] netlink: 119 bytes leftover after parsing attributes in process `syz.5.825'. [ 167.412422][ T8094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.455528][ T8903] netlink: 36 bytes leftover after parsing attributes in process `syz.8.828'. [ 167.536210][ T8905] loop5: detected capacity change from 0 to 1024 [ 167.547195][ T8903] netlink: 72 bytes leftover after parsing attributes in process `syz.8.828'. [ 167.594034][ T8905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.666552][ T29] audit: type=1400 audit(1788026501.519:2064): avc: denied { write } for pid=8902 comm="syz.5.826" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691210][ T29] audit: type=1400 audit(1788026501.529:2065): avc: denied { write } for pid=8902 comm="syz.5.826" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691271][ T29] audit: type=1400 audit(1788026501.529:2066): avc: denied { write } for pid=8902 comm="syz.5.826" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691337][ T29] audit: type=1400 audit(1788026501.529:2067): avc: denied { write } for pid=8902 comm="syz.5.826" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691396][ T29] audit: type=1400 audit(1788026501.529:2068): avc: denied { write } for pid=8902 comm="syz.5.826" name="file4" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691459][ T29] audit: type=1400 audit(1788026501.529:2069): avc: denied { reparent } for pid=8902 comm="syz.5.826" name="file4" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691493][ T29] audit: type=1400 audit(1788026501.529:2070): avc: denied { rename } for pid=8902 comm="syz.5.826" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691530][ T29] audit: type=1400 audit(1788026501.529:2071): avc: denied { reparent } for pid=8902 comm="syz.5.826" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.691553][ T29] audit: type=1400 audit(1788026501.529:2072): avc: denied { rmdir } for pid=8902 comm="syz.5.826" name="file4" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.173053][ T8922] loop4: detected capacity change from 0 to 128 [ 168.468774][ T8925] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 168.594574][ T8926] syz.4.831: attempt to access beyond end of device [ 168.594574][ T8926] loop4: rw=2049, sector=138, nr_sectors = 38 limit=128 [ 168.732433][ T8094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.164839][ T8937] netlink: 'syz.8.835': attribute type 2 has an invalid length. [ 169.253261][ T8943] tc_dump_action: action bad kind [ 169.274975][ T8943] loop5: detected capacity change from 0 to 256 [ 169.565397][ T8948] tc_dump_action: action bad kind [ 169.578978][ T8948] loop5: detected capacity change from 0 to 256 [ 169.607040][ T8950] loop8: detected capacity change from 0 to 2048 [ 169.716482][ T8950] loop8: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 169.803092][ T8957] tc_dump_action: action bad kind [ 169.917975][ T8957] loop3: detected capacity change from 0 to 256 [ 170.176843][ T8954] loop5: detected capacity change from 0 to 1024 [ 170.206229][ T8954] EXT4-fs: quotafile must be on filesystem root [ 170.243423][ T8954] ip_tables: iptables: counters copy to user failed while replacing table [ 170.311770][ T8970] loop3: detected capacity change from 0 to 512 [ 170.320559][ T8970] EXT4-fs: Ignoring removed i_version option [ 170.320599][ T8970] ext2: Unknown parameter 'obj_user' [ 170.645955][ T8975] tipc: Trying to set illegal importance in message [ 170.748861][ T8980] loop3: detected capacity change from 0 to 164 [ 170.762581][ T8980] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.773186][ T8980] isofs: Unable to find the "." directory for NFS. [ 170.930048][ T8989] EXT4-fs: Ignoring removed nobh option [ 170.930244][ T8989] EXT4-fs: Ignoring removed bh option [ 170.930329][ T8989] EXT4-fs: Ignoring removed nobh option [ 170.956964][ T8989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.971904][ T8989] netlink: 'syz.4.850': attribute type 2 has an invalid length. [ 171.167603][ T8966] udevd[8966]: inotify_add_watch(7, /dev/loop8p76, 10) failed: No such file or directory [ 171.171081][ T8885] udevd[8885]: inotify_add_watch(7, /dev/loop8p79, 10) failed: No such file or directory [ 171.176356][ T8963] udevd[8963]: inotify_add_watch(7, /dev/loop8p70, 10) failed: No such file or directory [ 171.179651][ T8960] udevd[8960]: inotify_add_watch(7, /dev/loop8p71, 10) failed: No such file or directory [ 171.214934][ T8886] udevd[8886]: inotify_add_watch(7, /dev/loop8p68, 10) failed: No such file or directory [ 171.225602][ T8961] udevd[8961]: inotify_add_watch(7, /dev/loop8p78, 10) failed: No such file or directory [ 171.239044][ T8967] udevd[8967]: inotify_add_watch(7, /dev/loop8p73, 10) failed: No such file or directory [ 171.244637][ T8885] udevd[8885]: inotify_add_watch(7, /dev/loop8p81, 10) failed: No such file or directory [ 171.254957][ T8965] udevd[8965]: inotify_add_watch(7, /dev/loop8p75, 10) failed: No such file or directory [ 171.255922][ T8968] udevd[8968]: inotify_add_watch(7, /dev/loop8p74, 10) failed: No such file or directory [ 171.288839][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.412635][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.412753][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.412888][ T9024] bridge_slave_0: entered allmulticast mode [ 172.413698][ T9024] bridge_slave_0: entered promiscuous mode [ 172.414834][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.414865][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.414922][ T9024] bridge_slave_1: entered allmulticast mode [ 172.415460][ T9024] bridge_slave_1: entered promiscuous mode [ 172.450483][ T9024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.454072][ T9024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.502592][ T9024] team0: Port device team_slave_0 added [ 172.508154][ T9024] team0: Port device team_slave_1 added [ 172.549647][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.549671][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.549789][ T9024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.563945][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.563963][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.563992][ T9024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.643557][ T9024] hsr_slave_0: entered promiscuous mode [ 172.644179][ T9024] hsr_slave_1: entered promiscuous mode [ 172.644515][ T9024] debugfs: 'hsr0' already exists in 'hsr' [ 172.644528][ T9024] Cannot create hsr debugfs directory [ 172.900868][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 172.900894][ T29] audit: type=1400 audit(1788026506.809:2081): avc: denied { name_bind } for pid=9057 comm="syz.8.864" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 173.024049][ T29] audit: type=1400 audit(1788026506.929:2082): avc: denied { write } for pid=9059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.122413][ T29] audit: type=1400 audit(1788026507.029:2083): avc: denied { write } for pid=9074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.240209][ T9024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.364733][ T29] audit: type=1400 audit(1788026507.269:2084): avc: denied { write } for pid=9077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.407635][ T29] audit: type=1400 audit(1788026507.309:2085): avc: denied { write } for pid=9089 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.449726][ T9024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.450513][ T9024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.459622][ T9024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.460182][ T9024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.481413][ T9024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.482408][ T9024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.485405][ T9024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.604913][ T9107] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 173.604966][ T9107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.605004][ T9107] vhci_hcd vhci_hcd.0: Device attached [ 173.636002][ T9107] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 173.636030][ T9107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.636071][ T9107] vhci_hcd vhci_hcd.0: Device attached [ 173.664870][ T9107] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(8) [ 173.664897][ T9107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.664931][ T9107] vhci_hcd vhci_hcd.0: Device attached [ 173.667613][ T29] audit: type=1400 audit(1788026507.569:2086): avc: denied { write } for pid=9095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.673841][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.677623][ T9111] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 173.689015][ T9111] syzkaller0: entered promiscuous mode [ 173.689087][ T9111] syzkaller0: entered allmulticast mode [ 173.710481][ T29] audit: type=1400 audit(1788026507.589:2087): avc: denied { write } for pid=9118 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.728558][ T9120] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.777626][ T9120] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(10) [ 173.777654][ T9120] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.777695][ T9120] vhci_hcd vhci_hcd.0: Device attached [ 173.803046][ T9024] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.828366][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.828426][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.841071][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.841107][ T8077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.845412][ T3388] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 173.907324][ T9130] tc_dump_action: action bad kind [ 173.909516][ T29] audit: type=1400 audit(1788026507.809:2088): avc: denied { map } for pid=9106 comm="syz.8.866" path="socket:[22954]" dev="sockfs" ino=22954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 173.940435][ T9024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.994052][ T9125] netlink: 'syz.4.868': attribute type 39 has an invalid length. [ 174.026845][ T29] audit: type=1400 audit(1788026507.929:2089): avc: denied { write } for pid=9121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.076869][ T29] audit: type=1400 audit(1788026507.979:2090): avc: denied { write } for pid=9146 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.246510][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.409111][ T9024] veth0_vlan: entered promiscuous mode [ 174.432344][ T9024] veth1_vlan: entered promiscuous mode [ 174.457329][ T9024] veth0_macvtap: entered promiscuous mode [ 174.468251][ T9024] veth1_macvtap: entered promiscuous mode [ 174.482928][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.498442][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.510095][ T8085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.510947][ T8085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.511109][ T8085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.511152][ T8085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.564486][ T9115] vhci_hcd: connection closed [ 174.564605][ T9108] vhci_hcd: connection reset by peer [ 174.564727][ T9112] vhci_hcd: connection closed [ 174.565172][ T8077] vhci_hcd vhci_hcd.8: stop threads [ 174.565193][ T8077] vhci_hcd vhci_hcd.8: release socket [ 174.565216][ T8077] vhci_hcd vhci_hcd.8: disconnect device [ 174.565392][ T8077] vhci_hcd vhci_hcd.8: stop threads [ 174.565406][ T8077] vhci_hcd vhci_hcd.8: release socket [ 174.565461][ T8077] vhci_hcd vhci_hcd.8: disconnect device [ 174.565730][ T8077] vhci_hcd vhci_hcd.8: stop threads [ 174.565771][ T8077] vhci_hcd vhci_hcd.8: release socket [ 174.565790][ T8077] vhci_hcd vhci_hcd.8: disconnect device [ 174.566610][ T9122] vhci_hcd: connection closed [ 174.567952][ T8085] vhci_hcd vhci_hcd.8: stop threads [ 174.568027][ T8085] vhci_hcd vhci_hcd.8: release socket [ 174.568130][ T8085] vhci_hcd vhci_hcd.8: disconnect device [ 174.761868][ T9208] tc_dump_action: action bad kind [ 174.764494][ T9207] set_capacity_and_notify: 3 callbacks suppressed [ 174.764524][ T9207] loop1: detected capacity change from 0 to 512 [ 174.784260][ T9208] loop5: detected capacity change from 0 to 256 [ 174.796587][ T9194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.796702][ T9194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.808869][ T9207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.809036][ T9207] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.885810][ T9024] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.077823][ T9235] netlink: 'syz.5.880': attribute type 3 has an invalid length. [ 175.135154][ T9237] loop1: detected capacity change from 0 to 256 [ 175.194935][ T9241] loop5: detected capacity change from 0 to 512 [ 175.303871][ T9241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.451429][ T9241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.882'. [ 175.478650][ T8094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.497068][ T9278] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 175.699255][ T9301] tipc: Started in network mode [ 175.699295][ T9301] tipc: Node identity 126a1afb795c, cluster identity 4711 [ 175.699351][ T9301] tipc: Enabled bearer , priority 0 [ 175.725396][ T9301] syzkaller0: entered promiscuous mode [ 175.725422][ T9301] syzkaller0: entered allmulticast mode [ 175.742804][ T9301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 175.788473][ T9301] tipc: Resetting bearer [ 175.835911][ T9301] tipc: Resetting bearer [ 175.844565][ T9317] FAULT_INJECTION: forcing a failure. [ 175.844565][ T9317] name failslab, interval 1, probability 0, space 0, times 0 [ 175.844602][ T9317] CPU: 1 UID: 0 PID: 9317 Comm: syz.8.892 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.844722][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.844735][ T9317] Call Trace: [ 175.844742][ T9317] [ 175.844749][ T9317] __dump_stack+0x1d/0x30 [ 175.844779][ T9317] dump_stack_lvl+0x95/0xd0 [ 175.844799][ T9317] dump_stack+0x15/0x1b [ 175.844902][ T9317] should_fail_ex+0x262/0x280 [ 175.844922][ T9317] should_failslab+0x8c/0xb0 [ 175.844947][ T9317] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 175.845017][ T9317] ? kstrtoull+0x119/0x150 [ 175.845111][ T9317] ? shmem_alloc_inode+0x34/0x50 [ 175.845139][ T9317] ? shmem_alloc_inode+0x34/0x50 [ 175.845234][ T9317] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 175.845261][ T9317] shmem_alloc_inode+0x34/0x50 [ 175.845336][ T9317] alloc_inode+0x40/0x170 [ 175.845365][ T9317] new_inode+0x1d/0xe0 [ 175.845396][ T9317] shmem_get_inode+0x250/0x7b0 [ 175.845425][ T9317] __shmem_file_setup+0x14f/0x260 [ 175.845450][ T9317] shmem_file_setup+0x3b/0x50 [ 175.845534][ T9317] memfd_alloc_file+0x4e/0x300 [ 175.845558][ T9317] __se_sys_memfd_create+0x2e1/0x3b0 [ 175.845582][ T9317] __x64_sys_memfd_create+0x31/0x40 [ 175.845615][ T9317] x64_sys_call+0x1955/0x2550 [ 175.845638][ T9317] do_syscall_64+0x112/0x360 [ 175.845673][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.845693][ T9317] RIP: 0033:0x7f528706e159 [ 175.845777][ T9317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.845794][ T9317] RSP: 002b:00007f5285ac6d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 175.845813][ T9317] RAX: ffffffffffffffda RBX: 00000000000005e4 RCX: 00007f528706e159 [ 175.845826][ T9317] RDX: 00007f5285ac6ddc RSI: 0000000000000000 RDI: 00007f5287105204 [ 175.845838][ T9317] RBP: 0000200000000600 R08: 00000000ffffffff R09: 0000000000000000 [ 175.845850][ T9317] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 175.845861][ T9317] R13: 00007f5285ac6ddc R14: 00007f5285ac6de0 R15: 00007ffd6e0b1e08 [ 175.845915][ T9317] [ 175.884263][ T9301] tipc: Disabling bearer [ 175.958988][ T9322] tc_dump_action: action bad kind [ 176.025765][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.5.894'. [ 176.262393][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.262433][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.271278][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.271350][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.285794][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.285881][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.293795][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.293820][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.8.898'. [ 176.400552][ T9375] loop5: detected capacity change from 0 to 4096 [ 176.422209][ T9375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.638568][ T8094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.680264][ T9411] tc_dump_action: action bad kind [ 176.700503][ T9415] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 176.733969][ T9415] loop1: detected capacity change from 0 to 4096 [ 176.743132][ T9422] xt_l2tp: v2 doesn't support IP mode [ 176.761661][ T9415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.441769][ T9415] ================================================================== [ 177.441806][ T9415] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 177.441847][ T9415] [ 177.441854][ T9415] write to 0xffff88811b51decc of 4 bytes by task 9429 on cpu 0: [ 177.442169][ T9415] xas_set_mark+0x12b/0x140 [ 177.442197][ T9415] __folio_start_writeback+0x16b/0x370 [ 177.442226][ T9415] ext4_bio_write_folio+0x5a2/0xa10 [ 177.442246][ T9415] mpage_process_page_bufs+0x484/0x5e0 [ 177.442276][ T9415] mpage_prepare_extent_to_map+0x83e/0xca0 [ 177.442301][ T9415] ext4_do_writepages+0x70f/0x2870 [ 177.442320][ T9415] ext4_writepages+0x191/0x300 [ 177.442343][ T9415] do_writepages+0x1b9/0x300 [ 177.442553][ T9415] file_write_and_wait_range+0x178/0x2f0 [ 177.442587][ T9415] ext4_sync_file+0x114/0x5c0 [ 177.442650][ T9415] vfs_fsync_range+0xc5/0xe0 [ 177.442671][ T9415] ext4_buffered_write_iter+0x427/0x480 [ 177.442695][ T9415] ext4_file_write_iter+0x36e/0x1020 [ 177.442720][ T9415] iter_file_splice_write+0x6a0/0xa60 [ 177.442952][ T9415] direct_splice_actor+0x158/0x280 [ 177.442987][ T9415] splice_direct_to_actor+0x2f9/0x680 [ 177.443016][ T9415] do_splice_direct+0x119/0x1a0 [ 177.443044][ T9415] do_sendfile+0x37d/0x640 [ 177.443073][ T9415] __x64_sys_sendfile64+0x105/0x150 [ 177.443237][ T9415] x64_sys_call+0x1015/0x2550 [ 177.443362][ T9415] do_syscall_64+0x112/0x360 [ 177.443391][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.443413][ T9415] [ 177.443420][ T9415] read to 0xffff88811b51decc of 4 bytes by task 9415 on cpu 1: [ 177.443435][ T9415] file_write_and_wait_range+0x130/0x2f0 [ 177.443468][ T9415] ext4_sync_file+0x114/0x5c0 [ 177.443499][ T9415] vfs_fsync_range+0xc5/0xe0 [ 177.443518][ T9415] ext4_buffered_write_iter+0x427/0x480 [ 177.443542][ T9415] ext4_file_write_iter+0x36e/0x1020 [ 177.443562][ T9415] iter_file_splice_write+0x6a0/0xa60 [ 177.443593][ T9415] direct_splice_actor+0x158/0x280 [ 177.443625][ T9415] splice_direct_to_actor+0x2f9/0x680 [ 177.443659][ T9415] do_splice_direct+0x119/0x1a0 [ 177.443692][ T9415] do_sendfile+0x37d/0x640 [ 177.443725][ T9415] __x64_sys_sendfile64+0x105/0x150 [ 177.443984][ T9415] x64_sys_call+0x1015/0x2550 [ 177.444017][ T9415] do_syscall_64+0x112/0x360 [ 177.444042][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.444063][ T9415] [ 177.444067][ T9415] value changed: 0x05000021 -> 0x02000021 [ 177.444078][ T9415] [ 177.444082][ T9415] Reported by Kernel Concurrency Sanitizer on: [ 177.444093][ T9415] CPU: 1 UID: 0 PID: 9415 Comm: syz.1.907 Not tainted syzkaller #0 PREEMPT(lazy) [ 177.444118][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.444130][ T9415] ================================================================== [ 177.796218][ T9024] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.929386][ T3388] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 179.529467][ T9391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512