last executing test programs: 4m39.623021076s ago: executing program 32 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000009) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RVERSION(r9, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0x15) 4m38.656913328s ago: executing program 33 (id=90): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 4m11.691641094s ago: executing program 3 (id=386): prlimit64(0x0, 0xa, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [@ldst={0x5, 0x0, 0x1}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd27, 0x80, {0x0, 0x0, 0x0, 0x0, 0x15f93, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x900, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r4}}, 0x20) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81}}, 0x1c}}, 0x40) 4m10.877632622s ago: executing program 3 (id=392): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0) 4m10.639998648s ago: executing program 3 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@ipv6_newroute={0x30, 0x18, 0xffffffffffffffff, 0x70bd27, 0x8, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=""/245, &(0x7f0000000200)=0xf5) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0x1001}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60000, 0x80) 4m10.454888282s ago: executing program 34 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@ipv6_newroute={0x30, 0x18, 0xffffffffffffffff, 0x70bd27, 0x8, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=""/245, &(0x7f0000000200)=0xf5) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0x1001}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60000, 0x80) 1m48.452352364s ago: executing program 35 (id=1705): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = memfd_create(&(0x7f0000000640)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/\xe0\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\v\x00\x00\x00\x00\x00\x00\x00\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r4, 0x0, 0x0, 0x200401) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setuid(0xee00) r6 = syz_io_uring_setup(0xd1b, &(0x7f0000000240)={0x0, 0x2, 0x1, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f00000001c0)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m6.259091827s ago: executing program 36 (id=2410): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[], 0x24, 0x1) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010003904fcffff7ffcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="01980400419a040028001280090001007665746800000000180002801400010000000200", @ANYRES32=r3, @ANYBLOB="2400010012100000"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40008c0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000600)={r0, &(0x7f0000000340)='iso9660\x00', 0x0, &(0x7f0000000380)={@_ha_fsid={[0x6, 0x9]}, {0x7, 0x101, 0xb37a, 0x100000001}}, 0x9, &(0x7f0000000540), 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @exit], 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000280)={{0x80}, 'port0\x00', 0xa1, 0x4, 0x0, 0x0, 0xfffffffa, 0x5, 0x0, 0x0, 0x0, 0xe}) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) flistxattr(r6, 0x0, 0x0) 54.004481927s ago: executing program 37 (id=2599): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x4}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x6, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x28f3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7afd, 0x2}, 0xe) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, {0xa, 0xfffd, 0xfffffffd, @remote}, r2, 0xfffffffc}}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2200c8c5}, 0x0) 48.246279309s ago: executing program 2 (id=2674): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, 0x0, 0x4) close(r1) accept4(r0, &(0x7f0000000280)=@xdp, 0x0, 0x80800) 47.372285529s ago: executing program 2 (id=2687): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x4bdf, 0x0, 0xa, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1100000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0) 47.347739299s ago: executing program 2 (id=2688): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000380)="0000000000000000000200000000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 46.470746739s ago: executing program 2 (id=2692): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$eJzs3MtvG8UfAPDvrpP8+vwllPLoAwiUR8UjadICPXABgcQBJCQ4lGNI0qo0bVATJFpVEBAqR1SJO+KIxF/AiV4QcELiCgduqFKFemnhZLT2buMY202MnYX685HWmdkda+ab3bFndrIJYGCNZy9JxI6I+DkiRuvZtQXG6z9uXLsw+8e1C7NJVKuv/57Uyl2/dmG2KFq8b3ueOZhGpB8nsa9FvUvnzp+aWViYP5vnJ5dPvzO5dO78UydPz5yYPzF/Zvro0SOHp559ZvrpnsSZxXV97/uL+/e8/OalV2ePXXrr+6+SIv6mOHpkvNPBR6rVHldXrp0N6WSoxIawIZWIyE7XcK3/j0YlVk/eaLz0UamNA/qqmmtzeKUK3MaSKLsFQDmKL/ps/ltsmzf6KN/V5+sToCzuG/lWPzIUaV5muGl+20vjEXFs5c/Psy36cx8CAGCNb7Lxz5Otxn9p3N1Q7v9pfQ1lLCLuiIhdEXFnROyOiLsiamXviYh7N1h/8yLJ38c/6ZWuAlunbPz3XL62tXb8V4z+YqyS53bW4h9Ojp9cmD9UP7aSvWT5qQ51XH7xp0/bHWsc/2VbVn8xFszbcWXof2vfMzezPNNtvM2ufhixd6hV/MnNlYAkIvZExN4u6zj5+Jf72x27dfwd9GCdqfpFxGP1878STfEXks7rk5NbYmH+0GTDVdHkhx8vvtau/n8Ufw9k539by+v/ZvxjSeN67dLG67j4yydt5zTdXv8jyRu19Ei+772Z5eWzUxEjySv1Rjfun159b5EvymfxHzzQuv/vitXfxL6IyC7i+yLi/oh4IG/7gxHxUEQc6BD/dy88/Hb38fdXFv/chs7/amIkmve0TlROffv1mkrHNhJ/dv6P1FIH8z21z7+kc1zraVd3VzMAAAD896QRsSOSdOJmOk0nJup/w787tqULi0vLTxxffPfMXP0ZgbEYTos7XaMN90On8ml9kZ9uyh/O7xt/Vtlay0/MLi7MlR08DLjtbfp/5rdK2a0D+s7zWjC42vb/LZvbDmDz+f6HwaX/w+Bq0f+3ltEOYPO1+v7/ICIuP1pCY4BN1dT/LfvBADH/h8Gl/8PgWkf///X2+nfVQEQsbY1bPyTf30QlyqxdostEpP+KZkj0KVH2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBv/BUAAP//m5Hs/w==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) unlink(&(0x7f0000000280)='./file1\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x9, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ff7f0000fddbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="08001c00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x90) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&', 0x2}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 45.880507992s ago: executing program 2 (id=2700): r0 = dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = accept$nfc_llcp(r0, &(0x7f0000000100), &(0x7f00000000c0)=0x60) fcntl$setstatus(r1, 0x4, 0xc00) open(0x0, 0x8000, 0x50) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080045"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 45.645209018s ago: executing program 2 (id=2702): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff0f}, 0x20000000) 45.59193817s ago: executing program 38 (id=2702): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff0f}, 0x20000000) 41.63577821s ago: executing program 5 (id=2732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4801060010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 41.552396852s ago: executing program 5 (id=2734): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x2, 0x0) 41.449799994s ago: executing program 5 (id=2736): r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0xce, 0xffffffffffffffff, &(0x7f0000000380)) sendmsg$nl_route(r0, 0x0, 0x4800) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) getpid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x240303) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue0\x00', 0x2001}) poll(0x0, 0x0, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) fgetxattr(r0, &(0x7f0000000000)=@random={'system.', 'queue0\x00'}, &(0x7f0000000040)=""/9, 0x9) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf25040000000c001600250127df6e391ffd"], 0x20}, 0x1, 0x0, 0x0, 0x40000800}, 0x4000000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r9, @ANYBLOB="060006000000000006f70c5a89000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r8) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES16=r10, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x78, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\\-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x22, 0x1, 0x70bd2d, 0x25dfdbfb, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 40.442502027s ago: executing program 5 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56141, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x48fa50d347e11340}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xce0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt(r0, 0xfff, 0xf7d, &(0x7f0000000140)=""/188, &(0x7f0000000200)=0xbc) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000001000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRESDEC=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="4000020000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="2f40b8b3bf5017e37250ca94292d39dbf7d75138a5b58e0afc03ff2ad40c803550226d6c189ed0d7938f3ef16ff30b012dd912ac580d0b6ccadad1787f97f0604ea2c9c78ce5ae84789d5127f1aa726a935220a492f4ce5b56406039ecc8487502a6d3239f515b377793a8dad3d72e06a1c7c85a980b65e5c11e22c42c7504b96adc90c77c002703871727d99e7933f52a68823c64f4021c0e3246f6995e97b1"], 0xfffffffffffffe52}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000003b40)=[{&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000001a40)=""/4096, 0xfe93}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/213, 0xd5}], 0x4) 40.067128605s ago: executing program 5 (id=2745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) brk(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8004, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r1, 0x0) mount$9p_tcp(&(0x7f0000000280), &(0x7f00000002c0)='./debug\x00', &(0x7f0000000300), 0x4080, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@cache_none}, {@aname={'aname', 0x3d, '[]'}}, {@cache_mmap}], [{@appraise}, {@subj_user={'subj_user', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r1}}, {@flag='nomand'}]}}) connect$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000440), 0x75, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@multicast2]}]}}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x2, 0x0, 0x0, 0x7f, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0xef2, 0x4aecd42e}, 0x10ecc8, 0x1224, 0x88004, 0x8, 0x8, 0x20004, 0x0, 0x0, 0x2, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@cgroup, 0x4, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="140000"], 0x18, 0xc00c815}}], 0x1, 0x20000011) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 39.495094829s ago: executing program 5 (id=2754): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x10002, 0x1224, 0x0, 0x72c454a3aedc7672, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000001020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x4, 0x1400}]}, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 34.062145653s ago: executing program 1 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x100000000000000}, 0x4000010) 33.891258206s ago: executing program 1 (id=2817): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800000000000000}, 0x50) 33.877004477s ago: executing program 1 (id=2818): unshare(0x22020600) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) fsync(r0) 33.595674423s ago: executing program 1 (id=2820): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x234, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = epoll_create1(0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x39, 0x4, &(0x7f0000001180)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r1, 0xffffffffffffffff, 0x11, 0x0, r1}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x20008000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5) syz_clone3(&(0x7f0000000900)={0x108004100, &(0x7f00000000c0), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x202c01, 0x0) io_submit(r6, 0x2, &(0x7f00000005c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f00000003c0)="af1f5d2b00062559962d7b8e1f510dc075021dc67a1d48791741ab822f763605c6bfccbf845c20243f12303033cbd950a2cf1e98a74ea5a4a4fd9cfdfa22040357190ced63ca6b0b9e4198f90786b23e7d6d5a764be13219822917690fcc0fd6b586af4cc4c274e85a1dae9bf90da02c3d484c0d6ac0eb3c88da4e117dd07a75ea75c7684b9686a1e9d994ebf28793283fcd93572432f4dbd19b8f47a7f31131bf54c1ac3c7105ae4d37689e4ec6196358cc828a119ad2a96f52639cbb2398bb0e8953c923d4126f7a776673294e733d265b3523eb20eb577e68891be63083d55c12f4584573", 0xe6, 0x1000000000000, 0x0, 0x3, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000540)="a52076588d2fc96172e529eb9e007ff82ef7af716f1cc0b691b3fff68e9c88e20b74d1c2104a", 0x26, 0x5, 0x0, 0x0, r7}]) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0]) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000000000)) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 33.096522514s ago: executing program 1 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r2, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, r1, 0x2, {0x100000001, 0xe99}, 0x1}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001002abd7000000000000000fa10", @ANYRES32=0x0, @ANYBLOB="8020010000000000140003"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") 32.815085431s ago: executing program 1 (id=2830): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x1, 0x7, 0xfff, 0x1000, {{0x19, 0x4, 0x1, 0x6, 0x64, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @empty, {[@cipso={0x86, 0x2c, 0x0, [{0x6, 0x8, "32fa2ecaa367"}, {0x0, 0x2}, {0x1, 0x10, "51005c035cbd94f0de4dfd4ff5e2"}, {0x1, 0xc, "8d813a2b7097cd86037d"}]}, @cipso={0x86, 0x23, 0x1, [{0x1, 0x12, "be3e3b3bb2c32f7aea1440df05c6c153"}, {0x0, 0xb, "5b5ae42e457882e838"}]}]}}}}}) connect$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x1, {0x1, 0x0, 0x1}, 0xff}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x1, 0xfffffffffffffffe}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000cc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001300)=ANY=[@ANYBLOB="b8132444", @ANYRES16=r5, @ANYBLOB="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"], 0x13b8}, 0x1, 0x0, 0x0, 0x20004091}, 0x20048000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000800)=ANY=[@ANYBLOB="f9f5c88e3e3326c400a27e7471e0341ea415254f9a65c671b8b9d332c5ccbff85af98ea3bbcd5a223490c68f1ac9477092dcf135b39c34c1c629e65e5db4a9c0f0e9ce9df747b65ef6aeea5f57ac510774adc80526c4970e8c6f130ef5bdaed56c8d2e80e192148443679800b5d3f79a81ff38423dbfce9183f9ab1742aff60eeb3badc47739c4a2f464333f561435d67799f30f7b55462fd79e705a1abfabb0358ff9b76fe71671cc9a7da52cdab4063ff1eb6b67", @ANYRESOCT, @ANYBLOB="adb82e49390e13dad89795fceaa910841d7c38bdd9d2cba9ef5815e931971a55a8b6dd8cc9cc2f1e652a1c59302fa6d69f9e6caf73c289248116e0b1b9c50b99ede13464746c8dcb06e87a6d5cac04a12d661ffb2d9bd3052fc09c16b122637656b6456042e905256a869963a8b3d214d8b6b7662345f509aa353b34", @ANYRES8, @ANYRESDEC, @ANYBLOB="29d1c2e5c8a1d7ebc2b7ecdc6435805b7795582c1bf88415b45982e3908415c4ccd9c6717b63ca0d79c18dc2997561698996e50207a4fc610709eaf923014d96a8ceb424b4"], 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000440)=0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 32.781213382s ago: executing program 39 (id=2830): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x1, 0x7, 0xfff, 0x1000, {{0x19, 0x4, 0x1, 0x6, 0x64, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @empty, {[@cipso={0x86, 0x2c, 0x0, [{0x6, 0x8, "32fa2ecaa367"}, {0x0, 0x2}, {0x1, 0x10, "51005c035cbd94f0de4dfd4ff5e2"}, {0x1, 0xc, "8d813a2b7097cd86037d"}]}, @cipso={0x86, 0x23, 0x1, [{0x1, 0x12, "be3e3b3bb2c32f7aea1440df05c6c153"}, {0x0, 0xb, "5b5ae42e457882e838"}]}]}}}}}) connect$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x1, {0x1, 0x0, 0x1}, 0xff}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x1, 0xfffffffffffffffe}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000cc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001300)=ANY=[@ANYBLOB="b8132444", @ANYRES16=r5, @ANYBLOB="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"], 0x13b8}, 0x1, 0x0, 0x0, 0x20004091}, 0x20048000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000800)=ANY=[@ANYBLOB="f9f5c88e3e3326c400a27e7471e0341ea415254f9a65c671b8b9d332c5ccbff85af98ea3bbcd5a223490c68f1ac9477092dcf135b39c34c1c629e65e5db4a9c0f0e9ce9df747b65ef6aeea5f57ac510774adc80526c4970e8c6f130ef5bdaed56c8d2e80e192148443679800b5d3f79a81ff38423dbfce9183f9ab1742aff60eeb3badc47739c4a2f464333f561435d67799f30f7b55462fd79e705a1abfabb0358ff9b76fe71671cc9a7da52cdab4063ff1eb6b67", @ANYRESOCT, @ANYBLOB="adb82e49390e13dad89795fceaa910841d7c38bdd9d2cba9ef5815e931971a55a8b6dd8cc9cc2f1e652a1c59302fa6d69f9e6caf73c289248116e0b1b9c50b99ede13464746c8dcb06e87a6d5cac04a12d661ffb2d9bd3052fc09c16b122637656b6456042e905256a869963a8b3d214d8b6b7662345f509aa353b34", @ANYRES8, @ANYRESDEC, @ANYBLOB="29d1c2e5c8a1d7ebc2b7ecdc6435805b7795582c1bf88415b45982e3908415c4ccd9c6717b63ca0d79c18dc2997561698996e50207a4fc610709eaf923014d96a8ceb424b4"], 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000440)=0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 26.781621748s ago: executing program 3 (id=2831): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x39271, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}]}}}]}, 0x40}}, 0x4040) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r3 = open(&(0x7f00000000c0)='./file1\x00', 0x167842, 0x21) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000280)="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") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000071401"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000580)={[{@data_err_ignore}]}, 0x0, 0x23e, &(0x7f00000005c0)="$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") ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40e8662e, &(0x7f0000000000)={0x9, 0x40000000000002, 0x10, 0xb, 0x5, 0x1}) 26.227375701s ago: executing program 3 (id=2872): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x275b, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) syz_open_dev$vcsu(&(0x7f0000000380), 0x3, 0x880) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xd2c, 0x19a}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0xb8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x5d1000, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r4, 0xdfb, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f00000004c0)="e4", 0x1, 0x5, 0x0, 0x2}]) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000100)={0x6, 0xa}) socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0x9, 0x472}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r7, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 24.642870617s ago: executing program 3 (id=2895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000210704000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d"], 0x50}}, 0xc080) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="80002dbd7000ffb2df25010000001400020068737230000000000000000000000000050004000100000009000300737977320000000005000400010000000900010073797a00010000000000000001000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 24.610439048s ago: executing program 40 (id=2895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000210704000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d"], 0x50}}, 0xc080) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="80002dbd7000ffb2df25010000001400020068737230000000000000000000000000050004000100000009000300737977320000000005000400010000000900010073797a00010000000000000001000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 24.434140422s ago: executing program 41 (id=2754): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x10002, 0x1224, 0x0, 0x72c454a3aedc7672, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000001020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x4, 0x1400}]}, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 24.324697235s ago: executing program 6 (id=2903): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10001, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000140)={{r3}, 0x0, 0x0, 0x9, 0x9}) r4 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sg(&(0x7f0000000240), 0x200, 0x80c0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x20800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x20000, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x1, 0x4}, 0x28) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_route(0x10, 0x3, 0x0) 23.772473197s ago: executing program 6 (id=2908): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) setresuid(0x0, 0xee00, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000004d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) futimesat(r0, 0x0, 0x0) r2 = socket(0x400000000010, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x4, 0x8, 0x0, 0x2, 0x7}}, {0x4}}]}]}, 0x54}}, 0x4c840) 23.728201298s ago: executing program 6 (id=2909): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffdd0, 0x2, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtaction={0xac, 0x30, 0xb, 0x0, 0x1, {}, [{0x98, 0x1, [@m_skbedit={0x94, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x47, 0x6, "f92f85e06b768534659a7887a4c8611bea227f4aa2b82d96826ffb17e0c52d7a7158196e67b13d8528cf0b1690ef8c3977eb7490f347b8a2e3e37f41148d8871bcc5a8"}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0xac}}, 0x0) 22.515751726s ago: executing program 6 (id=2922): gettid() r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x7a, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_procs(r8, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x53, 0x0, 0x0, 0x0, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xdf, 0x3}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7fffffff, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x46f, &(0x7f0000000f40)="$eJzs3EtvG0UcAPD/bpqWPhNKefQBBAoi4pE0aYEeuIBA6gUJCQ7lGNK0aps2qAkSrSKaIlSOqJ8AOCLxCTjBBQEnEFe4I6QK5ULggBatvRtcx07txKlT/PtJm8zsznrn792xZ2dsB9CzhvI/ScSuiPglIgYioq++wFD139Li/ORfi/OTSWTZm38k+W7x5+L8ZFk0Kf7vLDLDaUT6URIHGxx39vKV8xPT01OXivzo3IV3R2cvX3nu7IWJM1Nnpi6OHz9+7OjYiy+MP9+ROHfndT3wwcyh/SfevvH65Mkb73z/ZV7fXcX22jiqBtd9zKEYWn5O6j257kffXHbXpJMtXawIbcnben66+ivtf+CWtj8Qr33YxaoBGyzLsmzbirXLrwILGfA/lkS3awB0R/lGn9//lssd7H503c2XqzdAedxLxVLdsiXSokx/3f1tJw1FxMmFvz/Nl2g4DgEA0Flf5/2fZxv1/9J4oKbcnmJuaDAi7o2IvRFxX0Tsi4j7IyplH4yIh9o8/lBdfmX/56ftawqsRXn/76VibuvW/l/Z+4vBviK3uxJ/f3L67PTUkeI5GY7+bXl+bJVjfPPqz58021bb/8uXpf6YLPuCRT1+31I3QHdqYm5iPTHXunmtMgZ4dWX8SZTTOElE7I+IA2t4/Px6Ofv0F4eabV8R/+J8Xfyr6MA8U/Z5xFPV878QdfGXktXnJ0fviempI6PlVbHSDz9ef6PZ8dcVfwfk539Hw+t/Of7BpHa+drb9Y1z/9eOm9zS3j7/x9b81eauS3lqse39ibu7SWMTWZGHl+vH/9i3zZfk8/uHDjdv/3oh/Piv2OxgR+UX8cEQ8EhGPFnV/LCIej4jDq8T/3StPnFt7/Bsrj/9UW+e//UTf+W+/anb81s7/sUpquFjTyutfqxVcz3MHAAAAd4u08hn4JB1ZTqfpyEj1M/z7Ykc6PTM798zpmfcunqp+Vn4w+tNypGugZjx0rBjrK/PjdfmjlXHjLMuy7ZX8yOTM9EbNqQOt2dmk/ed+6+t27YAN19Y8WrNvtAF3Jd/XhN6l/UPv0v6hd2n/0Lsatf+rEUur7nRtw6oD3EHe/6F3af/Qu7R/6F3aP/SkNr/Of25PdbfbFt57orUHLH+AcB0/L3B3Jcpfs1le07dJKtZuItJNUY21JdLNUY1qYltEtFr46h1rKd16RQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOisfwMAAP//nO/ilw==") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) 21.90705883s ago: executing program 6 (id=2931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000fffeffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000001800)=""/4096, 0x40f00, 0x28, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000002800)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002840)={0x0, 0xb, 0x3, 0x6}, 0x10, 0x15a8a, 0xffffffffffffffff, 0x0, &(0x7f0000002880)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7fff}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6b3100000000000617ae5119b5135c2aee68cc3a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dfed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}, 0x48}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r6, r7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000202, r6, &(0x7f0000002980)='./proc/net/rpc/auth.unix.ip/content\x00') mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r8) open$dir(&(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/content\x00', 0x40, 0x46) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r9, &(0x7f0000000500)="73642031325a2e302e302e3120333630300a00695d7c478f1e4aee23e7ffe162196883d9d098fb039b3f026bae56a81a230b212ef663f1dbc60553ef8a62bd57ee20d3e7cb4adde594264d55abd881c255407165002e35632c8b9083ed8f6097b45ef6133377cf5cfde98992a52dca9fc23463c886102fc2f234f1fe6f7f03dcf31eee7b89c9f350360203c8ecb7abd995148f476030a00c9cb44ef6232c73140c35a8fae0d573fc5a49202540ca0ea0ef64f328cbd071f62159a059bffeed95f8897d9e02bedc5148f12387f3e458ae57ec1020077093e322cdc0f4bc6ae7", 0xfffffe8e) 21.801738093s ago: executing program 6 (id=2933): sysinfo(&(0x7f0000000280)=""/208) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = getpgid(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8002, 0xa8, &(0x7f000000cf3d)=""/168, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) fcntl$getflags(r3, 0x40a) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) sendto$inet6(r5, &(0x7f0000000040)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4e23, 0xfffc, @local, 0xfffffffd}, 0x1c) r6 = syz_pidfd_open(r0, 0x0) process_madvise(r6, 0x0, 0x0, 0xa, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000f060103000000000000000001000008050001000700000006000b000300000005000100070000000500010007000000050001000700000006000b00020000000500010007000000050001000700000005000100070000005adb01d5a27488e18eda7779920eeb195972c26d28645db96ff3f7a308d677f051aeae"], 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040045) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 21.756839023s ago: executing program 42 (id=2933): sysinfo(&(0x7f0000000280)=""/208) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = getpgid(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8002, 0xa8, &(0x7f000000cf3d)=""/168, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) fcntl$getflags(r3, 0x40a) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) sendto$inet6(r5, &(0x7f0000000040)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4e23, 0xfffc, @local, 0xfffffffd}, 0x1c) r6 = syz_pidfd_open(r0, 0x0) process_madvise(r6, 0x0, 0x0, 0xa, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000f060103000000000000000001000008050001000700000006000b000300000005000100070000000500010007000000050001000700000006000b00020000000500010007000000050001000700000005000100070000005adb01d5a27488e18eda7779920eeb195972c26d28645db96ff3f7a308d677f051aeae"], 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040045) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 10.683273566s ago: executing program 7 (id=3050): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x8001, 0x101102) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000080) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) pipe2(0x0, 0x800) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100f5000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 8.136210644s ago: executing program 7 (id=3059): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5b, &(0x7f0000000040)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a80015000300014002003f0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x8850) 8.040619647s ago: executing program 7 (id=3063): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x2e, 0x1c14fd, 0x3, 0x8000008, 0xffffeffe, 0x0, 0x1000, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000080)={0x800100, 0x7, 0xfffffffe, 0x10000, 0x82, 0x80003}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffdde) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) r4 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x1, 0x0, 0x5b, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000004c0), 0x4}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x4, 0x0, 0x2, 0x1ff}, 0xffffffffffffffff, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") socket$kcm(0xa, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, r2}, 0x4) recvmsg$unix(r4, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYRES16=r7], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8021, 0x7800, 0xc41, 0x4, {{0x1e, 0x4, 0x1, 0x5, 0x78, 0x68, 0x0, 0x4, 0x29, 0x0, @empty, @multicast2, {[@end, @generic={0xc7, 0xd, "a21c35baa73b95973f4842"}, @timestamp_prespec={0x44, 0x1c, 0x72, 0x3, 0x3, [{@local, 0x10000}, {@private=0xa010100, 0x7}, {@local, 0x6}]}, @rr={0x7, 0x13, 0x45, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x3ff}, {@rand_addr=0x64010101, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x3}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000540)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x101, 0x2, 0x0, 0x400, 0x8, 0x400a0084, r9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00f8376d241d9bf07b9dd18a390eb91c001a8008000295103e8fd54b8dad48fff5b86ce731c515ede421eb274fa82237b1a472c214199ab41fa0158b48a2cba5e174b2bacedf803f7b5aad02a6fb6e755227fd89ad455e341af81ce935e1633b54ce5253ce1880bd85da9ba63279fc41f4f1086b79ccf966c5ebf25d40703411f9abb9bca11c08b72f5ed55f836496aba1c1795a00cd03c2485f804c88701ab339a0f91d32"], 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000440), 0x8}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.739309994s ago: executing program 7 (id=3071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x40000000015, 0x5, 0xfffffff9) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x1b7aa5c44d036a23, 0x1002) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1d8) pwrite64(r3, 0x0, 0x0, 0xc00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9, 0xf, 0x9}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, 0x0, 0x0) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$loop(&(0x7f0000000340), 0x8001, 0x101a00) ioctl$BLKFLSBUF(r8, 0x1261, 0x0) connect$pptp(r7, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@local, 0x4e20, 0x9, 0x4e20, 0x0, 0xa, 0x80, 0x20, 0x3c}, {0x7fff, 0xff, 0x5, 0x0, 0x2b51, 0xffffffffffffffff, 0xffffffffffffff69, 0x9}, {0x4, 0x6, 0xc00000, 0xff}, 0x1, 0x6e6bc0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0xfaf4bd98cb3d06f8}, 0x2, @in6=@private0, 0x3501, 0x1, 0x1, 0x9, 0x7933b0d9, 0x1, 0x821}}, 0xe8) 7.201600076s ago: executing program 7 (id=3079): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700e00006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 6.064201642s ago: executing program 7 (id=3099): unshare(0x22020600) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) fsync(r0) 5.994551183s ago: executing program 43 (id=3099): unshare(0x22020600) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) fsync(r0) 2.394785265s ago: executing program 4 (id=3110): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x88) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 2.098599562s ago: executing program 8 (id=3114): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) gettid() (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd29, 0x25dfdbff, {0x7, r1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42024}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 1.986424015s ago: executing program 8 (id=3115): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0xffff0f00}, @ptr={0x0, 0x0, 0x0, 0xa}, @float={0x2, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46}, 0x28) 1.969013545s ago: executing program 8 (id=3116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0xffde}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfd, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4000) timer_create(0x3, &(0x7f00000004c0)={0x0, 0x3, 0x2}, &(0x7f0000000500)) timer_create(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000c00)) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x6c, 0xc, "151af631d8718a7376532622371ea629acb380f4a7fba1ff05391417485803e61ebdb79daa6652f748698ff139b16656b2a7599881d811e1a0a396af9bebfcf1a9df2e72b9ed010166b8763c407720618b8dcf4fdbf419122d05c792f4ece8464e9539ae5c5198a3"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3288d332}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a49e81c}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12a30649}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x200c0085}, 0x20004840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002ffffffff00000000000000070000000c00078005000d00050000000500010006000000050005000200000005000400030000000900020077797a300000000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x20004000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001900010028bd7000000000000a00ab000003000900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r7 = socket$kcm(0x2, 0x5, 0x84) syncfs(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r7) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r10, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x41f0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000)=r11, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r11, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x40000000000000}}, './file0\x00'}) 1.875323188s ago: executing program 4 (id=3117): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d7265eb27e2ae45ceb9866c61746976653a"]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0"], 0x110) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x32000, &(0x7f0000003700)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0fd0448, &(0x7f0000000000)={[{@nodioread_nolock}, {@acl}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x4000) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.682635972s ago: executing program 4 (id=3120): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2090) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180), 0x0, 0x4051, &(0x7f00000001c0)={0x11, 0x1, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) 1.129796154s ago: executing program 4 (id=3123): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) shutdown(r0, 0x0) 1.094365465s ago: executing program 8 (id=3124): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd2a, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102300, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={r3, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x6, 0xfffb}, 0x90) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) 914.907569ms ago: executing program 0 (id=3126): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000400)) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=G']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r4, 0x0, &(0x7f0000001140), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x2, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffc, 0x6}, {0x7fde, 0x40, 0x51, 0x3fc}, {0x7, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x200}, {0x1, 0x1800004, 0xa525, 0x200000}]}}, @TCA_U32_POLICE={0x4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_U32_LINK={0xfffffffffffffe2a, 0x3, 0xd}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0xc040) readv(r0, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/236, 0xec}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001014100026bd7000fcdbdf25004a000200000008000100020000000800030002000000080015000100000000"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000000)={0x7, 'veth1_virt_wifi\x00', {0xde27}, 0x3}) 905.207239ms ago: executing program 9 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x2, 0x7, 0xe5f9, 0x2}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x600}}}}]}]}, 0x64}}, 0x10) 865.85359ms ago: executing program 4 (id=3128): prlimit64(0x0, 0xe, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, &(0x7f0000000200)={[0x100000000]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xffffffff80000001, 0x8000000000000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) r2 = getpgid(0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x3, 0x5001) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) prctl$PR_SET_MM(0x23, 0xd, &(0x7f000017e000/0x2000)=nil) mmap$binder(&(0x7f0000141000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1000) write(r1, &(0x7f0000000000)='\"', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000160a010300000000000000000a0000040900010073797a310000800800000900020073797a3100000000140000001100010000000000000000000100"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 777.415962ms ago: executing program 9 (id=3129): r0 = socket(0x28, 0x5, 0x0) shutdown(r0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gretap0\x00', 0x1}, 0x18) 742.655193ms ago: executing program 9 (id=3130): io_uring_setup(0x589c, 0x0) kexec_load(0xd0ffbb, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x2c4, &(0x7f0000000040)={0x0, 0x1977, 0x8, 0x1, 0x1b1}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) syz_clone3(0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x800, 0x400000) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 702.100054ms ago: executing program 9 (id=3131): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_ts_info}) socket$netlink(0x10, 0x3, 0x0) getpid() r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f00000007c0)=""/209, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020200011800a00010071756f7461000000100002800c00014000000000000000003c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214"], 0xe0}}, 0x20008804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff25000080", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 570.195347ms ago: executing program 0 (id=3132): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2090) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180), 0x0, 0x4051, &(0x7f00000001c0)={0x11, 0x1, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) 569.947137ms ago: executing program 9 (id=3133): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value=0x2000000}, 0x50) 522.302198ms ago: executing program 9 (id=3134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0xffde}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfd, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4000) timer_create(0x3, &(0x7f00000004c0)={0x0, 0x3, 0x2}, &(0x7f0000000500)) timer_create(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000c00)) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x6c, 0xc, "151af631d8718a7376532622371ea629acb380f4a7fba1ff05391417485803e61ebdb79daa6652f748698ff139b16656b2a7599881d811e1a0a396af9bebfcf1a9df2e72b9ed010166b8763c407720618b8dcf4fdbf419122d05c792f4ece8464e9539ae5c5198a3"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3288d332}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a49e81c}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12a30649}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x200c0085}, 0x20004840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002ffffffff00000000000000070000000c00078005000d00050000000500010006000000050005000200000005000400030000000900020077797a300000000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x20004000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001900010028bd7000000000000a00ab000003000900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r7 = socket$kcm(0x2, 0x5, 0x84) syncfs(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r7) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r10, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x41f0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000)=r11, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r11, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x40000000000000}}, './file0\x00'}) 502.094619ms ago: executing program 0 (id=3135): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) syz_io_uring_setup(0x206c, 0x0, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x9, 0x5}, 0x800, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) time(0x0) r1 = syz_io_uring_setup(0x933, &(0x7f0000000840)={0x0, 0x1a85, 0x2, 0xfffffff8, 0x2df}, 0x0, &(0x7f00000006c0), 0x0) io_uring_enter(r1, 0x0, 0xfffffffe, 0x3, &(0x7f0000000700), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0xfd5e, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x800000000000005, 0x4}, 0x4, 0x0, 0xe723, 0x4, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfcd5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r4}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000001400)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @ib={0x1b, 0x4, 0x3618, {"3961d70dbb24dcd5fcc10f8c89b63068"}, 0x4, 0x0, 0xfffffffffffffc00}}}, 0x90) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x1) write$UHID_CREATE2(r5, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xb2f, 0x2, 0x3b40000, 0x6, 0x9, 0x513, "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"}}, 0xc47) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000700)=""/205, 0xff3f}, {&(0x7f0000000580)=""/194, 0xcb}, {&(0x7f00000000c0)=""/32, 0x1c}], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="180280000100000000000000000000010000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000022cbf8c6f353face00950000009b0000009500000000000000832b28e30edc66c6328475304f7b367c88e86c872dae9499f674a93a07421817e51eed9fdbf4993354e6058a16b3d51d3452dd03cf12ef48819ceb9a816a71d2652f3a1c1ee371332600"/184], &(0x7f0000000800)='syzkaller\x00'}, 0x94) 399.379781ms ago: executing program 0 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100000000000000300000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 376.768462ms ago: executing program 0 (id=3137): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) shutdown(r0, 0x0) 275.009744ms ago: executing program 0 (id=3138): r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f0000000000), 0x1, 0x50f, &(0x7f0000000dc0)="$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") r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000e00)={{r2}, r3, 0x0, @inherit={0x78, 0x0}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001300)={{r0}, r3, 0x10, @unused=[0xb, 0x0, 0x4, 0xffffffffffff265f], @name="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"}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) r4 = fcntl$dupfd(r1, 0x0, r1) readv(r4, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2c, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2a}, 0x28) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @thr={&(0x7f0000000100)="f8e082ee04bb10e7612887dd9072ff82eaf0cadfe057c60a68e08f26ccb9b7dea7d811383c3997edf219bfa8215ae96786e35f365537cc2eb307a22c488f7609ef1e56c11e435c543dcb9ad018cd37e23f1b85b42b466b8564cb363dd3e89ccd87e7cac8a4e04ff4a3a6a93eb25d58cc875623bd0c4f4faf5776b23822b4bb2aa7f4813a93a2f3c58a0b2ba9f811252e6b59f3601dbf284caf2ec251a21fa3a7d89c26aef9c5f74a9426c43015f7043878ea6499af9c529ba454c3d3720907299afdd99b229f5fe60911a70eae69ed6b5069ac8c9a16293a9f306f7eeffc8784abbc", &(0x7f0000000200)="aba80ba5a4d4b216542d7ae1a630078db468b80cb42c398b6e461c79c3b2ef7c39d0582de058d25bea33669f38d025b14f570d5f217d732a42b55c8696a18755"}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000300)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 195.114806ms ago: executing program 8 (id=3139): r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x1) r1 = socket$netlink(0x10, 0x3, 0x15) fchmod(r0, 0x28) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) r2 = syz_clone(0x400, &(0x7f0000000040)="5e04254326f38c79a391b1d6a17df19e4934dae37061696b0a004756f4c083aa87b6a1d3541f7aa300c8a84b3db9e9fb49b3190083f65917dff89e7450ef2fc69dba6e9097178f21d62af24e1fb0e6074c19684594af", 0x56, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="2602d8290a41d9ab844ecb4fe5923c7a443c57458ece7f19fbd144fa13a0ce9f095ca247ed386f672322e5181db23f616ec243423e40e0e914dbb19b5da194cf7ac3a134ee172bc536fa15171841e854874e13c464dc95fbbe44755104cab6ceb2c709e4e93a0113547f9093cd738fc7983aaabdf5a91d9b52ab8623ebec727f13be022013e767aaa578a48e612a3f2f0b438b3865414682191be0178eeebe3967f35dda455885e26d3dc5171304e5ff322339427d2148") sched_setaffinity(r2, 0x8, &(0x7f0000000200)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x1, 0xf, 0x6, 0x81}, {0x8a3, 0x6, 0x2, 0xd94}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000440)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r5, &(0x7f0000000480)) bind$packet(r1, &(0x7f0000000500)={0x11, 0xf5, r4, 0x1, 0xf4, 0x6, @random="1cda90253d44"}, 0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000640)={r1, &(0x7f0000000540)='*\\\'\x00', 0x80480, &(0x7f0000000580)={@_ha_fsid={[0xea, 0x9]}, {0x3}}, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x7}) read$eventfd(r6, &(0x7f0000000680), 0x8) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f00000006c0)=[0x5, 0x5]) poll(&(0x7f0000000700), 0x0, 0x7) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', r4, 0x29, 0x80, 0xff, 0x9, 0x10, @private0, @mcast2, 0x8, 0x7, 0x0, 0x8000}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x184, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "a23c264d76222c8a66b7c0c7050b7d29005eacb0da706783c97665b110f4311d88a1f9700038ad8aea02ec295ddeceabd820e19cbd46cf394124a7f2406c7fdc0f91b627156e58eb40e142b28935bae88e8e01814ed2225cbdb715794cc27be149560cd449171963b2445d35832825b452f3de90be69574a85ac5536197e4b8f53f7d973f54f2bdb2193665f800a263978209136cc12404311ea921532b8ca7404767f0fcc58130b5ea680ef2305778008c3c31311ca840cc6daaf9fe927e1782329b9a3cae6acf01e09c59ee3c4ee4811d6c309f110605e6e9d36a4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x48050}, 0x800) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000ac0)=@hopopts={0x2e, 0xa, '\x00', [@hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x38, {0x0, 0xc, 0xfa, 0x36, [0x0, 0x7ff, 0x7, 0xb, 0x0, 0x1]}}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}]}, 0x60) msgget$private(0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000001040)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8080030}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)={0x448, 0x3f4, 0x4, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x31, [0x2, 0x5, 0x7aec, 0x100, 0xc, 0x4e38, 0x48, 0x7, 0x6, 0x1, 0xbc4, 0x80000001, 0x4, 0xfae0, 0x0, 0x0, 0x1, 0x1, 0xb991, 0x1, 0x0, 0x10, 0x4, 0x26, 0x40, 0x2, 0x9, 0x4, 0x8, 0xffffffff, 0xfff, 0xff, 0x6, 0xfffffffb, 0x6, 0x7, 0xdb81, 0x1, 0x4, 0x800, 0x2, 0x7, 0x4b318f9b, 0x8001, 0x6, 0x8, 0x9f8, 0xe, 0x9, 0x1ff, 0x5, 0xf47, 0x8, 0x8000, 0x9, 0xffffff2f, 0x6, 0x9, 0x6, 0x2, 0x0, 0x9, 0x9, 0x6], [0x2, 0x7, 0xffffce00, 0x0, 0xa2, 0xffffffa8, 0x1, 0x1, 0x6000, 0x8, 0x1db, 0x5, 0x18e, 0x1, 0xa0d, 0x10000, 0x7e, 0x7fff, 0x4, 0x1000, 0x1, 0x0, 0xbc, 0xfffffffe, 0x2, 0x1, 0x2, 0x6, 0x2, 0x4, 0x2, 0xb, 0x0, 0x9, 0x10001, 0x7dbbdc5, 0x85, 0x3, 0x9, 0x7, 0x8, 0x100, 0x6, 0x3, 0x5, 0x1, 0x1, 0x7, 0x8, 0x7f, 0x6, 0xb, 0x3, 0x1, 0x1, 0x0, 0x49, 0xfffffffc, 0x3, 0x7136, 0x5, 0x3b4919ae, 0x9, 0x9], [0x80, 0xfffffff8, 0x6, 0x5, 0x2, 0x40, 0x1, 0x10, 0x3ff, 0x0, 0x81, 0x2, 0x8, 0x0, 0xfffffa8b, 0x40, 0x0, 0x4, 0xe4, 0x7, 0x0, 0x13400, 0x8, 0x2, 0x8, 0x0, 0x8, 0x5, 0x7, 0x4, 0x5, 0x60, 0x1, 0x2, 0x1af3b664, 0x9, 0xffff, 0x0, 0x2, 0xfffffffd, 0x0, 0x1000, 0x80, 0x4, 0x3, 0x5, 0x10, 0x92d, 0xcf3, 0x101, 0x80000001, 0x0, 0x9, 0x9b, 0x9f93, 0x4, 0x400, 0xc1, 0xfff, 0xffffffff, 0xffffff10, 0x6, 0x7ff, 0x3], [0x2a673184, 0x80, 0x0, 0x107b9fd1, 0x8, 0x8, 0x1, 0x4, 0x65, 0x3, 0x9, 0x5, 0x9, 0x1, 0x10001, 0xb3, 0x7ff, 0x0, 0x9, 0xffff, 0x3, 0xfffffff8, 0x2, 0x2, 0x1ff, 0x7, 0x8, 0x5, 0x9, 0x6476, 0x81, 0x8, 0x4, 0xfffffff7, 0x4, 0x0, 0x9, 0xae4, 0x1, 0xffff64a8, 0xff0c, 0x7, 0x60, 0xffff9278, 0x29fb72f5, 0x0, 0xa, 0x9, 0x4, 0x4, 0x9, 0x2, 0x9, 0x9, 0x7ff, 0x1, 0xd, 0x4, 0x9, 0x80, 0xffffffff, 0x3, 0x4, 0x4], 0x28, ['veth1_to_team\x00', '\x00', '*:\x00', '\x00', '1\x00', '&\x00', '@]@!@[\x00', '\'\x00', '@*\\%*{!\x00']}, ["", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r3) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r9, 0x3, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x81) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x80, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001480)="ab465c9a82ca1cafe95d3d1eed69328cd5a41b179e98d5fd25500859ce663afc4e33f24b8037d66917b819226d472105b44cace42b75f9869e6f5a5d989168fa805c0e2442e59a31b5002233afb4075cbc89221228b71d0ebd9ab3450d9f94d4", 0x60}], 0x1, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @generic={0x86, 0xb, "ee81e95a511fd498f2"}]}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xa8}, 0x4008804) 111.478178ms ago: executing program 8 (id=3140): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "96521d350b27b434ca85ed15ed3646f09b88f15dbd7881e0911f312f55cbabdddec3dae239cc7cfadea985a54a42cb0993139babbd5e2421d1a9199eba7a0c48", 0x19}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e657720656372797674667320747275737465643a2520300130303030303030303030303030303030303900"], 0x2c, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r4, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) mq_notify(r4, &(0x7f0000000080)={0x0, 0x31, 0x1, @tid=0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x42, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r7, &(0x7f0000000180), 0x1000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) stat(&(0x7f0000000340)='./trace\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000300)=@md0, r8, &(0x7f0000000400)={0x0, 0x7, 0x5, 0x7, 0x7, 0x100, 0x2, 0x1, 0x7fff}) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/27, 0x1b) write(r9, &(0x7f0000000200)='+ 1 0 1\n\x00', 0x8) 0s ago: executing program 4 (id=3141): socket(0xa, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) unshare(0x6020400) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xab, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaadcceac3c097453aaaaaa0180c20000003100000000000000000040019078ac1e0101e00000010c009278070800004004000c0067010003060000ac1e0101e0000002071bc8ac1414aa0a010102ac1414bb0a010102ffff1a00ad1414bb94040000821f2cdc5dcb62b9eec2a76a4c8dfe01443c3e81ac3e000100008001e000000100000005e000000200000081ac1e0101000000066401010200cb92007f00000100008bc700000000000001ff0097844f25c2b9e31e8246644c9406d3e92c436183cfe01abaed1a31ee5185013b69a235155c20fc"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1a7e42, 0x85) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000120000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x73) kernel console output (not intermixed with test programs): at=0 ip=0x7f6b99aae019 code=0x7ffc0000 [ 288.537224][ T28] audit: type=1326 audit(1785629033.795:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.2.2618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b99aae019 code=0x7ffc0000 [ 288.537265][ T28] audit: type=1326 audit(1785629033.795:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12316 comm="syz.2.2618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b99aae019 code=0x7ffc0000 [ 288.589118][ T3425] hsr_slave_1: left promiscuous mode [ 288.595366][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.626196][T12348] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2622'. [ 288.636228][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.655993][T12341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=12341 comm=syz.9.2620 [ 288.700311][T12352] loop6: detected capacity change from 0 to 512 [ 288.731608][ T3425] team0 (unregistering): Port device team_slave_1 removed [ 288.744004][ T3425] team0 (unregistering): Port device team_slave_0 removed [ 288.765990][T12352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.779302][T12352] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.797264][ T4317] smc: removing ib device sz1 [ 288.823139][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2624'. [ 288.825510][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.869702][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.890858][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.914531][T12363] loop2: detected capacity change from 0 to 1024 [ 288.953582][T12363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.959957][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 289.051484][T12253] team0: Port device team_slave_0 added [ 289.065655][T12253] team0: Port device team_slave_1 added [ 289.162473][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.169881][T12385] rdma_rxe: rxe_newlink: failed to add lo [ 289.175891][T12363] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2625: missing EA_INODE flag [ 289.188766][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.197450][T12363] EXT4-fs (loop2): Remounting filesystem read-only [ 289.200046][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.204005][T12363] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 289.242882][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.266085][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.309697][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.316920][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.363425][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.378777][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.416418][T12385] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 289.438964][T12385] EXT4-fs (loop6): orphan cleanup on readonly fs [ 289.467565][T12385] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2628: Failed to acquire dquot type 1 [ 289.478838][T12385] loop6: lost filesystem error report for type 5 error -5 [ 289.488398][T12385] EXT4-fs (loop6): Remounting filesystem read-only [ 289.502630][T12253] hsr_slave_0: entered promiscuous mode [ 289.505583][T12385] EXT4-fs (loop6): 1 truncate cleaned up [ 289.509594][T12253] hsr_slave_1: entered promiscuous mode [ 289.519911][T12253] debugfs: 'hsr0' already exists in 'hsr' [ 289.525663][T12253] Cannot create hsr debugfs directory [ 289.531885][T12385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.642177][T12412] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2633'. [ 289.659839][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 289.662997][ T3425] IPVS: stop unused estimator thread 0... [ 289.682706][T12253] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.829031][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 289.841069][T12253] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.922534][T12438] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 289.993584][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 290.007026][T12253] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.066285][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.077253][T12253] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.101551][T12455] netlink: 'syz.6.2639': attribute type 10 has an invalid length. [ 290.573464][T12253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.680983][T12469] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2642'. [ 290.704297][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.795684][T12474] netlink: 204 bytes leftover after parsing attributes in process `syz.9.2643'. [ 290.796347][T12253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.828706][T12467] set_capacity_and_notify: 1 callbacks suppressed [ 290.828726][T12467] loop6: detected capacity change from 0 to 512 [ 290.843436][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.851620][T12253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.858713][T12467] EXT4-fs: Ignoring removed nobh option [ 290.866688][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.874516][T12253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.885423][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.894701][T12467] EXT4-fs (loop6): orphan cleanup on readonly fs [ 290.901875][T12467] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2641: EA inode hash validation failed [ 290.980269][T12467] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 291.022011][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.051242][T12253] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.067151][T12467] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.2641: corrupted inode contents [ 291.079095][T12467] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.079345][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.095618][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.105219][T12467] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #15: comm syz.6.2641: mark_inode_dirty error [ 291.116565][T12467] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.116856][T12467] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.2641: corrupted inode contents [ 291.127157][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 291.127227][ C1] EXT4-fs (loop6): initial error at time 1785629036: ext4_do_update_inode:5742: inode 15 [ 291.127307][ C1] EXT4-fs (loop6): last error at time 1785629036: ext4_dirty_inode:6639: inode 15 [ 291.135154][T12498] loop2: detected capacity change from 0 to 1764 [ 291.140894][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.140936][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.216157][T12467] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.228401][T12467] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.2641: mark_inode_dirty error [ 291.253528][T12467] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.255000][T12467] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.2641: mark inode dirty (error -117) [ 291.302079][T12467] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.307478][T12467] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 291.374673][T12467] EXT4-fs (loop6): 1 orphan inode deleted [ 291.428811][T12467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.532734][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.664099][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.674048][T12538] syzkaller0: entered promiscuous mode [ 291.679773][T12538] syzkaller0: entered allmulticast mode [ 291.842011][T12253] veth0_vlan: entered promiscuous mode [ 291.856948][T12253] veth1_vlan: entered promiscuous mode [ 291.867323][T12572] netlink: 'syz.6.2661': attribute type 21 has an invalid length. [ 291.875591][T12253] veth0_macvtap: entered promiscuous mode [ 291.882751][T12572] netlink: 'syz.6.2661': attribute type 1 has an invalid length. [ 291.898179][T12253] veth1_macvtap: entered promiscuous mode [ 291.901811][T12570] netlink: 'syz.9.2660': attribute type 1 has an invalid length. [ 291.955262][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.971710][T12582] __nla_validate_parse: 2 callbacks suppressed [ 291.971729][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2663'. [ 291.998996][T12582] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 292.012984][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.024839][ T7117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.033688][ T7117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.042438][ T7117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.051219][ T7117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.116032][T12581] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 292.143162][T12581] loop6: detected capacity change from 0 to 512 [ 292.160025][T12581] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2663: inode has both inline data and extents flags [ 292.173249][T12581] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.173566][T12581] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2663: couldn't read orphan inode 15 (err -117) [ 292.194520][T12581] loop6: lost filesystem error report for type 5 error -117 [ 292.195322][T12581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.279556][T12604] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2664'. [ 292.311024][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.395259][T12613] syzkaller0: entered promiscuous mode [ 292.400837][T12613] syzkaller0: entered allmulticast mode [ 292.430090][T12606] loop2: detected capacity change from 0 to 512 [ 292.448473][T12617] netlink: 642 bytes leftover after parsing attributes in process `syz.9.2670'. [ 292.458929][T12614] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2669'. [ 292.467915][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2669'. [ 292.477025][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 292.489850][T12606] EXT4-fs: Ignoring removed nobh option [ 292.548853][T12602] tipc: Started in network mode [ 292.553779][T12602] tipc: Node identity 8a70d1aa0a78, cluster identity 4711 [ 292.560961][T12602] tipc: Enabled bearer , priority 0 [ 292.570279][T12606] EXT4-fs (loop2): orphan cleanup on readonly fs [ 292.582535][T12601] tipc: Resetting bearer [ 292.589222][T12606] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2666: EA inode hash validation failed [ 292.599469][T12626] loop9: detected capacity change from 0 to 512 [ 292.602270][T12606] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2666: corrupted inode contents [ 292.609875][T12601] tipc: Disabling bearer [ 292.619853][T12606] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.626985][T12606] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.2666: mark_inode_dirty error [ 292.655750][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 292.662292][ C1] EXT4-fs (loop2): initial error at time 1785629294: ext4_do_update_inode:5742: inode 15 [ 292.662625][T12606] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.672192][ C1] EXT4-fs (loop2): last error at time 1785629294: ext4_dirty_inode:6639 [ 292.672619][T12606] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2666: corrupted inode contents [ 292.681358][ C1] : inode 15 [ 292.704864][T12606] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.705353][T12606] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.2666: mark_inode_dirty error [ 292.726502][T12606] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.726860][T12606] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.2666: mark inode dirty (error -117) [ 292.748707][T12606] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 292.757840][T12606] EXT4-fs (loop2): 1 orphan inode deleted [ 292.776785][T12606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 292.823248][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.904023][T12631] loop9: detected capacity change from 0 to 128 [ 293.122280][T12647] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2679'. [ 293.320654][T12660] loop6: detected capacity change from 0 to 512 [ 293.331266][T12660] EXT4-fs: Ignoring removed i_version option [ 293.339399][T12660] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 293.360513][T12660] EXT4-fs (loop6): 1 truncate cleaned up [ 293.369460][T12660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.390133][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 293.390148][ T28] audit: type=1400 audit(1785629294.910:4522): avc: denied { write } for pid=12659 comm="syz.6.2685" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.259156][T12672] loop5: detected capacity change from 0 to 1024 [ 294.270158][T12672] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 294.281091][T12672] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 294.365848][T12672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.387175][T12672] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 48: comm syz.5.2690: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65540, size=1024 fake=0 [ 294.407177][T12672] EXT4-fs (loop5): Remounting filesystem read-only [ 294.572419][ T4034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.582938][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.631686][T12679] loop2: detected capacity change from 0 to 512 [ 294.649621][ T28] audit: type=1400 audit(1785629296.170:4523): avc: denied { write } for pid=12678 comm="syz.5.2691" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 294.673759][T12679] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.696909][ T28] audit: type=1326 audit(1785629296.170:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 294.719065][T12680] loop5: detected capacity change from 0 to 512 [ 294.730954][ T28] audit: type=1326 audit(1785629296.170:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 294.734179][T12679] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 294.757201][ T28] audit: type=1326 audit(1785629296.170:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 294.775789][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 294.796878][ T28] audit: type=1326 audit(1785629296.170:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 294.802946][ C0] EXT4-fs (loop2): initial error at time 1785629296: ext4_mb_generate_buddy:1317 [ 294.828415][ T28] audit: type=1326 audit(1785629296.170:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 294.837557][ C0] EXT4-fs (loop2): last error at time 1785629296: ext4_mb_generate_buddy:1317 [ 294.863264][ T28] audit: type=1326 audit(1785629296.170:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 294.898335][T12679] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 294.908593][ T28] audit: type=1326 audit(1785629296.170:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 294.948803][ T28] audit: type=1326 audit(1785629296.170:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.5.2691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40971de019 code=0x7ffc0000 [ 295.018234][T12680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.027501][T12679] EXT4-fs (loop2): 1 truncate cleaned up [ 295.027869][T12679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.059969][T12680] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2691: iget: bad i_size value: 38620345925642 [ 295.084485][T12680] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2691: couldn't read orphan inode 15 (err -117) [ 295.096412][T12680] loop5: lost filesystem error report for type 5 error -117 [ 295.105878][T12693] vhci_hcd vhci_hcd.4: default hub control req: a00c v007f i0003 l0 [ 295.124601][T12680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.170873][ T3301] EXT4-fs error (device loop2): __ext4_iget:5533: inode #11: block 526: comm syz-executor: invalid block [ 295.219879][ T3301] EXT4-fs error (device loop2): __ext4_iget:5533: inode #11: block 526: comm syz-executor: invalid block [ 295.246371][T12693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.274774][T12693] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.385371][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.389123][ T6763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.446369][T12680] EXT4-fs (loop5): shut down requested (1) [ 295.521514][T12711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.521536][T12711] EXT4-fs: Ignoring removed oldalloc option [ 295.604474][ T4034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.667271][T12725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 295.679746][T12725] System zones: 1-3, 19-19, 35-36 [ 295.686177][T12725] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 295.699247][T12725] ext4 filesystem being mounted at /569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.764687][ T4034] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.804165][T12731] syzkaller0: entered promiscuous mode [ 295.817371][T12738] netlink: 'syz.5.2709': attribute type 16 has an invalid length. [ 295.830345][T12738] netlink: 'syz.5.2709': attribute type 17 has an invalid length. [ 295.832862][T12731] syzkaller0: entered allmulticast mode [ 295.855276][T12715] wg2 speed is unknown, defaulting to 1000 [ 295.888819][T12738] tipc: Resetting bearer [ 295.912460][T12741] set_capacity_and_notify: 3 callbacks suppressed [ 295.912478][T12741] loop9: detected capacity change from 0 to 512 [ 295.996898][T12738] tipc: Resetting bearer [ 296.026077][T12731] tipc: Enabled bearer , priority 0 [ 296.090343][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2713'. [ 296.121127][T12718] tipc: Resetting bearer [ 296.132942][T12718] tipc: Disabling bearer [ 296.709372][T12715] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.709929][T12715] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.711306][T12715] bridge_slave_0: entered allmulticast mode [ 296.717412][T12715] bridge_slave_0: entered promiscuous mode [ 296.727592][T12715] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.728361][T12715] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.729213][T12715] bridge_slave_1: entered allmulticast mode [ 296.734624][T12715] bridge_slave_1: entered promiscuous mode [ 296.953549][T12715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.971482][T12715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.029742][T12715] team0: Port device team_slave_0 added [ 297.038484][T12715] team0: Port device team_slave_1 added [ 297.159573][T12715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.159593][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.159624][T12715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.160324][T12715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.160336][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.160379][T12715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.253223][T12715] hsr_slave_0: entered promiscuous mode [ 297.263514][T12715] hsr_slave_1: entered promiscuous mode [ 297.263804][T12715] debugfs: 'hsr0' already exists in 'hsr' [ 297.263822][T12715] Cannot create hsr debugfs directory [ 297.354875][T12768] loop6: detected capacity change from 0 to 512 [ 297.358617][T12768] EXT4-fs: Ignoring removed i_version option [ 297.360896][T12768] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 297.371232][T12768] EXT4-fs (loop6): 1 truncate cleaned up [ 297.371999][T12768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.852810][T12715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.918481][T12715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.962563][T12715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.013935][T12715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.093932][T12715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.102097][T12786] loop9: detected capacity change from 0 to 256 [ 298.118390][T12715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.148573][T12715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.217465][T12715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.307695][T12799] netlink: 4560 bytes leftover after parsing attributes in process `syz.9.2720'. [ 298.316964][T12799] netlink: 4560 bytes leftover after parsing attributes in process `syz.9.2720'. [ 298.328533][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.394454][T12798] loop5: detected capacity change from 0 to 512 [ 298.412758][T12798] EXT4-fs: Mount option(s) incompatible with ext2 [ 298.427541][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 298.427610][ T28] audit: type=1400 audit(1785629299.950:4744): avc: denied { write } for pid=12793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.526032][ T28] audit: type=1400 audit(1785629300.040:4745): avc: denied { write } for pid=12822 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.554288][T12715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.572271][ T28] audit: type=1400 audit(1785629300.090:4746): avc: denied { create } for pid=12812 comm="syz.9.2724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 298.577345][T12825] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 298.607753][T12813] loop9: detected capacity change from 0 to 164 [ 298.620039][T12825] bond1 (unregistering): Released all slaves [ 298.620700][T12831] netlink: 'syz.5.2726': attribute type 1 has an invalid length. [ 298.629732][T12813] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000' [ 298.689112][ T28] audit: type=1400 audit(1785629300.200:4747): avc: denied { write } for pid=12812 comm="syz.9.2724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 298.723802][ T28] audit: type=1400 audit(1785629300.200:4748): avc: denied { nlmsg_write } for pid=12812 comm="syz.9.2724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 298.783932][ T28] audit: type=1400 audit(1785629300.250:4749): avc: denied { write } for pid=12832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.811907][T12715] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.839645][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.846820][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.858771][ T28] audit: type=1400 audit(1785629300.360:4750): avc: denied { write } for pid=12844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.889262][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.896410][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.069828][ T28] audit: type=1400 audit(1785629300.590:4751): avc: denied { write } for pid=12846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.145647][ T28] audit: type=1400 audit(1785629300.600:4752): avc: denied { write } for pid=12868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.293599][T12715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.441776][T12715] veth0_vlan: entered promiscuous mode [ 299.476738][T12715] veth1_vlan: entered promiscuous mode [ 299.517711][ T28] audit: type=1400 audit(1785629301.030:4753): avc: denied { write } for pid=12873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.545647][T12897] loop6: detected capacity change from 0 to 512 [ 299.567270][T12715] veth0_macvtap: entered promiscuous mode [ 299.580501][T12897] EXT4-fs: Ignoring removed i_version option [ 299.646976][T12897] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 299.670351][T12715] veth1_macvtap: entered promiscuous mode [ 299.693606][T12897] EXT4-fs (loop6): 1 truncate cleaned up [ 299.697008][T12715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.709029][T12715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.726400][T12897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.769354][T12830] Set syz1 is full, maxelem 65536 reached [ 299.812083][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.828441][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.865484][T12903] loop9: detected capacity change from 0 to 1024 [ 299.872839][ T7117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.908839][ T7117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.747146][T12942] netlink: 'syz.5.2738': attribute type 1 has an invalid length. [ 300.815203][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2739'. [ 300.867220][T12954] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 300.878145][T12954] ip6gretap0: entered promiscuous mode [ 300.885266][T12955] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 300.900654][T12953] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 300.926215][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.969930][T12964] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 301.018711][T12964] 9pnet_fd: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 301.030139][T12964] usb usb7: check_ctrlrecip: process 12964 (syz.5.2745) requesting ep 01 but needs 81 [ 301.040603][T12964] usb usb7: usbfs: process 12964 (syz.5.2745) did not claim interface 0 before use [ 301.229377][T12990] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2749'. [ 301.260583][T12993] FAULT_INJECTION: forcing a failure. [ 301.260583][T12993] name failslab, interval 1, probability 0, space 0, times 0 [ 301.296547][T12993] CPU: 0 UID: 0 PID: 12993 Comm: syz.9.2750 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 301.296591][T12993] Tainted: [W]=WARN [ 301.296599][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.296612][T12993] Call Trace: [ 301.296619][T12993] [ 301.296626][T12993] __dump_stack+0x1d/0x30 [ 301.296677][T12993] dump_stack_lvl+0x95/0xd0 [ 301.296705][T12993] dump_stack+0x15/0x1b [ 301.296723][T12993] should_fail_ex+0x25e/0x270 [ 301.296759][T12993] should_failslab+0x8c/0xb0 [ 301.296824][T12993] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 301.296910][T12993] ? dup_task_struct+0x5a/0x6a0 [ 301.296937][T12993] ? dup_task_struct+0x5a/0x6a0 [ 301.296969][T12993] ? __rcu_read_unlock+0x4e/0x70 [ 301.297004][T12993] dup_task_struct+0x5a/0x6a0 [ 301.297064][T12993] copy_process+0x5a0/0x2310 [ 301.297083][T12993] ? path_openat+0x1ae6/0x2000 [ 301.297125][T12993] ? copy_clone_args_from_user+0x431/0x4f0 [ 301.297201][T12993] kernel_clone+0x1c0/0x5f0 [ 301.297228][T12993] __se_sys_clone3+0x1f5/0x230 [ 301.297253][T12993] ? proc_fail_nth_write+0x13b/0x160 [ 301.297349][T12993] __x64_sys_clone3+0x31/0x40 [ 301.297439][T12993] x64_sys_call+0x580/0x3020 [ 301.297463][T12993] do_syscall_64+0x136/0x3c0 [ 301.297491][T12993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.297519][T12993] RIP: 0033:0x7fba6e11e019 [ 301.297563][T12993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.297587][T12993] RSP: 002b:00007fba6cb76ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 301.297629][T12993] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fba6e11e019 [ 301.297647][T12993] RDX: 00007fba6cb76f10 RSI: 0000000000000058 RDI: 00007fba6cb76f10 [ 301.297665][T12993] RBP: 00007fba6cb77090 R08: 0000000000000000 R09: 0000000000000058 [ 301.297686][T12993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.297699][T12993] R13: 00007fba6e3a6038 R14: 00007fba6e3a5fa0 R15: 00007fff6b721268 [ 301.297719][T12993] [ 301.902947][T13005] xt_CT: No such helper "netbios-ns" [ 301.975313][T13011] netlink: 'syz.1.2755': attribute type 1 has an invalid length. [ 302.024523][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2753'. [ 302.136242][T13008] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2753'. [ 302.455908][T13030] syzkaller0: entered promiscuous mode [ 302.497962][T13030] syzkaller0: entered allmulticast mode [ 302.507110][T13032] random: crng reseeded on system resumption [ 302.565471][T13030] tipc: Enabled bearer , priority 0 [ 302.834700][T13016] tipc: Resetting bearer [ 302.851876][T13016] tipc: Disabling bearer [ 302.878899][T13063] syzkaller0: entered promiscuous mode [ 302.890427][T13063] syzkaller0: entered allmulticast mode [ 302.918981][T13063] tipc: Enabled bearer , priority 0 [ 302.960974][T13062] tipc: Resetting bearer [ 302.973030][T13062] tipc: Disabling bearer [ 303.028565][T13083] x_tables: unsorted entry at hook 3 [ 303.073295][T13088] netlink: 'syz.9.2768': attribute type 13 has an invalid length. [ 303.103941][T13090] netlink: 'syz.0.2769': attribute type 1 has an invalid length. [ 303.674334][T13149] syzkaller0: entered promiscuous mode [ 303.695828][T13149] syzkaller0: entered allmulticast mode [ 303.708340][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 303.708430][ T28] audit: type=1400 audit(1785629305.230:4946): avc: denied { write } for pid=13137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.774756][T13124] tipc: Enabled bearer , priority 0 [ 303.804786][T13124] loop9: detected capacity change from 0 to 512 [ 303.812769][ T28] audit: type=1400 audit(1785629305.340:4947): avc: denied { write } for pid=13155 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.884309][T13123] tipc: Resetting bearer [ 303.905563][T13123] tipc: Disabling bearer [ 303.970010][ T28] audit: type=1400 audit(1785629305.490:4948): avc: denied { create } for pid=13160 comm="syz.0.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 304.037075][T13169] netlink: 'syz.9.2781': attribute type 1 has an invalid length. [ 304.265911][ T28] audit: type=1400 audit(1785629305.730:4949): avc: denied { write } for pid=13159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.354092][ T28] audit: type=1400 audit(1785629305.860:4950): avc: denied { write } for pid=13184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.485357][T13185] syzkaller0: entered promiscuous mode [ 304.504254][T13185] syzkaller0: entered allmulticast mode [ 304.512446][T13188] loop1: detected capacity change from 0 to 2048 [ 304.693362][T13188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.735269][T13199] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2787'. [ 304.746398][T13199] sctp: [Deprecated]: syz.6.2787 (pid 13199) Use of int in max_burst socket option. [ 304.746398][T13199] Use struct sctp_assoc_value instead [ 304.786270][T13188] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.890180][ T28] audit: type=1400 audit(1785629306.410:4951): avc: denied { write } for pid=13197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.076805][ T28] audit: type=1400 audit(1785629306.590:4952): avc: denied { write } for pid=13222 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.124473][T13226] syzkaller0: entered promiscuous mode [ 305.130210][ T28] audit: type=1400 audit(1785629306.590:4953): avc: denied { write } for pid=13130 comm="syz.1.2777" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.159251][T13226] syzkaller0: entered allmulticast mode [ 305.172530][T13226] tipc: Enabled bearer , priority 0 [ 305.202610][T13136] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2777: bg 0: block 345: padding at end of block bitmap is not set [ 305.241564][T13136] EXT4-fs (loop1): Remounting filesystem read-only [ 305.258803][ T28] audit: type=1400 audit(1785629306.590:4954): avc: denied { create } for pid=13130 comm="syz.1.2777" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 305.312657][T13226] loop9: detected capacity change from 0 to 512 [ 305.342210][T13215] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2790'. [ 305.411388][T13221] tipc: Resetting bearer [ 305.428046][T13221] tipc: Disabling bearer [ 305.441445][ T28] audit: type=1400 audit(1785629306.960:4955): avc: denied { write } for pid=13228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.661279][T13252] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 305.690520][T13253] syzkaller0: left promiscuous mode [ 305.705713][T13253] syzkaller0: left allmulticast mode [ 305.751164][T12715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.826769][T13261] IPVS: set_ctl: invalid protocol: 44 172.20.20.23:20000 [ 305.836229][T13270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2797'. [ 305.860375][T13269] loop6: detected capacity change from 0 to 256 [ 306.023344][T13285] loop1: detected capacity change from 0 to 1024 [ 306.082946][T13285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.239964][T12715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.423465][T13299] syzkaller0: entered promiscuous mode [ 306.436801][T13299] syzkaller0: entered allmulticast mode [ 306.464306][T13299] tipc: Started in network mode [ 306.482873][T13299] tipc: Node identity ba59c3cbc075, cluster identity 4711 [ 306.505288][T13299] tipc: Enabled bearer , priority 0 [ 306.560045][T13302] loop1: detected capacity change from 0 to 512 [ 306.568869][T13301] syzkaller0: entered allmulticast mode [ 306.620991][T13302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.644892][T13302] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.813243][T13308] netlink: 'syz.9.2808': attribute type 1 has an invalid length. [ 306.866434][T13292] tipc: Resetting bearer [ 306.908572][T13292] tipc: Disabling bearer [ 306.958895][T13315] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2812'. [ 307.017495][T12715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.023977][T13318] wg2 speed is unknown, defaulting to 1000 [ 307.234702][T13331] loop1: detected capacity change from 0 to 512 [ 307.249548][T13331] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 307.261588][T13331] FAT-fs (loop1): Filesystem has been set read-only [ 307.273201][T13333] geneve2: entered allmulticast mode [ 307.288069][T13331] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 307.307928][T13331] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 307.315896][T13331] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 307.324048][T13331] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 307.331655][T13331] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 307.449072][T13336] loop1: detected capacity change from 0 to 512 [ 307.541679][T13336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 307.598074][T13336] EXT4-fs (loop1): 1 truncate cleaned up [ 307.604471][T13336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.819391][T13339] ext4: Unknown parameter '0x0000000000000000' [ 307.856942][T13341] loop9: detected capacity change from 0 to 128 [ 308.099133][T13361] loop6: detected capacity change from 0 to 1024 [ 308.112491][T13361] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 308.125271][T12715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.137104][ T4317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.149543][T13361] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.2828: lblock 2 mapped to illegal pblock 2 (length 1) [ 308.178635][T13361] fserror_report: 2 callbacks suppressed [ 308.178649][T13361] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 308.185752][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 308.201405][ C1] EXT4-fs (loop6): initial error at time 1785629309: ext4_map_blocks:791: inode 3: block 2 [ 308.208100][T13361] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.2828: lblock 0 mapped to illegal pblock 48 (length 1) [ 308.211502][ C1] EXT4-fs (loop6): last error at time 1785629309: ext4_map_blocks:791: inode 3: block 2 [ 308.236089][T13361] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 308.239014][T13361] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2828: Failed to acquire dquot type 0 [ 308.267458][T13361] loop6: lost filesystem error report for type 5 error -117 [ 308.267640][T13361] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 308.287914][ T4317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.323375][T13361] loop6: lost filesystem error report for type 5 error -117 [ 308.323512][T13361] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.2828: mark_inode_dirty error [ 308.349396][T13361] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 308.352089][T13361] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 308.355679][T13368] bond1: Removing last arp target with arp_interval on [ 308.361547][T13361] EXT4-fs (loop6): 1 orphan inode deleted [ 308.379312][ T7071] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.388458][T13361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.411578][T13368] bond1: entered promiscuous mode [ 308.424275][T13368] bond1: entered allmulticast mode [ 308.429712][T13368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.438576][ T7071] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 0 [ 308.459561][ T4317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.472552][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.487068][ T49] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.521064][ T49] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 308.522110][ T49] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 308.564956][ T49] loop6: lost filesystem error report for type 5 error -117 [ 308.565468][ T4052] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 308.599701][ T4052] loop6: lost filesystem error report for type 5 error -117 [ 308.599836][ T4052] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 308.634091][ T4052] loop6: lost filesystem error report for type 5 error -117 [ 308.636592][ T4052] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 308.687256][T13370] wg2 speed is unknown, defaulting to 1000 [ 308.699185][ T4052] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 308.740062][T13382] xt_socket: unknown flags 0x48 [ 308.775600][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 308.775639][ T28] audit: type=1400 audit(1785629310.290:5001): avc: denied { write } for pid=13381 comm="syz.6.2833" name="auth.unix.ip" dev="proc" ino=4026533511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 308.920253][ T4317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.041790][ T4317] bridge_slave_1: left allmulticast mode [ 309.064381][ T4317] bridge_slave_1: left promiscuous mode [ 309.092677][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.135716][ T4317] bridge_slave_0: left allmulticast mode [ 309.157013][ T4317] bridge_slave_0: left promiscuous mode [ 309.173728][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.216150][ T28] audit: type=1400 audit(1785629310.740:5002): avc: denied { write } for pid=13391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.277045][ T28] audit: type=1400 audit(1785629310.800:5003): avc: denied { write } for pid=13408 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.308829][T13386] loop6: detected capacity change from 0 to 256 [ 309.395224][ T4317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.405796][ T4317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.415751][ T4317] bond0 (unregistering): Released all slaves [ 309.437693][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 309.461489][ T4317] tipc: Left network mode [ 309.569112][ T4317] hsr_slave_0: left promiscuous mode [ 309.587134][ T4317] hsr_slave_1: left promiscuous mode [ 309.593191][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.601856][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.612616][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.627210][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.648676][ T4317] veth1_macvtap: left promiscuous mode [ 309.655917][ T4317] veth0_macvtap: left promiscuous mode [ 309.667286][ T4317] veth1_vlan: left promiscuous mode [ 309.672750][ T4317] veth0_vlan: left promiscuous mode [ 309.830565][ T4317] team0 (unregistering): Port device team_slave_1 removed [ 309.853220][ T4317] team0 (unregistering): Port device team_slave_0 removed [ 309.861668][ T28] audit: type=1400 audit(1785629311.370:5004): avc: denied { write } for pid=13425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.935771][ T28] audit: type=1400 audit(1785629311.450:5005): avc: denied { write } for pid=13441 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.998100][T13370] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.014574][T13426] loop6: detected capacity change from 0 to 512 [ 310.029657][T13370] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.040893][T13370] bridge_slave_0: entered allmulticast mode [ 310.061010][T13370] bridge_slave_0: entered promiscuous mode [ 310.073242][T13433] syzkaller0: entered promiscuous mode [ 310.079304][T13433] syzkaller0: entered allmulticast mode [ 310.086365][T13442] tipc: Enabling of bearer rejected, already enabled [ 310.095819][T13426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.100728][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 310.108592][T13426] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.131106][T13370] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.148341][T13370] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.165228][T13370] bridge_slave_1: entered allmulticast mode [ 310.181934][T13370] bridge_slave_1: entered promiscuous mode [ 310.260065][T13370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.279064][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.300500][T13370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.419715][T13370] team0: Port device team_slave_0 added [ 310.422835][T13455] loop6: detected capacity change from 0 to 128 [ 310.432186][T13453] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13453 comm=syz.9.2842 [ 310.444907][T13453] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13453 comm=syz.9.2842 [ 310.460299][T13370] team0: Port device team_slave_1 added [ 310.489449][ T28] audit: type=1400 audit(1785629312.000:5006): avc: denied { module_load } for pid=13454 comm="syz.6.2841" path="/571/file1/bus" dev="loop6" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 310.549627][T13370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.572659][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.624036][ T28] audit: type=1400 audit(1785629312.140:5007): avc: denied { write } for pid=13448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.652193][T13370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.693108][T13370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.774912][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.928264][T13370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.192511][T13370] hsr_slave_0: entered promiscuous mode [ 311.245535][T13370] hsr_slave_1: entered promiscuous mode [ 311.295306][T13370] debugfs: 'hsr0' already exists in 'hsr' [ 311.343124][T13370] Cannot create hsr debugfs directory [ 311.382107][T13472] wg2 speed is unknown, defaulting to 1000 [ 311.391237][T13468] xt_CT: No such helper "netbios-ns" [ 311.403638][ T28] audit: type=1400 audit(1785629312.920:5008): avc: denied { write } for pid=13476 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.483693][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 311.628559][T13480] loop6: detected capacity change from 0 to 512 [ 311.639991][T13480] EXT4-fs: Ignoring removed nobh option [ 311.657313][T13480] EXT4-fs (loop6): orphan cleanup on readonly fs [ 311.691471][T13480] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2845: EA inode hash validation failed [ 311.746207][T13480] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 311.812787][T13480] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.2845: corrupted inode contents [ 311.836764][T13504] loop9: detected capacity change from 0 to 1024 [ 311.842050][T13480] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.845571][T13480] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #15: comm syz.6.2845: mark_inode_dirty error [ 311.937250][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 311.943739][ C0] EXT4-fs (loop6): initial error at time 1785629313: ext4_do_update_inode:5742: inode 15 [ 311.953658][ C0] EXT4-fs (loop6): last error at time 1785629313: ext4_do_update_inode:5742: inode 15 [ 311.956012][ T28] audit: type=1400 audit(1785629313.360:5009): avc: denied { write } for pid=13486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.986180][T13480] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.986530][T13480] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.2845: corrupted inode contents [ 312.007517][T13480] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 312.029788][ T28] audit: type=1400 audit(1785629313.510:5010): avc: denied { write } for pid=13509 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.078407][T13480] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.2845: mark_inode_dirty error [ 312.145532][T13480] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 312.151324][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 312.168324][T13480] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.2845: mark inode dirty (error -117) [ 312.191112][T13480] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 312.195298][T13516] futex_wake_op: syz.9.2851 tries to shift op by 144; fix this program [ 312.195969][T13511] tipc: Enabled bearer , priority 0 [ 312.208269][T13480] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 312.228448][T13480] EXT4-fs (loop6): 1 orphan inode deleted [ 312.234709][T13480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 312.252162][T13516] loop9: detected capacity change from 0 to 512 [ 312.254059][T13515] syzkaller0: entered promiscuous mode [ 312.290093][T13515] syzkaller0: entered allmulticast mode [ 312.467478][T13505] tipc: Resetting bearer [ 312.475635][T13505] tipc: Disabling bearer [ 312.490637][ T4052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.899877][T13370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.939321][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.966852][T13370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.990561][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.016467][T13370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.117790][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.132028][T13370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.159438][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.295999][T13370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.323540][T13370] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.345145][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.352329][ T7117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.369304][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.376509][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.432756][T13370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.514942][T13589] loop6: detected capacity change from 0 to 512 [ 313.554468][T13589] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.708518][T13370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.902973][T13370] veth0_vlan: entered promiscuous mode [ 313.925441][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 313.925456][ T28] audit: type=1400 audit(1785629315.440:5020): avc: denied { write } for pid=13613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.926664][T13370] veth1_vlan: entered promiscuous mode [ 313.991292][ T28] audit: type=1400 audit(1785629315.510:5021): avc: denied { write } for pid=13628 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.030466][T13370] veth0_macvtap: entered promiscuous mode [ 314.064340][T13370] veth1_macvtap: entered promiscuous mode [ 314.094937][T13370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.131329][T13370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.176267][ T7071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.185395][ T7071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.226511][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.241649][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.302713][ T28] audit: type=1400 audit(1785629315.820:5022): avc: denied { write } for pid=13631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.372716][T13652] syzkaller0: entered promiscuous mode [ 314.411579][ T28] audit: type=1400 audit(1785629315.900:5023): avc: denied { write } for pid=13651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.418682][T13652] syzkaller0: entered allmulticast mode [ 314.449026][T13658] loop9: detected capacity change from 0 to 128 [ 314.638310][T13649] bond1: entered allmulticast mode [ 314.643900][T13649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.678257][ T28] audit: type=1400 audit(1785629316.200:5024): avc: denied { mounton } for pid=13648 comm="syz.3.2831" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 314.705963][T13652] tipc: Enabled bearer , priority 0 [ 314.814796][T13679] loop9: detected capacity change from 0 to 256 [ 314.914709][T13640] tipc: Resetting bearer [ 314.948122][T13640] tipc: Disabling bearer [ 314.966396][ T28] audit: type=1400 audit(1785629316.480:5025): avc: denied { write } for pid=13677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.049873][ T28] audit: type=1400 audit(1785629316.520:5026): avc: denied { search } for pid=13696 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.071050][ T28] audit: type=1400 audit(1785629316.520:5027): avc: denied { read } for pid=13696 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 315.102965][ T28] audit: type=1400 audit(1785629316.520:5028): avc: denied { open } for pid=13696 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 315.167224][ T28] audit: type=1400 audit(1785629316.520:5029): avc: denied { getattr } for pid=13696 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 315.343668][T13715] netlink: 'syz.6.2877': attribute type 29 has an invalid length. [ 315.351652][T13715] netlink: 'syz.6.2877': attribute type 28 has an invalid length. [ 315.361922][T13709] xt_NFQUEUE: number of total queues is 0 [ 315.368226][T13709] xt_NFQUEUE: number of total queues is 0 [ 315.376736][T13715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13715 comm=syz.6.2877 [ 315.389553][T13715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13715 comm=syz.6.2877 [ 315.510041][T13728] netlink: 'syz.6.2879': attribute type 4 has an invalid length. [ 315.525243][T13728] netlink: 'syz.6.2879': attribute type 4 has an invalid length. [ 315.923668][T13775] loop9: detected capacity change from 0 to 8192 [ 316.038413][T13775] loop9: p1 p2 p3 p4 [ 316.044180][T13775] loop9: p2 start 201326592 is beyond EOD, truncated [ 316.053082][T13775] loop9: p3 start 36132 is beyond EOD, truncated [ 316.072747][T13775] loop9: p4 start 167772160 is beyond EOD, truncated [ 316.363609][T13820] loop6: detected capacity change from 0 to 1764 [ 316.385315][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.396843][T13821] loop9: detected capacity change from 0 to 128 [ 316.398315][T13813] netlink: 'syz.0.2891': attribute type 27 has an invalid length. [ 316.413091][T13820] iso9660: Bad value for 'gid' [ 316.417930][T13820] iso9660: Bad value for 'gid' [ 316.469820][T13821] loop9: detected capacity change from 0 to 2048 [ 316.741039][T13834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2899'. [ 316.906871][T13827] wg2 speed is unknown, defaulting to 1000 [ 317.027183][T13841] wg2 speed is unknown, defaulting to 1000 [ 317.269101][T13841] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.278915][T13841] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.286482][T13841] bridge_slave_0: entered allmulticast mode [ 317.297920][T13841] bridge_slave_0: entered promiscuous mode [ 317.323073][T13841] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.330233][T13841] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.337759][T13841] bridge_slave_1: entered allmulticast mode [ 317.344665][T13841] bridge_slave_1: entered promiscuous mode [ 317.382155][T13841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.401551][T13841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.406928][T13890] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2909'. [ 317.425620][T13827] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.432981][T13827] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.440296][T13827] bridge_slave_0: entered allmulticast mode [ 317.447309][T13827] bridge_slave_0: entered promiscuous mode [ 317.454420][T13827] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.461958][T13827] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.469412][T13827] bridge_slave_1: entered allmulticast mode [ 317.476375][T13827] bridge_slave_1: entered promiscuous mode [ 317.532714][T13841] team0: Port device team_slave_0 added [ 317.551531][T13841] team0: Port device team_slave_1 added [ 317.563853][T13827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.586596][T13827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.651094][T13841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.669440][T13841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.710233][T13841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.730623][T13827] team0: Port device team_slave_0 added [ 317.740190][T13827] team0: Port device team_slave_1 added [ 317.748989][T13841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.756329][T13841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.782711][T13841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.824929][T13827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.834311][T13827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.860897][T13827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.872876][T13827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.880142][T13827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.906507][T13827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.957000][T13841] hsr_slave_0: entered promiscuous mode [ 317.961752][T13912] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2916'. [ 317.963951][T13841] hsr_slave_1: entered promiscuous mode [ 317.981449][T13841] debugfs: 'hsr0' already exists in 'hsr' [ 317.987299][T13841] Cannot create hsr debugfs directory [ 317.996841][T13910] ref_ctr increment failed for inode: 0x14b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810fc0f000 [ 318.008303][T13827] hsr_slave_0: entered promiscuous mode [ 318.014157][T13909] uprobe: syz.0.2917:13909 failed to unregister, leaking uprobe [ 318.015194][T13827] hsr_slave_1: entered promiscuous mode [ 318.028165][T13827] debugfs: 'hsr0' already exists in 'hsr' [ 318.033967][T13827] Cannot create hsr debugfs directory [ 318.042590][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.121052][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.175248][T13918] FAULT_INJECTION: forcing a failure. [ 318.175248][T13918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.198301][T13918] CPU: 0 UID: 0 PID: 13918 Comm: syz.0.2918 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 318.198345][T13918] Tainted: [W]=WARN [ 318.198355][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.198377][T13918] Call Trace: [ 318.198384][T13918] [ 318.198391][T13918] __dump_stack+0x1d/0x30 [ 318.198419][T13918] dump_stack_lvl+0x95/0xd0 [ 318.198447][T13918] dump_stack+0x15/0x1b [ 318.198521][T13918] should_fail_ex+0x25e/0x270 [ 318.198603][T13918] should_fail_alloc_page+0xf2/0x100 [ 318.198710][T13918] __alloc_frozen_pages_noprof+0x108/0x350 [ 318.198753][T13918] alloc_pages_mpol+0xa9/0x1d0 [ 318.198792][T13918] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 318.198909][T13918] do_wp_page+0x6f6/0x2030 [ 318.198943][T13918] ? __rcu_read_lock+0x36/0x50 [ 318.198977][T13918] handle_mm_fault+0x8bc/0x2da0 [ 318.199049][T13918] do_user_addr_fault+0x402/0x1060 [ 318.199129][T13918] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 318.199162][T13918] exc_page_fault+0x62/0xa0 [ 318.199190][T13918] asm_exc_page_fault+0x26/0x30 [ 318.199271][T13918] RIP: 0010:__put_user_4+0xd/0x30 [ 318.199311][T13918] Code: 66 89 01 31 c9 0f 01 ca e9 50 a8 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 318.199337][T13918] RSP: 0018:ffffc90003203d08 EFLAGS: 00050206 [ 318.199374][T13918] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000005000 [ 318.199390][T13918] RDX: ffff888101c2b3c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.199407][T13918] RBP: ffffc90003203eb0 R08: 00018881049e32a7 R09: 0000000000000000 [ 318.199439][T13918] R10: 0001ffff86882069 R11: 0001c90003203c6f R12: 0000000000000000 [ 318.199456][T13918] R13: ffff88810fc0e3d0 R14: 0000000000000000 R15: 0000000000001400 [ 318.199477][T13918] __se_sys_move_pages+0xb70/0x1510 [ 318.199518][T13918] ? proc_fail_nth_write+0x13b/0x160 [ 318.199579][T13918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.199611][T13918] ? __fget_files+0x184/0x1c0 [ 318.199692][T13918] ? mutex_lock+0x57/0x90 [ 318.199729][T13918] ? fput+0x8f/0xc0 [ 318.199768][T13918] ? ksys_write+0x194/0x1a0 [ 318.199803][T13918] __x64_sys_move_pages+0x78/0x90 [ 318.199839][T13918] x64_sys_call+0x1d35/0x3020 [ 318.199871][T13918] do_syscall_64+0x136/0x3c0 [ 318.199943][T13918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.199964][T13918] RIP: 0033:0x7feccd1de019 [ 318.199979][T13918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.200002][T13918] RSP: 002b:00007feccbc37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 318.200028][T13918] RAX: ffffffffffffffda RBX: 00007feccd465fa0 RCX: 00007feccd1de019 [ 318.200048][T13918] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 318.200104][T13918] RBP: 00007feccbc37090 R08: 0000200000000000 R09: 0000000000000000 [ 318.200122][T13918] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 318.200139][T13918] R13: 00007feccd466038 R14: 00007feccd465fa0 R15: 00007ffe71dceeb8 [ 318.200166][T13918] [ 318.555571][T13827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.589731][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.603674][T13933] netlink: 'syz.6.2922': attribute type 1 has an invalid length. [ 318.634163][T13933] loop6: detected capacity change from 0 to 128 [ 318.648911][T13933] EXT4-fs: Ignoring removed bh option [ 318.651228][T13827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.715677][T13933] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.761197][T13933] ext4 filesystem being mounted at /596/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.801460][T13950] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2928'. [ 318.833156][T13954] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2929'. [ 318.844401][T13827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.865977][T13933] loop6: detected capacity change from 128 to 64 [ 318.873048][T13956] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Out of memory [ 318.886726][T13956] EXT4-fs error (device loop6): __ext4_unlink:3275: inode #2: comm syz.6.2922: mark_inode_dirty error [ 318.887655][ T36] bridge_slave_1: left allmulticast mode [ 318.907916][ T36] bridge_slave_1: left promiscuous mode [ 318.913768][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.922738][ T36] bridge_slave_0: left allmulticast mode [ 318.932726][ T36] bridge_slave_0: left promiscuous mode [ 318.938792][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.013950][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.024499][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.035050][ T36] bond0 (unregistering): Released all slaves [ 319.044196][ T36] bond1 (unregistering): Released all slaves [ 319.059846][T13933] bond7: (slave veth0_to_bond): making interface the new active one [ 319.086523][T13933] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 319.113294][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 319.113315][ T28] audit: type=1400 audit(1785629320.630:5176): avc: denied { unmount } for pid=4052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 319.154539][T13827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.171031][ T8256] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Out of memory [ 319.180431][ T8256] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #2: comm syz.6.1365: mark_inode_dirty error [ 319.213598][ T8256] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.287031][ T36] hsr_slave_0: left promiscuous mode [ 319.293702][T13971] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2932'. [ 319.310034][ T36] hsr_slave_1: left promiscuous mode [ 319.316698][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.333181][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.350707][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.365701][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.391989][ T36] veth1_macvtap: left promiscuous mode [ 319.403809][ T28] audit: type=1400 audit(1785629320.920:5177): avc: denied { write } for pid=13968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.428572][ T36] veth0_macvtap: left promiscuous mode [ 319.442267][ T36] veth1_vlan: left promiscuous mode [ 319.458020][ T36] veth0_vlan: left promiscuous mode [ 319.490463][ T28] audit: type=1400 audit(1785629321.000:5178): avc: denied { write } for pid=13986 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.585176][ T36] team0 (unregistering): Port device team_slave_1 removed [ 319.599233][ T36] team0 (unregistering): Port device team_slave_0 removed [ 319.653672][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 319.674424][T13827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.690485][T13827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.698779][T13827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.709216][T13827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.720222][T13827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.742477][T13827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.760835][T13827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.770804][T13827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.820519][T13984] wg2 speed is unknown, defaulting to 1000 [ 319.874686][T13827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.913727][T13827] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.932353][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.939554][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.967851][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.975519][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.999255][ T28] audit: type=1400 audit(1785629321.520:5179): avc: denied { write } for pid=14002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.078085][ T28] audit: type=1400 audit(1785629321.600:5180): avc: denied { write } for pid=14013 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.123895][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.139745][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.174291][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 320.196524][T13841] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 320.211623][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.219591][T13841] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 320.231464][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.240392][T13841] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 320.252140][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.262463][T14023] netlink: 'syz.9.2937': attribute type 2 has an invalid length. [ 320.289102][T13841] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 320.300039][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.309423][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.327219][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.350354][ T28] audit: type=1400 audit(1785629321.870:5181): avc: denied { create } for pid=14027 comm="syz.9.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 320.408890][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.430002][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.528147][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.550533][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.581923][T13984] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.591394][T13984] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.603139][T13984] bridge_slave_0: entered allmulticast mode [ 320.623850][T13984] bridge_slave_0: entered promiscuous mode [ 320.657966][ T28] audit: type=1400 audit(1785629322.180:5182): avc: denied { write } for pid=14042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.715214][T13984] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.725040][T13984] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.740463][T13984] bridge_slave_1: entered allmulticast mode [ 320.762646][ T28] audit: type=1400 audit(1785629322.280:5183): avc: denied { write } for pid=14057 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.791215][T13984] bridge_slave_1: entered promiscuous mode [ 320.815608][T13984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.829760][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 320.850913][ T36] vlan2: left promiscuous mode [ 320.856904][ T36] bridge_slave_0: left promiscuous mode [ 320.862823][ T36] bridge0: port 1(vlan2) entered disabled state [ 320.875333][ T36] tipc: Resetting bearer [ 320.976009][ T36] team0: Port device xfrm0 removed [ 320.989085][ T36] bond1 (unregistering): (slave gretap1): Releasing active interface [ 321.017524][ T36] tipc: Disabling bearer [ 321.030050][ T36] bond0 (unregistering): Released all slaves [ 321.040101][ T36] bond1 (unregistering): Released all slaves [ 321.056603][T13984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.091555][T13984] team0: Port device team_slave_0 added [ 321.115214][ T36] .d: left promiscuous mode [ 321.121978][ T28] audit: type=1400 audit(1785629322.650:5184): avc: denied { connect } for pid=14068 comm="syz.9.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.143621][T14069] xt_socket: unknown flags 0x48 [ 321.169591][ T28] audit: type=1400 audit(1785629322.690:5185): avc: denied { write } for pid=14068 comm="syz.9.2941" name="auth.unix.ip" dev="proc" ino=4026533256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 321.216304][ T36] tipc: Disabling bearer [ 321.225964][ T36] tipc: Left network mode [ 321.231606][T13984] team0: Port device team_slave_1 added [ 321.250827][T13827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.263545][T13841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.275790][T14071] netlink: 'syz.9.2942': attribute type 1 has an invalid length. [ 321.283587][T14071] netlink: 112860 bytes leftover after parsing attributes in process `syz.9.2942'. [ 321.307445][T13841] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.320118][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.327331][ T7117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.338323][T13984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.345367][T13984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.378278][T13984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.421896][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.429039][ T7117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.476505][T13984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.505407][T13984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.559333][T13984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.589254][ T36] hsr_slave_0: left promiscuous mode [ 321.598052][ T36] hsr_slave_1: left promiscuous mode [ 321.611848][ T36] veth1_macvtap: left promiscuous mode [ 321.623127][ T36] veth1_vlan: left promiscuous mode [ 321.640971][ T36] veth0_vlan: left promiscuous mode [ 321.783349][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 321.842332][T13984] hsr_slave_0: entered promiscuous mode [ 321.854071][T13984] hsr_slave_1: entered promiscuous mode [ 321.860243][T13984] debugfs: 'hsr0' already exists in 'hsr' [ 321.866000][T13984] Cannot create hsr debugfs directory [ 322.132270][T13827] veth0_vlan: entered promiscuous mode [ 322.181754][T13827] veth1_vlan: entered promiscuous mode [ 322.221851][T13841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.249469][T13827] veth0_macvtap: entered promiscuous mode [ 322.270621][T13827] veth1_macvtap: entered promiscuous mode [ 322.292995][T13827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.317886][T13827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.357623][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.378105][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.399971][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2952'. [ 322.418455][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2952'. [ 322.436494][ T3425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.464385][ T3425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.545119][T13984] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.563144][T14176] loop4: detected capacity change from 0 to 4096 [ 322.577570][T13984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.597743][T13984] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.610326][T14176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.647912][T13984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.673317][T13984] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.694492][T13984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.719915][T13984] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.753185][T13984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.825031][T13841] veth0_vlan: entered promiscuous mode [ 322.852440][T14176] loop5: detected capacity change from 0 to 7 [ 322.858757][T13841] veth1_vlan: entered promiscuous mode [ 322.882743][T14212] bridge0: port 3(vlan0) entered blocking state [ 322.895829][T14212] bridge0: port 3(vlan0) entered disabled state [ 322.911092][T14212] vlan0: entered allmulticast mode [ 322.921468][T14212] bridge0: entered allmulticast mode [ 322.933373][T14212] bridge0: entered promiscuous mode [ 322.947737][T14212] vlan0: left allmulticast mode [ 322.957376][T14212] bridge0: left allmulticast mode [ 322.993705][ T831] bridge0: left promiscuous mode [ 323.017365][T13984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.053246][T13984] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.106613][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.113957][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.146516][T13827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.158192][T13841] veth0_macvtap: entered promiscuous mode [ 323.171092][T13841] veth1_macvtap: entered promiscuous mode [ 323.183793][T13841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.193673][T13841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.219226][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.226609][ T7117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.251196][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.316687][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.346063][ T3425] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.377461][ T3425] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.439685][T14248] loop8: detected capacity change from 0 to 512 [ 323.460030][T14248] EXT4-fs: test_dummy_encryption option not supported [ 323.466181][T14247] Mass Storage Function, version: 2009/09/11 [ 323.489544][T14247] LUN: removable file: (no medium) [ 323.553306][T14247] loop4: detected capacity change from 0 to 2048 [ 323.664328][T14274] xt_socket: unknown flags 0x48 [ 323.701744][T14247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.715711][T13984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.909689][T14305] syzkaller0: entered promiscuous mode [ 323.920709][T14305] syzkaller0: entered allmulticast mode [ 323.990405][T13984] veth0_vlan: entered promiscuous mode [ 324.013926][T13984] veth1_vlan: entered promiscuous mode [ 324.039171][T13984] veth0_macvtap: entered promiscuous mode [ 324.060928][T13984] veth1_macvtap: entered promiscuous mode [ 324.084363][T13984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.099519][T13984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.184200][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 324.184220][ T28] audit: type=1400 audit(1785629325.700:5298): avc: denied { write } for pid=14322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.234173][ T28] audit: type=1400 audit(1785629325.750:5299): avc: denied { write } for pid=14333 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.586263][ T3425] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.645994][ T329] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.673024][ T329] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.684735][T13827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.690169][T14337] loop8: detected capacity change from 0 to 512 [ 324.712126][ T329] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.763356][T14337] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.781270][ T28] audit: type=1400 audit(1785629326.260:5300): avc: denied { mount } for pid=14336 comm="syz.8.2968" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 324.809876][ T28] audit: type=1400 audit(1785629326.330:5301): avc: denied { unmount } for pid=13827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 324.832333][T14355] netlink: 'syz.9.2972': attribute type 83 has an invalid length. [ 324.846442][T14337] lo speed is unknown, defaulting to 1000 [ 324.853227][T14337] lo speed is unknown, defaulting to 1000 [ 324.859231][T14337] lo speed is unknown, defaulting to 1000 [ 324.869114][ T28] audit: type=1400 audit(1785629326.390:5302): avc: denied { write } for pid=14357 comm="syz.7.2974" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 324.893833][T14358] netlink: 'syz.7.2974': attribute type 2 has an invalid length. [ 324.932820][T14366] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 324.971977][ T28] audit: type=1400 audit(1785629326.390:5303): avc: denied { open } for pid=14357 comm="syz.7.2974" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 324.985365][T14366] pim6reg1: entered promiscuous mode [ 325.010181][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.015546][T14366] pim6reg1: entered allmulticast mode [ 325.037915][T14337] infiniband sz1: set active [ 325.061506][ T831] lo speed is unknown, defaulting to 1000 [ 325.070663][T14337] infiniband sz1: added lo [ 325.074938][ T28] audit: type=1400 audit(1785629326.420:5304): avc: denied { ioctl } for pid=14357 comm="syz.7.2974" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 325.098231][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.114990][ T28] audit: type=1400 audit(1785629326.470:5305): avc: denied { mount } for pid=14356 comm="syz.0.2973" name="/" dev="autofs" ino=44100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 325.137595][ T28] audit: type=1400 audit(1785629326.520:5306): avc: denied { map } for pid=14369 comm="syz.9.2975" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 325.161966][ T28] audit: type=1400 audit(1785629326.520:5307): avc: denied { read write } for pid=14369 comm="syz.9.2975" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 325.196980][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.226458][T14337] RDS/IB: sz1: added [ 325.233546][T14337] smc: adding ib device sz1 with port count 1 [ 325.244034][T14337] smc: ib device sz1 port 1 has no pnetid [ 325.250957][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.260370][T14337] lo speed is unknown, defaulting to 1000 [ 325.268650][ T831] lo speed is unknown, defaulting to 1000 [ 325.273085][T14387] loop7: detected capacity change from 0 to 512 [ 325.277331][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.299174][T14387] EXT4-fs warning (device loop7): read_mmp_block:110: Error -74 while reading MMP block 17 [ 325.345020][T14395] tipc: Enabling of bearer rejected, failed to enable media [ 325.368700][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.425488][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.435471][T14399] Invalid option length (307) for dns_resolver key [ 325.457153][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.487707][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.518604][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.520090][T14337] lo speed is unknown, defaulting to 1000 [ 325.540551][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.570408][T14337] lo speed is unknown, defaulting to 1000 [ 325.575514][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.635265][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.659495][T14337] lo speed is unknown, defaulting to 1000 [ 325.674429][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.702057][T14337] lo speed is unknown, defaulting to 1000 [ 325.708600][T14365] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 325.731259][T14365] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 325.773248][T14419] loop7: detected capacity change from 0 to 512 [ 325.793079][T14337] lo speed is unknown, defaulting to 1000 [ 325.923515][T14437] netlink: 'syz.9.2983': attribute type 1 has an invalid length. [ 325.941055][T14419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 325.953678][T14419] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.975340][T14337] lo speed is unknown, defaulting to 1000 [ 326.051520][T14337] lo speed is unknown, defaulting to 1000 [ 326.164426][T14466] netlink: 'syz.0.2985': attribute type 10 has an invalid length. [ 326.210603][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.219323][T14466] bond0: (slave team0): Enslaving as an active interface with an up link [ 326.271190][T14337] lo speed is unknown, defaulting to 1000 [ 326.314043][T14481] 9p: Bad value for 'rfdno' [ 326.454415][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.610513][T14512] tipc: Enabling of bearer rejected, failed to enable media [ 326.622709][T13984] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 326.668731][T14528] loop7: detected capacity change from 0 to 1024 [ 326.677093][T14530] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 326.691444][T14528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.704937][T14528] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 326.731582][T14528] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 326.741822][T14528] EXT4-fs (loop7): invalid journal inode [ 326.956548][T14559] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3002'. [ 326.988709][T14554] loop7: detected capacity change from 0 to 2048 [ 327.028960][T14541] wg2 speed is unknown, defaulting to 1000 [ 327.078462][T14541] lo speed is unknown, defaulting to 1000 [ 327.088696][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3003'. [ 327.159662][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 327.277561][T14554] loop7: p1 < > p4 < > [ 327.408180][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 327.426606][ T9321] udevd[9321]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 327.621227][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 328.006090][T14623] loop8: detected capacity change from 0 to 512 [ 328.013617][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 328.034571][T14629] loop4: detected capacity change from 0 to 128 [ 328.048349][T14628] syzkaller1: entered promiscuous mode [ 328.051722][T14623] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3014: bg 0: block 393: padding at end of block bitmap is not set [ 328.053880][T14628] syzkaller1: entered allmulticast mode [ 328.068481][T14623] loop8: lost filesystem error report for type 5 error -117 [ 328.150795][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 328.164625][ C0] EXT4-fs (loop8): initial error at time 1785629329: ext4_validate_block_bitmap:441 [ 328.174097][ C0] EXT4-fs (loop8): last error at time 1785629329: ext4_validate_block_bitmap:441 [ 328.215177][T14629] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.254896][T14623] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 328.280242][T14629] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 328.330003][T14623] loop8: lost filesystem error report for type 5 error -117 [ 328.378221][T14623] EXT4-fs (loop8): 2 truncates cleaned up [ 328.400072][T14629] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.3015: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 328.429806][T14623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.446999][T14623] FAULT_INJECTION: forcing a failure. [ 328.446999][T14623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.460297][T14623] CPU: 0 UID: 0 PID: 14623 Comm: syz.8.3014 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 328.460418][T14623] Tainted: [W]=WARN [ 328.460427][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.460443][T14623] Call Trace: [ 328.460453][T14623] [ 328.460464][T14623] __dump_stack+0x1d/0x30 [ 328.460489][T14623] dump_stack_lvl+0x95/0xd0 [ 328.460509][T14623] dump_stack+0x15/0x1b [ 328.460546][T14623] should_fail_ex+0x25e/0x270 [ 328.460637][T14623] should_fail+0xb/0x20 [ 328.460667][T14623] should_fail_usercopy+0x1a/0x20 [ 328.460699][T14623] _copy_from_user+0x1c/0xb0 [ 328.460732][T14623] __copy_msghdr+0x242/0x300 [ 328.460767][T14623] ___sys_sendmsg+0x10c/0x1e0 [ 328.460814][T14623] __x64_sys_sendmsg+0xd4/0x160 [ 328.460843][T14623] x64_sys_call+0x194c/0x3020 [ 328.460908][T14623] do_syscall_64+0x136/0x3c0 [ 328.460949][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.461028][T14623] RIP: 0033:0x7f0abdbae019 [ 328.461047][T14623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.461066][T14623] RSP: 002b:00007f0abc607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.461086][T14623] RAX: ffffffffffffffda RBX: 00007f0abde35fa0 RCX: 00007f0abdbae019 [ 328.461100][T14623] RDX: 00000000040000d3 RSI: 00002000000000c0 RDI: 0000000000000008 [ 328.461117][T14623] RBP: 00007f0abc607090 R08: 0000000000000000 R09: 0000000000000000 [ 328.461202][T14623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.461215][T14623] R13: 00007f0abde36038 R14: 00007f0abde35fa0 R15: 00007ffc67de8088 [ 328.461236][T14623] [ 328.472265][T13827] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.653744][T13841] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.935406][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 328.987863][T14672] loop8: detected capacity change from 0 to 128 [ 329.056146][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3027'. [ 329.071075][T14678] vhci_hcd vhci_hcd.3: invalid port number 236 [ 329.077558][T14672] bridge_slave_1: left allmulticast mode [ 329.083298][T14672] bridge_slave_1: left promiscuous mode [ 329.095404][T14672] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.118577][T14672] bridge_slave_0: left allmulticast mode [ 329.124648][T14672] bridge_slave_0: left promiscuous mode [ 329.130829][T14672] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.189514][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 329.189534][ T28] audit: type=1400 audit(1785629330.710:5372): avc: denied { ioctl } for pid=14685 comm="syz.9.3030" path="socket:[44403]" dev="sockfs" ino=44403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.258322][ T28] audit: type=1400 audit(1785629330.710:5373): avc: denied { bind } for pid=14685 comm="syz.9.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.334852][ T28] audit: type=1400 audit(1785629330.720:5374): avc: denied { write } for pid=14670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.383059][ T28] audit: type=1400 audit(1785629330.840:5375): avc: denied { write } for pid=14701 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.722395][ T28] audit: type=1400 audit(1785629331.240:5376): avc: denied { write } for pid=14714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.851247][ T28] audit: type=1400 audit(1785629331.370:5377): avc: denied { write } for pid=14737 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.085257][ T28] audit: type=1400 audit(1785629331.600:5378): avc: denied { bind } for pid=14756 comm="syz.9.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 330.157032][ T28] audit: type=1400 audit(1785629331.650:5379): avc: denied { name_bind } for pid=14752 comm="syz.0.3043" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 330.179807][ T28] audit: type=1400 audit(1785629331.650:5380): avc: denied { write } for pid=14750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.213468][T14772] SELinux: Context system_u:object_r:ptmx_t:s0 is not valid (left unmapped). [ 330.226386][ T28] audit: type=1400 audit(1785629331.650:5381): avc: denied { write } for pid=14770 comm="syz.4.3047" name="configs" dev="configfs" ino=42915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.249178][T14772] loop4: detected capacity change from 0 to 512 [ 330.351044][T14772] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 330.367584][T14772] EXT4-fs (loop4): group descriptors corrupted! [ 330.502727][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 330.512842][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.749106][T14814] wg2 speed is unknown, defaulting to 1000 [ 330.888436][T14814] lo speed is unknown, defaulting to 1000 [ 331.016070][T14821] loop8: detected capacity change from 0 to 512 [ 331.316800][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3056'. [ 331.517182][T14821] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 331.527957][T14821] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 1024: comm syz.8.3053: invalid block [ 331.539448][T14821] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 331.613685][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 331.629458][ C0] EXT4-fs (loop8): initial error at time 1785629333: ext4_get_branch:178: inode 13: block 1024 [ 331.640042][ C0] EXT4-fs (loop8): last error at time 1785629333: ext4_get_branch:178: inode 13: block 1024 [ 331.658264][T14821] EXT4-fs (loop8): 1 truncate cleaned up [ 331.677338][T14821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.692489][T14821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.522037][T14814] netlink: 'syz.8.3053': attribute type 6 has an invalid length. [ 333.074951][T14951] netlink: 'syz.0.3064': attribute type 12 has an invalid length. [ 333.091586][T14947] loop7: detected capacity change from 0 to 2048 [ 333.210134][T14947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.289812][T13984] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.389395][T14960] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3060'. [ 333.429778][T14982] loop7: detected capacity change from 0 to 1024 [ 333.508620][T14982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 333.574375][T14982] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.841350][T13984] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /19/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 333.897009][T13984] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 333.939972][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3080'. [ 333.954948][T13984] EXT4-fs error (device loop7): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 333.975579][T13984] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 334.005888][T13984] EXT4-fs error (device loop7): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 334.036640][T15029] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3081'. [ 334.103455][T13984] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 334.135679][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'. [ 334.139451][T13984] EXT4-fs error (device loop7): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 334.159067][T15036] random: crng reseeded on system resumption [ 334.166795][T13984] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 334.210027][T13984] EXT4-fs error (device loop7): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 334.210295][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 334.210349][ T28] audit: type=1400 audit(1785629335.730:5456): avc: denied { write } for pid=13984 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.232135][T13984] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /19/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 334.299092][ T28] audit: type=1400 audit(1785629335.820:5457): avc: denied { write } for pid=13984 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.362250][ T28] audit: type=1400 audit(1785629335.820:5458): avc: denied { write } for pid=13984 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.385001][ T28] audit: type=1400 audit(1785629335.820:5459): avc: denied { write } for pid=13984 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.437476][ T28] audit: type=1400 audit(1785629335.820:5460): avc: denied { write } for pid=13984 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.474610][ T28] audit: type=1400 audit(1785629335.820:5461): avc: denied { write } for pid=13984 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.506313][ T28] audit: type=1400 audit(1785629335.820:5462): avc: denied { write } for pid=13984 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.548896][T13984] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.560471][T13984] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 334.568550][T13984] audit: backlog limit exceeded [ 334.632277][T15001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.665380][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'. [ 334.676079][ T3521] lo speed is unknown, defaulting to 1000 [ 334.687319][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3090'. [ 334.979091][T15008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 335.052705][ T3425] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.110548][T15100] netlink: 'syz.9.3102': attribute type 10 has an invalid length. [ 335.137419][T15100] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3102'. [ 335.170571][ T3425] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.192103][T15100] bond0: entered promiscuous mode [ 335.198498][T15100] bond_slave_0: entered promiscuous mode [ 335.209061][T15100] bond_slave_1: entered promiscuous mode [ 335.215114][T15100] bridge0: port 3(bond0) entered blocking state [ 335.222164][T15100] bridge0: port 3(bond0) entered disabled state [ 335.231758][T15100] bond0: entered allmulticast mode [ 335.237381][T15100] bond_slave_0: entered allmulticast mode [ 335.265959][T15100] bond_slave_1: entered allmulticast mode [ 335.283034][T15104] nfs: Unknown parameter '' [ 335.289713][T15100] bridge0: port 3(bond0) entered blocking state [ 335.296168][T15100] bridge0: port 3(bond0) entered forwarding state [ 335.309130][ T3425] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.436945][ T3425] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.443872][T15112] netlink: 'syz.4.3104': attribute type 1 has an invalid length. [ 335.455171][T15112] netlink: 638 bytes leftover after parsing attributes in process `syz.4.3104'. [ 335.476856][T15102] wg2 speed is unknown, defaulting to 1000 [ 335.515359][T15102] lo speed is unknown, defaulting to 1000 [ 335.709094][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.720701][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.734091][T15102] bridge_slave_0: entered allmulticast mode [ 335.747885][T15102] bridge_slave_0: entered promiscuous mode [ 335.766380][T15102] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.773549][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.792417][T15102] bridge_slave_1: entered allmulticast mode [ 335.799510][T15102] bridge_slave_1: entered promiscuous mode [ 335.825998][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.849163][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.886458][T15102] team0: Port device team_slave_0 added [ 335.898593][T15102] team0: Port device team_slave_1 added [ 335.941648][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.961992][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.014972][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.036701][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.071983][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.121152][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.662575][T15148] loop4: detected capacity change from 0 to 512 [ 338.672119][T15102] hsr_slave_0: entered promiscuous mode [ 338.695325][T15148] EXT4-fs: Ignoring removed nobh option [ 338.703098][T15102] hsr_slave_1: entered promiscuous mode [ 338.710415][T15102] debugfs: 'hsr0' already exists in 'hsr' [ 338.716493][T15102] Cannot create hsr debugfs directory [ 338.780102][T15157] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3111'. [ 338.803351][ T3425] bridge_slave_1: left allmulticast mode [ 338.809065][ T3425] bridge_slave_1: left promiscuous mode [ 338.814778][ T3425] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.827881][ T3425] bridge_slave_0: left allmulticast mode [ 338.833593][ T3425] bridge_slave_0: left promiscuous mode [ 338.839362][ T3425] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.879983][T15148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.899644][T15148] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.968390][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.006047][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.041330][T15182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=15182 comm=syz.9.3113 [ 339.057303][ T3425] bond0 (unregistering): Released all slaves [ 339.132844][T15169] bond2 (unregistering): Released all slaves [ 339.153350][T13827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.179262][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 339.203759][T15194] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.3118'. [ 339.212938][T15194] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 339.235500][T15197] tmpfs: Bad value for 'mpol' [ 339.524533][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 339.524548][ T28] audit: type=1400 audit(1785629341.000:5584): avc: denied { write } for pid=15203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.583788][ T28] audit: type=1400 audit(1785629341.100:5585): avc: denied { write } for pid=15220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.653993][ T3425] hsr_slave_0: left promiscuous mode [ 339.663271][ T3425] hsr_slave_1: left promiscuous mode [ 339.669925][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.677768][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.685493][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.693021][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.704489][ T3425] veth1_macvtap: left promiscuous mode [ 339.712006][ T3425] veth0_macvtap: left promiscuous mode [ 339.718071][ T3425] veth1_vlan: left promiscuous mode [ 339.723444][ T3425] veth0_vlan: left promiscuous mode [ 339.744135][ T28] audit: type=1400 audit(1785629341.260:5586): avc: denied { read } for pid=15222 comm="syz.9.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 339.819538][ T3425] team0 (unregistering): Port device team_slave_1 removed [ 339.829829][ T3425] team0 (unregistering): Port device team_slave_0 removed [ 339.874830][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 339.904067][T15229] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3121'. [ 339.920021][T15102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.978311][T15233] netlink: 'syz.8.3124': attribute type 21 has an invalid length. [ 339.990599][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3124'. [ 340.018409][T15102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.035990][T15233] netlink: 'syz.8.3124': attribute type 21 has an invalid length. [ 340.043918][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3124'. [ 340.047341][ T49] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.061950][ T49] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.070688][ T49] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.095818][ T329] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.119083][ T28] audit: type=1400 audit(1785629341.640:5587): avc: denied { setattr } for pid=15236 comm="syz.9.3125" path="pipe:[46104]" dev="pipefs" ino=46104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 340.163777][T15102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.203115][T15243] tmpfs: Bad value for 'size' [ 340.225945][ T28] audit: type=1400 audit(1785629341.740:5588): avc: denied { map } for pid=15244 comm="syz.4.3128" path="socket:[46128]" dev="sockfs" ino=46128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 340.256680][T15102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.259064][ T28] audit: type=1400 audit(1785629341.780:5589): avc: denied { shutdown } for pid=15250 comm="syz.9.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.301539][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'. [ 340.332548][ T28] audit: type=1400 audit(1785629341.810:5590): avc: denied { setopt } for pid=15250 comm="syz.9.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.366909][ T28] audit: type=1400 audit(1785629341.840:5591): avc: denied { write } for pid=15238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.390049][ T28] audit: type=1400 audit(1785629341.850:5592): avc: denied { write } for pid=15261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.403444][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 340.421384][T15264] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3131'. [ 340.475696][T15102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.486455][T15102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.496574][T15102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.505422][T15102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.515960][T15102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.526720][T15102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.535162][T15102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.566078][T15102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.675411][T15102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.693022][T15102] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.703154][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.710422][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.724985][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.732136][ T7117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.734412][ T28] audit: type=1400 audit(1785629342.240:5593): avc: denied { write } for pid=15274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.847578][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 340.982500][T15102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.117500][T15102] veth0_vlan: entered promiscuous mode [ 341.132918][T15102] veth1_vlan: entered promiscuous mode [ 341.171538][T15336] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3141'. [ 341.189022][T15102] veth0_macvtap: entered promiscuous mode [ 341.196625][T15336] openvswitch: netlink: Message has 6 unknown bytes. [ 341.208562][T15102] veth1_macvtap: entered promiscuous mode [ 341.237431][ T4317] ================================================================== [ 341.245617][ T4317] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 341.252719][ T4317] [ 341.255063][ T4317] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3521 on cpu 0: [ 341.263145][ T4317] wq_worker_running+0x9b/0x120 [ 341.268113][ T4317] schedule_preempt_disabled+0x10/0x20 [ 341.273698][ T4317] __mutex_lock+0x524/0xf40 [ 341.278243][ T4317] __mutex_lock_slowpath+0xa/0x10 [ 341.283303][ T4317] mutex_lock+0x88/0x90 [ 341.287487][ T4317] rtnl_lock+0x15/0x20 [ 341.291578][ T4317] netdev_work_proc+0x29/0x520 [ 341.296375][ T4317] process_scheduled_works+0x4d4/0x9a0 [ 341.301874][ T4317] worker_thread+0x569/0x750 [ 341.306595][ T4317] kthread+0x221/0x270 [ 341.310690][ T4317] ret_from_fork+0x146/0x330 [ 341.315342][ T4317] ret_from_fork_asm+0x1a/0x30 [ 341.320283][ T4317] [ 341.322643][ T4317] read to 0xffff888237c2a8e4 of 4 bytes by task 4317 on cpu 1: [ 341.330221][ T4317] kick_pool+0x49/0x2d0 [ 341.334438][ T4317] __queue_work+0x8e9/0xb90 [ 341.338986][ T4317] queue_work_on+0xa9/0x140 [ 341.343533][ T4317] netdev_work_enqueue+0x1b0/0x1f0 [ 341.348696][ T4317] __netdev_work_core_sched+0x1f/0x30 [ 341.354108][ T4317] __dev_set_rx_mode+0x12f/0x220 [ 341.359068][ T4317] dev_mc_add+0x8d/0xb0 [ 341.363288][ T4317] igmp6_group_added+0xfc/0x320 [ 341.368182][ T4317] __ipv6_dev_mc_inc+0x4e1/0x5c0 [ 341.373148][ T4317] ipv6_dev_mc_inc+0x1f/0x30 [ 341.377867][ T4317] addrconf_dad_work+0x26a/0xbc0 [ 341.382844][ T4317] process_scheduled_works+0x4d4/0x9a0 [ 341.388329][ T4317] worker_thread+0x569/0x750 [ 341.392941][ T4317] kthread+0x221/0x270 [ 341.397103][ T4317] ret_from_fork+0x146/0x330 [ 341.401714][ T4317] ret_from_fork_asm+0x1a/0x30 [ 341.406491][ T4317] [ 341.408830][ T4317] value changed: 0x00000000 -> 0x00000001 [ 341.414572][ T4317] [ 341.417075][ T4317] Reported by Kernel Concurrency Sanitizer on: [ 341.423426][ T4317] CPU: 1 UID: 0 PID: 4317 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 341.434473][ T4317] Tainted: [W]=WARN [ 341.438396][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.448582][ T4317] Workqueue: ipv6_addrconf addrconf_dad_work [ 341.454735][ T4317] ================================================================== [ 341.576181][T15102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.602495][T15102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.626069][ T4317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.646178][ T4317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.665851][ T7117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.674799][ T7117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.788184][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 345.788202][ T28] audit: type=1400 audit(1785629347.310:5605): avc: denied { write } for pid=15363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.829864][ T28] audit: type=1400 audit(1785629347.350:5606): avc: denied { write } for pid=15374 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.067484][ T28] audit: type=1400 audit(1785629347.590:5607): avc: denied { write } for pid=15377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.103936][ T28] audit: type=1400 audit(1785629347.620:5608): avc: denied { write } for pid=15388 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.622669][ T28] audit: type=1400 audit(1785629348.140:5609): avc: denied { write } for pid=15393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.662098][ T28] audit: type=1400 audit(1785629348.180:5610): avc: denied { write } for pid=15404 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.775011][ T28] audit: type=1400 audit(1785629348.290:5611): avc: denied { write } for pid=15407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.812368][ T28] audit: type=1400 audit(1785629348.330:5612): avc: denied { write } for pid=15418 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.917928][ T28] audit: type=1400 audit(1785629348.440:5613): avc: denied { write } for pid=15421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.954349][ T28] audit: type=1400 audit(1785629348.470:5614): avc: denied { write } for pid=15432 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.235055][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 351.235073][ T28] audit: type=1400 audit(1785629352.750:5619): avc: denied { write } for pid=15465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1