last executing test programs: 4m32.314577279s ago: executing program 32 (id=1081): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfc, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x3, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x120}}, 0x0) 4m15.395123829s ago: executing program 33 (id=1458): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 3m45.354540041s ago: executing program 34 (id=1887): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x19, 0x6, 0x0, 0x6, 0x40001, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) listen(0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3m40.796628177s ago: executing program 35 (id=1926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x4000400) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x979d}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="14", 0x1, r3) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x16200224) keyctl$search(0xa, r4, &(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, r5) ioprio_set$uid(0x3, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f90500020083000000080006"], 0xf8}}, 0x6044040) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad07, 0x20024, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1f900000000000, 0x14dc}, 0x19e024, 0x2000000000000000, 0xfffffffe, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r8, 0x0, 0x0, 0x2f204a63b1df0115, &(0x7f0000005e40)) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000560005"], 0xfe33) 3m31.392357986s ago: executing program 36 (id=1873): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x7}, 0x7828, 0x1, 0xbd6, 0x0, 0x4002, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsmount(0xffffffffffffffff, 0x743022da5f49675d, 0x81) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0xffffffff, 0x7, 0x7, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xe, 0xd, "85fb02f352b681d3566c"}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 3m19.669872383s ago: executing program 8 (id=2144): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 3m19.37984148s ago: executing program 8 (id=2148): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r2}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) recvfrom(r1, 0x0, 0xb, 0x40, 0x0, 0x0) 3m19.121356967s ago: executing program 8 (id=2150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x29}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 3m19.074210358s ago: executing program 37 (id=2150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x29}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 3m11.281918946s ago: executing program 38 (id=2232): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xd, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m4.584608335s ago: executing program 39 (id=2289): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0xa1ff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 2m59.814639667s ago: executing program 5 (id=2334): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) fallocate(r1, 0x0, 0x0, 0x90001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r2, 0x8, 0x0, 0x8000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 2m59.793414277s ago: executing program 5 (id=2335): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 2m59.633096701s ago: executing program 5 (id=2337): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") getgid() syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 2m59.28729346s ago: executing program 5 (id=2340): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 2m59.164648653s ago: executing program 5 (id=2342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x80000001}]}}}]}, 0x40}}, 0x40080c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) syz_io_uring_setup(0x4344, &(0x7f00000001c0)={0x0, 0xcc74, 0x1, 0x83, 0x3ac}, 0x0, &(0x7f0000000440), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000850) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000180)=ANY=[@ANYBLOB="003547e2289179cd09225a276d8ad02e59785f28c3aa2961f7b0c0c87eef2b0562c4f3f6420329cd2632232c81c29c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b868f0c7b1bbdf47f14b78ec7f2e981f"], 0x1, 0x537, &(0x7f0000000580)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x4c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x1}, [@NHA_GROUP={0x34, 0x2, [{0x2, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x3}]}]}, 0x4c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x13, 0x0, 0x26) socket$inet(0x2, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) poll(0x0, 0x0, 0xfbb) r7 = dup(0xffffffffffffffff) file_setattr(r7, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) 2m57.921565555s ago: executing program 5 (id=2356): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x1, 0xfffffffe, 0x19, "0038e0079c7f65c5d13c000000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 2m57.873478666s ago: executing program 40 (id=2356): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x1, 0xfffffffe, 0x19, "0038e0079c7f65c5d13c000000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 2m45.08774178s ago: executing program 7 (id=2475): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 2m44.997154753s ago: executing program 7 (id=2478): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffe, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x5c1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m44.413655808s ago: executing program 7 (id=2489): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@bh}]}, 0x3, 0x440, &(0x7f0000000280)="$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") syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50, &(0x7f00000006c0)={[], [{@permit_directio}, {@uid_gt}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m44.172726124s ago: executing program 7 (id=2494): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/85, 0x55}, {0x0, 0xf}, {&(0x7f0000000900)=""/194}], 0x2, 0x0, 0xfffffffffffffe20}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m43.565853389s ago: executing program 7 (id=2505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 2m43.416658013s ago: executing program 7 (id=2508): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000280)=""/189, 0xbd}], 0x1) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0xf6, 0x3) 2m28.229486169s ago: executing program 41 (id=2508): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000280)=""/189, 0xbd}], 0x1) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0xf6, 0x3) 2m25.259180714s ago: executing program 6 (id=2689): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001640)="e6", 0x1}], 0x1}}], 0x1, 0x84) sendmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="a6af", 0x2}], 0x1, &(0x7f0000001680)=[{0x10, 0x1, 0x9}], 0x10}}], 0x1, 0x4044805) 2m25.165183816s ago: executing program 6 (id=2690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000003880)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x4800) 2m25.113685837s ago: executing program 6 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="2868095b0b92"}) 2m24.98878037s ago: executing program 6 (id=2693): socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0xfffffffc}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40000) 2m24.653626009s ago: executing program 6 (id=2701): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 2m24.261633979s ago: executing program 6 (id=2705): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="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", 0x430}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c268", 0x1b}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000580), 0x4) 2m9.175548392s ago: executing program 42 (id=2705): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="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", 0x430}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c268", 0x1b}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000580), 0x4) 2m6.1164503s ago: executing program 8 (id=2864): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340)="01", &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) 2m6.030319262s ago: executing program 8 (id=2887): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m5.917320704s ago: executing program 8 (id=2889): close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000000005, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x40) write$evdev(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xea60}, 0x14, 0x9, 0x1}, {{0x77359400}, 0x0, 0x9bfd, 0x2}, {{0x77359400}, 0x11, 0x8, 0x81b}, {{}, 0x15, 0xfef, 0x1}, {{0x77359400}, 0x14, 0xb, 0xffffcc04}], 0x78) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) 1m50.859326937s ago: executing program 43 (id=2889): close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000000005, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x40) write$evdev(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xea60}, 0x14, 0x9, 0x1}, {{0x77359400}, 0x0, 0x9bfd, 0x2}, {{0x77359400}, 0x11, 0x8, 0x81b}, {{}, 0x15, 0xfef, 0x1}, {{0x77359400}, 0x14, 0xb, 0xffffcc04}], 0x78) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) 1m26.518999695s ago: executing program 9 (id=3364): ioperm(0x2, 0x7ff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) 1m25.346214184s ago: executing program 9 (id=3381): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m24.475500387s ago: executing program 9 (id=3398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x80, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m23.452978793s ago: executing program 9 (id=3404): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 1m23.365161165s ago: executing program 9 (id=3407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) statfs(&(0x7f0000000000)='./file1\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x1000) 1m23.172764309s ago: executing program 9 (id=3412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "608d77a9b70d876f", "8f0abac5c77c7ccc0049c8d1a83ef37b", "8cbe0bfe", "f06432a835b478c3"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 1m23.172666479s ago: executing program 44 (id=3412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "608d77a9b70d876f", "8f0abac5c77c7ccc0049c8d1a83ef37b", "8cbe0bfe", "f06432a835b478c3"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 5.952268729s ago: executing program 2 (id=4153): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0xfffffffc, 0x5, 0x9}, 0x0, 0xffffffffff7fbfff, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x10100, 0x5, 0x0, 0x3, 0x7, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}, 0x101}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000003000000320000002f00020500000000"], 0x18}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x80e8662d, &(0x7f0000000000)={0x1, 0x81, 0x4, 0x8f10, 0xfff7ffbe, 0x7}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 5.951717669s ago: executing program 3 (id=4155): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8009}, @window={0x3, 0x100, 0x8}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @timestamp], 0x8) sendto$inet(r4, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 5.399141274s ago: executing program 1 (id=4156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) inotify_init() perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffff9, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shutdown(0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000e00)={{r1}, r2, 0x0, @inherit={0x78, 0x0}, @devid}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000340), 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) fstatfs(r4, &(0x7f0000000180)=""/200) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) 4.888436986s ago: executing program 1 (id=4157): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x2, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000010c0), 0x4) timer_create(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) syz_emit_ethernet(0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 4.73856191s ago: executing program 1 (id=4159): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000203020010000000000000050000"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) 3.93547608s ago: executing program 3 (id=4160): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000240)={[{@map_acorn}, {@nojoliet}, {@unhide}]}, 0x1, 0x56d, &(0x7f00000009c0)="$eJzs3M9uG8cZAPBZmbIVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxqb64LdCXSHvrE/TUNwp67DHFcknHsSRa/hPTaH4/QJoh99uZb1bEfiCFYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQpRsdjrdKAyz0e6t+HTJZpHvzDk+G+9f32nmzBtCVP+ElZVwuXnq8mvfHv5p/etquNQ8uhRW6mYl3P3R66++91praXb+nIRegOVpsod7n80PjMI30YtK6vuxffxSvxJa8VY6yso82+lvpXFW5vHG+nrn3e1BGQ+yYVreLqt0J05aoV/lRXwt+Xnc3di4Hqft2/nuaGuzP0xnT958p9fprMcftMdpvyjz0bsftMtkOxsOs9HWJKY+XMfcrF+IH2ZVfOHBtb/+uNz3Dw73umcJ6j0uqNfp9brdXq+7fmPjxs1Op3Xsic4jwrGIRb9oWbTndOeGZzer/wAAAMD/r2jyGXv9/n958jl8FAbRN41FpwYAAAA8J5P//F/6R1S//w8hXA7RIBumnUWnBQAAADxHf3nsHrtyfCH6939CUSxH98a3fhYd9eu4/tG55rxzj45YDVrRxekgk2a9NX2UpFeiN5qgN2bRX0+b/cflET1BAmunJBD+FtaamLU7TXtndqSZZXWQDdN2kg/f64Z+/+JSld6q/vDpwR/DZPl/He1cjML+weFe+ze/O7wzyeVePcq9o+kGimP7KObk8sWDfY+PrPirZqjlOpdoOu9qM2/n4fUvNacvPcGc98ObTcybq027+t31r9RzdtunrX41+vFkM90zrvx+uNLEXLn2dt28fe2ELHonZXF+Ovhkt97DWTzVtThDFtfnXIuwf3AhhHCmLF45LQuARdk/rQo9qP+P1t3WU9xrv63u73+P1f1+eKuJeWttcmNtrZ1wR++0ozDnjj6rsffOP211+2e42sRcnQWfWGPf/8lk3vDqbN6mqk6K/1enzlsOe1H9hzr3xdHvw+uff3n3nYOjjz/Z+2Tv017v+nrnl53OjV5Ynixj2szJFIAfrrT4Olqt/hwVRTb+dXdjo9uvttO4yJMP4yLb3ErjbFSlRbLdH22l8bjIqzzJh3Xno2wzLeNydzzOiyoe5EU8zsvs1uSbX+LpV7+UafjFqMqScjxM+2UaJ/mo6idVvJmVSTze/dUwK7fTYnJyOU6TbJAl/SrLR3Er3/17krbjuEzThwKzzXRUZYOs7o7icZHt9Ivb8Uf5cHcnjTfTMimycZU3A87mykaDvNjpV9m50F70xQaAl8TnX9797ceHh3ufnbHz3+nmwCc56/is5xexVABgKgrhT3V7UpUGAAAAAAAAAAAAAABeDk+6/+85dpanKSxmdp2zdcLKS5HGYjpLzzxO6yVYxamd2U3gxJjF3ZMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT/CwAA//+jAZmR") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x20, r4, 0x31, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x2, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x12, 0x60a, 0x0, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x4000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 3.705311606s ago: executing program 0 (id=4161): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2400c800) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) memfd_create(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1) dup(0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x10, 0x333a00) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000003140)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083820090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d5036cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e0749e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000000)={0xf5, 0x7a}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400) 3.645331288s ago: executing program 1 (id=4162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a58000000060a0b16000000000000000002620000082c00048028000180080001006e6174001c0002800800014000000000080003400000000008000240000000020900010073797a30000000000900020073797a320000000014000000110001000000000000000000000000ff07f68032c55e533704e7cfd93f56bc6e4c5fcba02a1dcba748114ac72c2813648cc899acec92858b45e88450da2d9c3d3c4b1a1c8b759f319ca46acb28eee7ca263aacdd8da252f95447fea1fa07fe77bc866ef6da422bb637d67043b37ab14bbd45ac2b915dfe79cc11a4c433174b67e0698ccafab6afc3b0b77fb66add351aceac183228164ceab5fbc8b3d93f00cbe7dac78cac72015c0a3ef52dc7f83cc0b41ca1270978cfc9d4d44a9d5f7ba9d9d45124d8ae171b2da709db04b27ff3e419ea9c5c07da47192fc55f8c77f3768ee54414fd1e3899b1af3a993e4d7982"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x80000001}]}}}]}, 0x40}}, 0x40080c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) syz_io_uring_setup(0x4344, &(0x7f00000001c0)={0x0, 0xcc74, 0x1, 0x83, 0x3ac}, 0x0, &(0x7f0000000440), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB, @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000850) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000180)=ANY=[@ANYBLOB="003547e2289179cd09225a276d8ad02e59785f28c3aa2961f7b0c0c87eef2b0562c4f3f6420329cd2632232c81c29c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b868f0c7b1bbdf47f14b78ec7f2e981f"], 0x1, 0x537, &(0x7f0000000580)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x4c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x1}, [@NHA_GROUP={0x34, 0x2, [{0x2, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x3}]}]}, 0x4c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x13, 0x0, 0x26) socket$inet(0x2, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) poll(0x0, 0x0, 0xfbb) r7 = dup(0xffffffffffffffff) file_setattr(r7, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) 3.464082312s ago: executing program 0 (id=4163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000030c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020002000900010073797a30000000000900030073"], 0x94}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000880) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e497"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0), 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x99f4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 3.448935453s ago: executing program 2 (id=4164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$reject(0x14, 0x0, 0x80007ffffffff000, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002740)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250a000000080003000800000005000500040000003c0006800600010002000000060001000200000008000300640101000800060026000000080006000100000008000700", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20044044}, 0x4001) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x4, 0x401, 0x44, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x80, 0x40, 0x0, 0xffffffff}}) 3.404857634s ago: executing program 4 (id=4165): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$reject(0x14, 0x0, 0x80007ffffffff000, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002740)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f0000002780)=ANY=[@ANYBLOB="70000600717f7d1b9defe727ec45e7614072a00f2afd0710d07f70fae9cab2267b8f1827ebf1c713d696f67b698cda7a8c0aa7b81a2c79154fb8116f76783341d006947eb7795230f4b4ff5d6af0d88f6115d0b76c5fcc8f1c45e6fbf5e9f5ce92326673d0ab3368028eca25f047e79e2d51b49a0e45f52ed81cc412fc75fa4ece6265887f8f686f72febbc71778023026e396a50bea425bd3e2aa01d784cef94495bbc4177555b49b8ffaa579d18ae1263eca33f9bfde9237ea5a111af0cc524f0df4526c395bf85c31a90292b11394f8c7f92885f866df47f104c1161f0150fe75140d8ac61cd459caec645b72607c65c07baf680cdce7189f7240314d472482536e9898d9", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250a000000080003000800000005000500040000003c0006800600010002000000060001000200000008000300640101000800060026000000080006000100000008000700", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20044044}, 0x4001) 3.377656975s ago: executing program 3 (id=4166): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) ioctl$TCSETSW(r0, 0x5403, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}}, 0x20}, 0x1, 0xc3ffffffffffffff}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x5, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 3.344021056s ago: executing program 4 (id=4168): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.343294006s ago: executing program 3 (id=4169): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x100, 0x9332}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) socket(0x11, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000140)=ANY=[], 0x1, 0x2ca, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000000a00)="c7", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) 3.317066846s ago: executing program 2 (id=4170): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x2, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000010c0), 0x4) timer_create(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) syz_emit_ethernet(0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 3.214054609s ago: executing program 2 (id=4171): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x10000d, 0x0, 0x0, 0x3, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000001c0)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@nolazytime}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x100) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0xa, 0x2) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) r2 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000000c0)) setxattr(0x0, 0x0, 0x0, 0x0, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x804) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2.931569666s ago: executing program 4 (id=4172): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a00157c0400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e", 0xa2}], 0x1}, 0x4880) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r0, 0x0, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="00000500", @ANYRES32, @ANYBLOB="1c0012800b00010069f0766c616e2289ac0290c2118aa75bd3a53f41c7f27dc49d5ac116674261086ec13fb08e88ddfc5344e028d0a6bb33c41637188e2f99a925fc2d2d8bd62f7c4f0db782f145213e02fe0f7e126f9a5e48145b9b87eaac236d532187575083b108645f"], 0x4c}, 0x1, 0x0, 0x0, 0x20045808}, 0x40050) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30691, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c0001800600"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(0xffffffffffffffff, &(0x7f00000093c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000400)}}], 0x1, 0x40040) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001a00010129bd700000ffffff81000000fd00000900000000"], 0x20}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20040004) syz_emit_ethernet(0x0, 0x0, 0x0) 2.706427311s ago: executing program 1 (id=4173): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x40000, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x5e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'team0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") 2.699964402s ago: executing program 4 (id=4174): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) unshare(0x22020600) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) clock_getres(0x3, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bind$rxrpc(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) 2.538720806s ago: executing program 0 (id=4175): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000203020010000000000000050000"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) 495.419338ms ago: executing program 1 (id=4176): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) read$ptp(r1, &(0x7f0000001240)=""/4096, 0x1000) r2 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r4}, 0x38) write(r1, &(0x7f0000000080)='4', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@bh}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x90, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) futex(&(0x7f0000000080)=0x2, 0x1, 0x0, &(0x7f00000000c0), 0x0, 0x2) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 474.544178ms ago: executing program 2 (id=4177): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x35, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x101, 0x30, 0x5e6, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x20000090) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) io_setup(0x6, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0) io_submit(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000001000100130000090000000100", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r6}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 453.420789ms ago: executing program 4 (id=4178): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$reject(0x14, 0x0, 0x80007ffffffff000, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002740)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250a000000080003000800000005000500040000003c0006800600010002000000060001000200000008000300640101000800060026000000080006000100000008000700", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20044044}, 0x4001) 391.97856ms ago: executing program 0 (id=4179): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x3f) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x3, 0x80000000, 0x8, 0x5, 0x3, 0x0, 0x4}}, @common=@unspec=@state={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x8000, 0xfffffffe, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @mcast2, 0x2}, 0x1c) connect$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x30, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) readv(r6, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/175, 0xaf}], 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) sendfile(r3, r5, 0x0, 0x2) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x7c) 314.253442ms ago: executing program 0 (id=4180): r0 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002740)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250a000000080003000800000005000500040000003c0006800600010002000000060001000200000008000300640101000800060026000000080006000100000008000700", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20044044}, 0x4001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x4, 0x401, 0x44, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x80, 0x40, 0x0, 0xffffffff}}) 313.974332ms ago: executing program 4 (id=4181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="a6e12b288aedd1fe40d5d38c0753926462766b8624637138366f70b7e5958849cb0a23c2063a134e4263a71425641d2b5f917bc8584f52ebb50edbf18221be4635484f591e5403d4cdea2205d91b644c50a8c0d7ef5c3983", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0xc02, 0x1, 0x9, 0x8, 0x43fe, 0x7fffffff, 0xd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 313.463592ms ago: executing program 3 (id=4182): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r5 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000400), 0x0, 0x20004011, 0x0, 0x0) 241.135974ms ago: executing program 0 (id=4183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x4000040) close(0xffffffffffffffff) unshare(0x2c020400) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x0, 0x4ea, &(0x7f0000000380)="$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") 240.519934ms ago: executing program 2 (id=4184): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6a040000) r0 = syz_open_dev$sg(0x0, 0x0, 0x20000) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x82) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xdf, 0x3}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7fffffff, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) write(r1, &(0x7f0000000080)='4', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000200025b729bd7000fddbdf250a0000cddb08734e1300f9fa05000600fe7f21933153550b5f30dba8ca6c505445d46b305be373958d517c787634d11e2a803268970b52944f0fa960ce9faef5110ff5636f12603f47e46cdc40ebc75f8c7230942a10d138cc17cef0539e2342bb62d425058d7d15a5d382f9753444d65d428ef3b2971db54723b363ea24e6eab3ee5cbf787673579b7332ea5d7053924b41b8adb94f6070d6d6e87fff3c3c78235a397b4b0e892aa81dfa9f269f335260"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x200000, 0x100000001}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) 0s ago: executing program 3 (id=4185): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/185, 0xb9}], 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x2}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x200000000000001a, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x40}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xe80, '\x00', 0x0, r2, 0x2, 0x0, 0x5}, 0x50) keyctl$get_security(0x11, 0x0, &(0x7f0000000780)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a000100000000000000000000000000000000000800010002001fa008000e"], 0x28}}, 0x240040c4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000180)) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) kernel console output (not intermixed with test programs): 778099][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 393.804118][ T28] audit: type=1400 audit(1785757447.576:2105): avc: denied { write } for pid=14785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.854031][ T28] audit: type=1400 audit(1785757447.626:2106): avc: denied { write } for pid=14799 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.937462][ T28] audit: type=1400 audit(1785757447.706:2107): avc: denied { bind } for pid=14803 comm="syz.2.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.976541][T14806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2852'. [ 393.986242][ T28] audit: type=1400 audit(1785757447.706:2108): avc: denied { connect } for pid=14803 comm="syz.2.2851" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 394.112925][T14806] set_capacity_and_notify: 2 callbacks suppressed [ 394.113029][T14806] loop2: detected capacity change from 0 to 164 [ 394.172501][T14806] rock: directory entry would overflow storage [ 394.180428][T14806] rock: sig=0x5252, size=5, remaining=3 [ 394.301561][T14809] loop3: detected capacity change from 0 to 1024 [ 394.319552][T14809] EXT4-fs: Ignoring removed bh option [ 394.394114][T14809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 394.412327][T14809] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.436910][ T28] audit: type=1400 audit(1785757448.206:2109): avc: denied { write } for pid=14807 comm="syz.3.2853" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 394.459391][ T28] audit: type=1400 audit(1785757448.206:2110): avc: denied { write } for pid=14807 comm="syz.3.2853" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 394.892524][T14821] syzkaller1: entered promiscuous mode [ 394.908363][T14821] syzkaller1: entered allmulticast mode [ 394.937324][T12405] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 395.014895][ T28] audit: type=1400 audit(1785757448.786:2111): avc: denied { write } for pid=14819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.052283][ T28] audit: type=1400 audit(1785757448.826:2112): avc: denied { create } for pid=14827 comm="syz.3.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 395.080886][ T28] audit: type=1400 audit(1785757448.846:2113): avc: denied { ioctl } for pid=14827 comm="syz.3.2857" path="socket:[42919]" dev="sockfs" ino=42919 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 395.262191][T14843] loop2: detected capacity change from 0 to 2048 [ 395.307395][T14843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.332557][T14843] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 395.385886][T14843] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 395.432373][T14843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 395.432373][T14843] [ 395.449708][T14843] EXT4-fs (loop2): Total free blocks count 0 [ 395.455816][T14843] EXT4-fs (loop2): Free/Dirty block details [ 395.462019][T14843] EXT4-fs (loop2): free_blocks=2415919104 [ 395.467791][T14843] EXT4-fs (loop2): dirty_blocks=16 [ 395.472972][T14843] EXT4-fs (loop2): Block reservation details [ 395.480902][T14863] vhci_hcd vhci_hcd.0: Wrong hub descriptor type for USB 3.0 roothub. [ 395.490316][T14843] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 395.503426][T14864] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 395.546932][T14841] loop3: detected capacity change from 0 to 1024 [ 395.616977][T14841] EXT4-fs: Ignoring removed bh option [ 395.741995][T14841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 395.783463][T14841] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.856030][T10884] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 395.916198][T14887] sock: sock_timestamping_bind_phc: sock not bind to device [ 395.999466][T14874] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.009478][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.027658][T14874] bridge_slave_0: entered allmulticast mode [ 396.034415][T14874] bridge_slave_0: entered promiscuous mode [ 396.041056][T12405] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 396.050179][T14874] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.077649][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.086177][T14874] bridge_slave_1: entered allmulticast mode [ 396.099968][T14874] bridge_slave_1: entered promiscuous mode [ 396.130927][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.142107][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.165036][T14874] team0: Port device team_slave_0 added [ 396.172370][T14874] team0: Port device team_slave_1 added [ 396.191002][T14874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.198228][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.253294][T14874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.269215][T14874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.276576][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.305398][T14874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.317426][ T3410] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 396.326870][ T3410] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.353242][T14874] hsr_slave_0: entered promiscuous mode [ 396.366290][T14874] hsr_slave_1: entered promiscuous mode [ 396.373037][T14919] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2870'. [ 396.379879][T14874] debugfs: 'hsr0' already exists in 'hsr' [ 396.390583][T14874] Cannot create hsr debugfs directory [ 396.548801][T14919] loop9: detected capacity change from 0 to 164 [ 396.649496][T14919] rock: directory entry would overflow storage [ 396.657869][T14919] rock: sig=0x5252, size=5, remaining=3 [ 396.810137][T14874] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 396.819078][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.830216][T14874] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 396.845987][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.863005][T14874] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 396.881827][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.895272][T14874] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 396.904851][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.021043][T14874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.261368][T14874] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.272087][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.279211][ T6470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.545183][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.552319][ T6470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.967921][T14874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.278750][T14874] veth0_vlan: entered promiscuous mode [ 398.290719][T14874] veth1_vlan: entered promiscuous mode [ 398.302139][T15082] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2886'. [ 398.335822][T14874] veth0_macvtap: entered promiscuous mode [ 398.364657][T14874] veth1_macvtap: entered promiscuous mode [ 398.378818][T15086] loop2: detected capacity change from 0 to 1024 [ 398.394717][T14874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.408729][T15086] EXT4-fs: Ignoring removed bh option [ 398.426820][T14874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.468033][T15086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 398.496654][T15086] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.518787][T15063] loop3: detected capacity change from 0 to 1024 [ 398.544231][ T6459] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.551293][T15063] EXT4-fs: Ignoring removed bh option [ 398.575145][ T6459] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.593711][T15082] loop9: detected capacity change from 0 to 164 [ 398.600643][ T6459] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.600835][ T6459] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.709160][T15082] rock: directory entry would overflow storage [ 398.717738][T15063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 398.736759][T15082] rock: sig=0x5252, size=5, remaining=3 [ 398.743901][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 398.743919][ T28] audit: type=1400 audit(1785757452.516:2144): avc: denied { mounton } for pid=15110 comm="syz.8.2887" path="/1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 398.782424][T15063] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.836727][ T28] audit: type=1400 audit(1785757452.606:2146): avc: denied { write } for pid=15102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.860473][ T28] audit: type=1400 audit(1785757452.606:2145): avc: denied { write } for pid=15062 comm="syz.3.2884" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.883565][ T28] audit: type=1400 audit(1785757452.606:2147): avc: denied { write } for pid=15062 comm="syz.3.2884" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.923368][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 398.951387][ T28] audit: type=1400 audit(1785757452.726:2148): avc: denied { write } for pid=15120 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.007277][T12405] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 399.039579][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 399.050083][ T28] audit: type=1400 audit(1785757452.806:2149): avc: denied { bind } for pid=15126 comm="syz.3.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.116774][ T28] audit: type=1400 audit(1785757452.806:2150): avc: denied { setopt } for pid=15126 comm="syz.3.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.364837][ T28] audit: type=1400 audit(1785757453.136:2151): avc: denied { write } for pid=15128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.421045][ T28] audit: type=1400 audit(1785757453.186:2152): avc: denied { watch } for pid=15146 comm="syz.3.2894" path="pipe:[43755]" dev="pipefs" ino=43755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 399.480303][T15152] loop3: detected capacity change from 0 to 128 [ 399.488303][ T28] audit: type=1400 audit(1785757453.226:2153): avc: denied { write } for pid=15148 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.559509][T15133] loop2: detected capacity change from 0 to 1024 [ 399.619824][T15133] EXT4-fs: Ignoring removed bh option [ 399.728707][T15133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 399.746099][T15133] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.970223][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 400.151553][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 400.328478][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2904'. [ 401.299116][T15236] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2909'. [ 401.426918][T15236] loop9: detected capacity change from 0 to 164 [ 401.473796][T15236] rock: directory entry would overflow storage [ 401.491713][T15236] rock: sig=0x5252, size=5, remaining=3 [ 402.489297][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 403.419564][T15220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.540495][T15278] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2925'. [ 403.778549][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 403.778567][ T28] audit: type=1400 audit(1785757457.546:2162): avc: denied { write } for pid=15297 comm="syz.9.2928" name="functions" dev="configfs" ino=26690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.782120][T15278] loop2: detected capacity change from 0 to 164 [ 403.784681][ T28] audit: type=1400 audit(1785757457.546:2163): avc: denied { write } for pid=15297 comm="syz.9.2928" name="c.1" dev="configfs" ino=27029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.784713][ T28] audit: type=1400 audit(1785757457.546:2164): avc: denied { create } for pid=15297 comm="syz.9.2928" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 403.784746][ T28] audit: type=1400 audit(1785757457.546:2165): avc: denied { write } for pid=15297 comm="syz.9.2928" name="c.1" dev="configfs" ino=27029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.956840][T15278] rock: directory entry would overflow storage [ 403.964378][T15278] rock: sig=0x5252, size=5, remaining=3 [ 404.448919][T15282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.898807][T15346] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2943'. [ 405.020673][T15353] loop2: detected capacity change from 0 to 512 [ 405.054901][T15353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.100142][T15353] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.148396][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.185804][T15364] tipc: Started in network mode [ 405.191573][T15364] tipc: Node identity 02191caddc7e, cluster identity 4711 [ 405.198792][T15364] tipc: Enabled bearer , priority 10 [ 405.208212][T15362] tipc: Resetting bearer [ 405.232363][T15362] tipc: Disabling bearer [ 405.344806][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2947'. [ 405.376140][T15371] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 405.387694][T15371] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 405.398008][T15371] bond1 (unregistering): Released all slaves [ 406.051712][T15465] loop9: detected capacity change from 0 to 512 [ 406.078274][T15465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.131632][T15465] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.189475][T10252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.452784][T15496] netlink: 'syz.2.2963': attribute type 2 has an invalid length. [ 406.461786][T15496] netlink: 'syz.2.2963': attribute type 2 has an invalid length. [ 406.469589][T15496] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2963'. [ 406.617590][T15508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2966'. [ 406.665809][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 406.932930][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2961'. [ 407.399662][ T28] audit: type=1400 audit(1785757461.166:2166): avc: denied { create } for pid=15543 comm="syz.0.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 407.438521][ T28] audit: type=1400 audit(1785757461.196:2167): avc: denied { sys_admin } for pid=15543 comm="syz.0.2976" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 407.684064][ T28] audit: type=1400 audit(1785757461.456:2168): avc: denied { mount } for pid=15553 comm="syz.3.2981" name="/" dev="ramfs" ino=45267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 407.930103][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 408.422950][T15581] loop2: detected capacity change from 0 to 1024 [ 408.438797][T15581] EXT4-fs: Ignoring removed bh option [ 408.498162][T15581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 408.539153][T15581] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.565266][ T28] audit: type=1400 audit(1785757462.336:2169): avc: denied { write } for pid=15575 comm="syz.2.2988" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.596048][ T28] audit: type=1400 audit(1785757462.336:2170): avc: denied { write } for pid=15575 comm="syz.2.2988" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.978766][ T28] audit: type=1400 audit(1785757462.746:2171): avc: denied { create } for pid=15597 comm="syz.0.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 409.015899][ T28] audit: type=1400 audit(1785757462.746:2172): avc: denied { remount } for pid=15597 comm="syz.0.2994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.104066][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 409.762873][T15609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2997'. [ 410.121047][T15529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.382496][T15617] loop2: detected capacity change from 0 to 1024 [ 410.409483][T15617] EXT4-fs: Ignoring removed bh option [ 410.471516][T15617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 410.492435][T15617] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.524935][ T28] audit: type=1400 audit(1785757464.296:2173): avc: denied { write } for pid=15612 comm="syz.2.2998" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.541364][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2999'. [ 410.571453][ T28] audit: type=1400 audit(1785757464.296:2174): avc: denied { write } for pid=15612 comm="syz.2.2998" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.891551][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 410.932515][ T28] audit: type=1400 audit(1785757464.706:2175): avc: denied { create } for pid=15645 comm="syz.2.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 410.995010][ T28] audit: type=1400 audit(1785757464.746:2176): avc: denied { bind } for pid=15645 comm="syz.2.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.051583][ T28] audit: type=1400 audit(1785757464.746:2177): avc: denied { listen } for pid=15645 comm="syz.2.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.110097][ T28] audit: type=1400 audit(1785757464.746:2178): avc: denied { write } for pid=15645 comm="syz.2.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.130208][ T28] audit: type=1400 audit(1785757464.746:2179): avc: denied { read } for pid=15645 comm="syz.2.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.664592][ T28] audit: type=1400 audit(1785757465.436:2180): avc: denied { map } for pid=15688 comm="syz.3.3018" path="socket:[44960]" dev="sockfs" ino=44960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 411.785525][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3015'. [ 411.858669][T15685] loop9: detected capacity change from 0 to 1024 [ 411.931846][T15685] EXT4-fs: Ignoring removed bh option [ 412.022983][T15685] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 412.048085][T15685] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.214363][T15714] vlan0: entered promiscuous mode [ 412.225797][T15714] team0: Port device vlan0 added [ 412.337753][T10252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 413.067852][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 413.192271][T15753] loop2: detected capacity change from 0 to 164 [ 413.261950][T15762] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3037'. [ 413.923206][T15776] loop2: detected capacity change from 0 to 1024 [ 413.986854][T15776] EXT4-fs: Ignoring removed bh option [ 414.100241][ T7734] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.100888][T15776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 414.127739][T15776] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.179140][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 414.179155][ T28] audit: type=1400 audit(1785757467.946:2184): avc: denied { write } for pid=15774 comm="syz.2.3040" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.215130][ T28] audit: type=1400 audit(1785757467.946:2185): avc: denied { write } for pid=15774 comm="syz.2.3040" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.240817][ T7734] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.313347][ T7734] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.333761][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 414.428094][ T7734] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.668587][T15792] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.683689][T15792] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.698898][T15792] bridge_slave_0: entered allmulticast mode [ 414.713963][T15792] bridge_slave_0: entered promiscuous mode [ 414.733654][T15792] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.771885][T15792] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.779166][T15792] bridge_slave_1: entered allmulticast mode [ 414.786160][T15792] bridge_slave_1: entered promiscuous mode [ 414.818775][T15792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.836704][T15792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.872063][T15792] team0: Port device team_slave_0 added [ 414.878879][T15792] team0: Port device team_slave_1 added [ 414.903410][T15792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.910674][T15792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.936749][T15792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.949744][T15792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.956775][T15792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.982790][T15792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.997043][ T7734] bridge_slave_1: left allmulticast mode [ 415.008589][ T7734] bridge_slave_1: left promiscuous mode [ 415.020246][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.040761][ T7734] bridge_slave_0: left allmulticast mode [ 415.046578][ T7734] bridge_slave_0: left promiscuous mode [ 415.054747][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.085849][ T28] audit: type=1400 audit(1785757468.856:2186): avc: denied { read } for pid=16021 comm="syz.0.3061" name="p_chmask" dev="configfs" ino=45735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 415.143443][ T7734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.153537][ T7734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.164582][ T7734] bond0 (unregistering): Released all slaves [ 415.208413][T16020] loop9: detected capacity change from 0 to 1024 [ 415.209095][T15792] hsr_slave_0: entered promiscuous mode [ 415.221173][T16020] EXT4-fs: Ignoring removed bh option [ 415.233403][T15869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.238187][T15792] hsr_slave_1: entered promiscuous mode [ 415.249744][T15792] debugfs: 'hsr0' already exists in 'hsr' [ 415.256875][T15792] Cannot create hsr debugfs directory [ 415.273821][T16020] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.285945][ T7734] hsr_slave_0: left promiscuous mode [ 415.301121][ T7734] hsr_slave_1: left promiscuous mode [ 415.322884][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.331098][T16020] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.352947][ T28] audit: type=1400 audit(1785757469.116:2187): avc: denied { write } for pid=16062 comm="syz.2.3064" name="functions" dev="configfs" ino=26690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 415.377704][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.405681][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.435483][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.449327][T16069] loop2: detected capacity change from 0 to 512 [ 415.457437][ T28] audit: type=1400 audit(1785757469.226:2188): avc: denied { write } for pid=16019 comm="syz.9.3060" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.488410][ T7734] veth1_macvtap: left promiscuous mode [ 415.498493][ T7734] veth0_macvtap: left promiscuous mode [ 415.514826][ T7734] veth1_vlan: left promiscuous mode [ 415.517699][T16069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.537436][ T7734] veth0_vlan: left promiscuous mode [ 415.542944][ T28] audit: type=1400 audit(1785757469.226:2189): avc: denied { write } for pid=16019 comm="syz.9.3060" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.550313][T16069] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.589064][ T28] audit: type=1400 audit(1785757469.356:2190): avc: denied { write } for pid=16067 comm="syz.2.3067" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.632758][ T28] audit: type=1400 audit(1785757469.356:2191): avc: denied { write } for pid=16067 comm="syz.2.3067" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.656246][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.729938][ T7734] team0 (unregistering): Port device team_slave_1 removed [ 415.754695][ T7734] team0 (unregistering): Port device team_slave_0 removed [ 415.925319][T10252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 415.984003][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3071'. [ 416.079524][ T28] audit: type=1400 audit(1785757469.846:2192): avc: denied { ioctl } for pid=16125 comm="syz.3.3070" path="socket:[45790]" dev="sockfs" ino=45790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 416.138914][ T28] audit: type=1400 audit(1785757469.886:2193): avc: denied { write } for pid=16103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.188064][T16083] loop2: detected capacity change from 0 to 8192 [ 416.222811][T16083] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.361721][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 416.432239][T16191] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3073'. [ 416.566701][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'. [ 416.659528][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 416.724131][T16263] ip6t_srh: unknown srh invflags 4000 [ 416.754095][T16265] syzkaller0: entered promiscuous mode [ 416.759630][T16265] syzkaller0: entered allmulticast mode [ 416.953869][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 417.006752][T15792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.016803][T15792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.028238][T15792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.050986][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 417.052244][T15792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.089541][T15792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.101950][T15792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.115691][T15792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.143359][T15792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.189251][T16325] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3091'. [ 417.280832][T15792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.314910][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 417.333486][T15792] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.366108][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.373309][ T7734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.415614][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.422772][ T6470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.697036][T15792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.761675][T16400] syzkaller0: entered promiscuous mode [ 417.773039][T16400] syzkaller0: entered allmulticast mode [ 417.855594][T15792] veth0_vlan: entered promiscuous mode [ 417.875514][T15792] veth1_vlan: entered promiscuous mode [ 417.927123][T15792] veth0_macvtap: entered promiscuous mode [ 417.949668][T15792] veth1_macvtap: entered promiscuous mode [ 417.983565][T15792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.009526][T15792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.065822][ T7736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.090486][ T7736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.140113][ T6460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.149731][ T6460] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.357712][T16427] loop2: detected capacity change from 0 to 1764 [ 418.598105][T16465] loop9: detected capacity change from 0 to 512 [ 418.647009][T16465] EXT4-fs: Ignoring removed i_version option [ 418.656991][T16465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.688684][T16465] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.3106: invalid block [ 418.703015][T16465] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.704926][T16465] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3106: invalid indirect mapped block 4294967295 (level 1) [ 418.714399][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 418.714579][ C0] EXT4-fs (loop9): initial error at time 1785757472: ext4_get_branch:178: inode 11: block 4294967295 [ 418.714750][ C0] EXT4-fs (loop9): last error at time 1785757472: ext4_get_branch:178: inode 11: block 4294967295 [ 418.763805][T16465] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.769742][T16465] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3106: invalid indirect mapped block 4294967295 (level 1) [ 418.801980][T16465] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.830582][T16465] EXT4-fs (loop9): 2 truncates cleaned up [ 418.875610][T16465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.184281][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 419.184299][ T28] audit: type=1400 audit(1785757472.956:2213): avc: denied { write } for pid=16523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.239942][T16535] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3111'. [ 419.259642][ T28] audit: type=1400 audit(1785757473.026:2214): avc: denied { write } for pid=16536 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.375977][T10252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.427809][ T28] audit: type=1400 audit(1785757473.196:2215): avc: denied { write } for pid=16539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.489515][ T28] audit: type=1400 audit(1785757473.256:2216): avc: denied { write } for pid=16553 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.655997][ T28] audit: type=1400 audit(1785757473.416:2217): avc: denied { write } for pid=16566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.721172][ T28] audit: type=1400 audit(1785757473.476:2218): avc: denied { write } for pid=16585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.773916][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.798275][ T28] audit: type=1400 audit(1785757473.486:2219): avc: denied { mount } for pid=16586 comm="syz.2.3118" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 419.827581][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.851702][ T28] audit: type=1400 audit(1785757473.516:2220): avc: denied { mounton } for pid=16586 comm="syz.2.3118" path="/219/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 419.918793][ T28] audit: type=1400 audit(1785757473.546:2221): avc: denied { unmount } for pid=10884 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 419.967611][ T28] audit: type=1400 audit(1785757473.686:2222): avc: denied { bind } for pid=16609 comm="syz.0.3122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.997261][T16601] loop2: detected capacity change from 0 to 1024 [ 420.013765][T16601] EXT4-fs: Ignoring removed bh option [ 420.046062][T16601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 420.061679][T16601] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.179879][T16643] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 420.487875][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 420.677240][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 420.717911][T16681] program syz.0.3131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.735520][T16688] l2tp_ppp: sess 2/0: no socket in recv [ 420.770246][T16690] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3132'. [ 420.821576][T16695] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3133'. [ 421.257684][T16721] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3138'. [ 421.537012][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 421.707791][T16752] netlink: 'syz.1.3147': attribute type 4 has an invalid length. [ 421.982377][T16774] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3154'. [ 422.142858][T16774] loop2: detected capacity change from 0 to 164 [ 422.197919][T16774] rock: directory entry would overflow storage [ 422.206243][T16774] rock: sig=0x5252, size=5, remaining=3 [ 422.224755][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3152'. [ 422.388018][T16795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3159'. [ 422.606925][T16787] Set syz1 is full, maxelem 65536 reached [ 423.416459][T16831] loop2: detected capacity change from 0 to 8192 [ 423.432617][T16831] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.008102][T16850] gretap1: entered promiscuous mode [ 424.083392][T16854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3176'. [ 424.096288][T16856] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3177'. [ 424.245745][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 424.245765][ T28] audit: type=1400 audit(1785757478.016:2240): avc: denied { map } for pid=16861 comm="syz.2.3178" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 424.307006][ T28] audit: type=1400 audit(1785757478.016:2241): avc: denied { read write } for pid=16861 comm="syz.2.3178" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 424.552559][T16875] loop2: detected capacity change from 0 to 512 [ 424.611550][T16875] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 424.626579][T16875] EXT4-fs (loop2): orphan cleanup on readonly fs [ 424.644350][T16875] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 424.660997][T16875] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 424.682060][T16875] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 424.692803][T16875] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.3180: inode has both inline data and extents flags [ 424.707921][T16875] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 424.710209][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 424.726709][ C0] EXT4-fs (loop2): initial error at time 1785757478: ext4_orphan_get:1399: inode 16 [ 424.737319][ C0] EXT4-fs (loop2): last error at time 1785757478: ext4_orphan_get:1399: inode 16 [ 424.780964][T16875] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3180: couldn't read orphan inode 16 (err -117) [ 424.800347][T16875] loop2: lost filesystem error report for type 5 error -117 [ 424.817181][T16875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.902652][T16885] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3182'. [ 424.949416][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.067955][T16885] loop9: detected capacity change from 0 to 164 [ 425.087364][ T28] audit: type=1400 audit(1785757478.856:2242): avc: denied { append } for pid=16902 comm="syz.2.3187" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 425.141771][T16885] rock: directory entry would overflow storage [ 425.162162][T16885] rock: sig=0x5252, size=5, remaining=3 [ 425.414967][ T28] audit: type=1400 audit(1785757479.186:2243): avc: denied { shutdown } for pid=16919 comm="syz.2.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.502513][T16927] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3195'. [ 425.738959][T16928] loop2: detected capacity change from 0 to 164 [ 425.832508][T16928] rock: directory entry would overflow storage [ 425.845602][T16928] rock: sig=0x5252, size=5, remaining=3 [ 426.363693][ T28] audit: type=1400 audit(1785757480.136:2244): avc: denied { read } for pid=16944 comm="syz.9.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 427.123892][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 427.226860][ T28] audit: type=1400 audit(1785757480.996:2245): avc: denied { listen } for pid=16998 comm="syz.9.3212" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 427.774864][T17035] loop9: detected capacity change from 0 to 2048 [ 427.867101][T17035] loop9: p1 p2 p3 [ 428.054933][ T2980] loop9: p1 p2 p3 [ 428.092876][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 428.787406][T17130] netlink: 'syz.3.3240': attribute type 1 has an invalid length. [ 428.816955][T17130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.852948][T17130] bond1: (slave geneve2): making interface the new active one [ 428.862758][T17130] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 428.993631][ T28] audit: type=1400 audit(1785757482.766:2246): avc: denied { bind } for pid=17183 comm="syz.2.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.025089][T17186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.037175][T17186] team0: Failed to send port change of device bond1 via netlink (err -105) [ 429.049322][T17186] team0: Failed to send options change via netlink (err -105) [ 429.057661][T17186] team0: Port device bond1 added [ 429.059302][ T28] audit: type=1400 audit(1785757482.786:2247): avc: denied { setopt } for pid=17183 comm="syz.2.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.147444][T17227] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3246'. [ 429.192557][T17230] loop2: detected capacity change from 0 to 4096 [ 429.212201][T17230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.231962][ T28] audit: type=1400 audit(1785757482.996:2248): avc: denied { write } for pid=17229 comm="syz.2.3247" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.256144][ T28] audit: type=1400 audit(1785757483.006:2249): avc: denied { write } for pid=17229 comm="syz.2.3247" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.285598][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 429.347376][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.395536][T17243] loop2: detected capacity change from 0 to 128 [ 429.416433][T17243] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 429.437014][T17243] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 429.526237][T10884] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.533948][ T28] audit: type=1400 audit(1785757483.306:2250): avc: denied { mount } for pid=17248 comm="syz.1.3250" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 429.616387][ T28] audit: type=1400 audit(1785757483.386:2251): avc: denied { unmount } for pid=15792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 429.654299][ T7734] Bluetooth: hci0: Frame reassembly failed (-84) [ 429.663891][T17259] Bluetooth: hci0: Frame reassembly failed (-90) [ 430.261438][ T28] audit: type=1400 audit(1785757484.036:2252): avc: denied { write } for pid=17293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.321959][ T28] audit: type=1400 audit(1785757484.076:2253): avc: denied { write } for pid=17316 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.563263][T17312] loop2: detected capacity change from 0 to 1024 [ 430.599976][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 430.601436][T17312] EXT4-fs: Ignoring removed bh option [ 430.668184][T17312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 430.681734][T17312] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.696584][ T28] audit: type=1400 audit(1785757484.466:2254): avc: denied { write } for pid=17304 comm="syz.2.3266" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.719434][ T28] audit: type=1400 audit(1785757484.466:2255): avc: denied { write } for pid=17304 comm="syz.2.3266" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.930212][T17340] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3271'. [ 430.978191][ T28] audit: type=1400 audit(1785757484.746:2256): avc: denied { write } for pid=17335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.032555][T17350] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3272'. [ 431.043583][ T28] audit: type=1400 audit(1785757484.806:2257): avc: denied { write } for pid=17348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.076604][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.080097][T17350] syzkaller1: entered promiscuous mode [ 431.095121][T17350] syzkaller1: entered allmulticast mode [ 431.135850][T17365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3273'. [ 431.151319][T17365] loop2: detected capacity change from 0 to 164 [ 431.168780][T17365] rock: directory entry would overflow storage [ 431.181358][T17365] rock: sig=0x5252, size=5, remaining=3 [ 431.182534][T17371] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3274'. [ 431.238173][ T28] audit: type=1400 audit(1785757485.006:2258): avc: denied { write } for pid=17357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.322619][T17385] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 431.680095][ T3864] Bluetooth: hci0: command 0x1003 tx timeout [ 431.680483][ T8782] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 432.074887][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 432.570658][T17416] __nla_validate_parse: 1 callbacks suppressed [ 432.570714][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 433.051988][T17456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3292'. [ 435.039629][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 435.039695][ T28] audit: type=1400 audit(1785757488.806:2263): avc: denied { setopt } for pid=17543 comm="syz.1.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 435.071109][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 435.143173][T17542] loop9: detected capacity change from 0 to 1024 [ 435.160055][T17542] EXT4-fs: Ignoring removed bh option [ 435.223506][T17542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 435.246205][T17542] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.290308][ T28] audit: type=1400 audit(1785757489.056:2264): avc: denied { write } for pid=17538 comm="syz.9.3312" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.323482][ T28] audit: type=1400 audit(1785757489.066:2265): avc: denied { write } for pid=17538 comm="syz.9.3312" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.488371][T17577] netlink: 'syz.3.3320': attribute type 1 has an invalid length. [ 435.506093][T17577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.527847][T17577] bond2: (slave geneve3): making interface the new active one [ 435.537566][T17577] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 435.539707][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811c11e200: rx timeout, send abort [ 435.555880][ T28] audit: type=1400 audit(1785757489.326:2266): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 435.593001][T10252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 435.601032][ T28] audit: type=1400 audit(1785757489.326:2267): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.634670][ T28] audit: type=1400 audit(1785757489.326:2268): avc: denied { append } for pid=2962 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 435.677583][ T28] audit: type=1400 audit(1785757489.326:2269): avc: denied { open } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 435.706975][T17619] loop9: detected capacity change from 0 to 512 [ 435.723365][ T28] audit: type=1400 audit(1785757489.326:2270): avc: denied { getattr } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 435.748188][T17619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.805480][T17619] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.835202][T10252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.054546][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811c11e200: abort rx timeout. Force session deactivation [ 436.219834][T17671] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3337'. [ 436.437575][T17691] loop2: detected capacity change from 0 to 128 [ 436.444821][T17691] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 436.671104][ T28] audit: type=1400 audit(1785757490.446:2271): avc: denied { bind } for pid=17703 comm="syz.3.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 436.775700][T17684] loop9: detected capacity change from 0 to 1024 [ 436.868619][T17684] EXT4-fs: Ignoring removed bh option [ 436.888257][T17717] tipc: Enabling of bearer rejected, failed to enable media [ 436.992394][T17684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 437.007291][T17684] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.040836][ T28] audit: type=1400 audit(1785757490.816:2272): avc: denied { write } for pid=17674 comm="syz.9.3338" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.178567][T10252] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 437.962710][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3362'. [ 438.234195][T17781] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3366'. [ 439.036959][T17817] loop2: detected capacity change from 0 to 1024 [ 439.054172][T17817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.599892][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.651229][T17861] tipc: Enabled bearer , priority 0 [ 439.768165][T17861] syzkaller0: entered promiscuous mode [ 439.792652][T17861] syzkaller0: entered allmulticast mode [ 439.806413][T17861] tipc: Resetting bearer [ 439.822217][T17859] tipc: Resetting bearer [ 439.852185][T17859] tipc: Disabling bearer [ 441.164413][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 441.164441][ T28] audit: type=1400 audit(1785757494.936:2275): avc: denied { watch watch_reads } for pid=17913 comm="syz.3.3401" path="/297" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.248304][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3402'. [ 441.407184][T17939] tipc: Enabling of bearer rejected, failed to enable media [ 441.700546][T17923] loop2: detected capacity change from 0 to 2048 [ 441.746394][T17923] loop2: p1 p2 p3 [ 441.882159][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.889363][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.896755][T17949] bridge_slave_0: entered allmulticast mode [ 441.903328][T17949] bridge_slave_0: entered promiscuous mode [ 441.911065][T17949] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.918170][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.925801][T17949] bridge_slave_1: entered allmulticast mode [ 441.932476][T17949] bridge_slave_1: entered promiscuous mode [ 441.953701][T17949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.964170][T17949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.987820][T17949] team0: Port device team_slave_0 added [ 441.994716][T17949] team0: Port device team_slave_1 added [ 442.017117][T17949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.024169][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.050729][T17949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.062057][T17949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.069108][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.095411][T17949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.124345][T17949] hsr_slave_0: entered promiscuous mode [ 442.130530][T17949] hsr_slave_1: entered promiscuous mode [ 442.136459][T17949] debugfs: 'hsr0' already exists in 'hsr' [ 442.142280][T17949] Cannot create hsr debugfs directory [ 442.318339][ T28] audit: type=1400 audit(1785757496.086:2276): avc: denied { write } for pid=18222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.371014][ T28] audit: type=1400 audit(1785757496.126:2277): avc: denied { write } for pid=18242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.479773][ T28] audit: type=1400 audit(1785757496.246:2278): avc: denied { write } for pid=18247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.516431][T17949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.543349][ T28] audit: type=1400 audit(1785757496.316:2279): avc: denied { write } for pid=18281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.551075][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.602595][T17949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.633664][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.660835][T17949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.680568][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.706186][T17949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.711140][ T28] audit: type=1400 audit(1785757496.476:2280): avc: denied { write } for pid=18286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.745265][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.797562][ T28] audit: type=1400 audit(1785757496.566:2281): avc: denied { write } for pid=18299 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.895335][T17949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.935988][T17949] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.964806][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.971962][ T7736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.996677][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.003939][ T6459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.019931][ T28] audit: type=1400 audit(1785757496.786:2282): avc: denied { write } for pid=18313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.111794][ T28] audit: type=1400 audit(1785757496.866:2283): avc: denied { write } for pid=18330 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.292163][T18344] tipc: Enabling of bearer rejected, failed to enable media [ 443.420630][T17949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.449739][ T28] audit: type=1400 audit(1785757497.216:2284): avc: denied { write } for pid=18336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.585139][T18373] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3431'. [ 443.639363][T18373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.813823][T17949] veth0_vlan: entered promiscuous mode [ 443.828380][T17949] veth1_vlan: entered promiscuous mode [ 443.837036][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'. [ 443.910173][T17949] veth0_macvtap: entered promiscuous mode [ 443.918066][T17949] veth1_macvtap: entered promiscuous mode [ 443.933357][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'. [ 443.951973][T17949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.964383][T17949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.030147][ T6453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.043443][ T6453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.080101][ T7734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.100208][ T7734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.191932][T18436] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3437'. [ 444.279598][T18441] batman_adv: batadv0: Adding interface: dummy0 [ 444.304736][T18441] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.309728][T18448] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3439'. [ 444.364701][T18441] batman_adv: batadv0: Interface activated: dummy0 [ 444.386888][T18453] batadv0: mtu less than device minimum [ 444.397213][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.408139][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.419177][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.430127][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.441123][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.448873][T18457] loop2: detected capacity change from 0 to 164 [ 444.458412][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.469360][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.480316][T18453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.514049][T18457] rock: directory entry would overflow storage [ 444.537655][T18457] rock: sig=0x5252, size=5, remaining=3 [ 444.764049][ T6453] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 445.506672][T18470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.765947][T18611] loop4: detected capacity change from 0 to 2048 [ 447.534001][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3472'. [ 447.556303][T18611] loop4: p1 p2 p3 [ 447.618187][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 447.618205][ T28] audit: type=1400 audit(1785757501.386:2304): avc: denied { create } for pid=18690 comm="syz.3.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.661572][ T28] audit: type=1400 audit(1785757501.416:2305): avc: denied { connect } for pid=18690 comm="syz.3.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.711320][ T28] audit: type=1400 audit(1785757501.416:2306): avc: denied { write } for pid=18690 comm="syz.3.3473" path="socket:[50738]" dev="sockfs" ino=50738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.796785][ T28] audit: type=1400 audit(1785757501.416:2307): avc: denied { accept } for pid=18690 comm="syz.3.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.891587][T18719] -1O2~: renamed from syzkaller0 [ 448.364754][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3488'. [ 448.389666][ T28] audit: type=1400 audit(1785757502.156:2308): avc: denied { create } for pid=18759 comm="syz.3.3486" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.458046][ T28] audit: type=1400 audit(1785757502.166:2309): avc: denied { write } for pid=18759 comm="syz.3.3486" name="file0" dev="tmpfs" ino=1714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.525735][ T28] audit: type=1400 audit(1785757502.166:2310): avc: denied { open } for pid=18759 comm="syz.3.3486" path="/322/file0" dev="tmpfs" ino=1714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.588850][ T28] audit: type=1400 audit(1785757502.166:2311): avc: denied { ioctl } for pid=18759 comm="syz.3.3486" path="/322/file0" dev="tmpfs" ino=1714 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.634649][ T28] audit: type=1400 audit(1785757502.196:2312): avc: denied { unlink } for pid=12405 comm="syz-executor" name="file0" dev="tmpfs" ino=1714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.690054][ T28] audit: type=1326 audit(1785757502.256:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18777 comm="syz.3.3489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe050e2e019 code=0x0 [ 449.401929][T18809] loop2: detected capacity change from 0 to 164 [ 449.435063][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.435417][T18809] iso9660: Unknown parameter 'q}!l'' [ 449.442336][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.476372][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'. [ 449.607030][T18813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.625677][T18813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.730929][ T6459] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.740040][ T6459] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.767606][ T6459] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.830112][ T6459] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.576770][T18912] team0: Port device syz_tun added [ 451.080457][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'. [ 452.199514][T18986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3535'. [ 452.383349][T19000] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.3549'. [ 452.415705][T19000] netlink: 'syz.3.3549': attribute type 1 has an invalid length. [ 452.444086][T19000] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3549'. [ 452.507670][T19007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3541'. [ 452.554775][T19011] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 452.624760][T19011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.684156][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 452.684172][ T28] audit: type=1400 audit(1785757506.456:2317): avc: denied { create } for pid=19052 comm="syz.0.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 452.714942][T19015] bond3: (slave gretap2): making interface the new active one [ 452.723524][T19015] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 452.732282][ T28] audit: type=1400 audit(1785757506.486:2318): avc: denied { write } for pid=19052 comm="syz.0.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 452.748497][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3543'. [ 452.777191][T19011] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 452.794435][T19048] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 452.817539][T19011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3542'. [ 452.845951][T19011] dummy0: entered promiscuous mode [ 452.846436][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3537'. [ 452.926994][T19061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.936084][T19061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.219416][T19011] bond3: (slave dummy0): Releasing active interface [ 453.574158][ T28] audit: type=1400 audit(1785757507.346:2319): avc: denied { create } for pid=19086 comm="syz.0.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 453.594063][ T28] audit: type=1400 audit(1785757507.346:2320): avc: denied { bind } for pid=19086 comm="syz.0.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 453.614890][ T28] audit: type=1400 audit(1785757507.346:2321): avc: denied { connect } for pid=19086 comm="syz.0.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 453.630888][T19083] loop2: detected capacity change from 0 to 1024 [ 453.669109][T19083] EXT4-fs: Ignoring removed bh option [ 453.685716][T19083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 453.698545][T19083] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.712893][ T28] audit: type=1400 audit(1785757507.486:2322): avc: denied { write } for pid=19080 comm="syz.2.3553" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.734756][ T28] audit: type=1400 audit(1785757507.486:2323): avc: denied { write } for pid=19080 comm="syz.2.3553" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.767095][T19100] qrtr: Invalid version 0 [ 453.774613][ T28] audit: type=1400 audit(1785757507.546:2324): avc: denied { create } for pid=19099 comm="syz.0.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 453.820923][ T28] audit: type=1400 audit(1785757507.596:2325): avc: denied { ioctl } for pid=19099 comm="syz.0.3557" path="socket:[51397]" dev="sockfs" ino=51397 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 453.921828][ T28] audit: type=1400 audit(1785757507.696:2326): avc: denied { write } for pid=19102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.324609][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 454.336836][T19144] loop4: detected capacity change from 0 to 1024 [ 454.350613][T19144] EXT4-fs: Ignoring removed bh option [ 454.406658][T19144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 454.427211][T19144] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.575131][T19127] net_ratelimit: 13 callbacks suppressed [ 454.575146][T19127] Set syz0 is full, maxelem 65536 reached [ 454.957500][T17949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 455.013510][T19199] loop2: detected capacity change from 0 to 1024 [ 455.036135][T19199] EXT4-fs: Ignoring removed bh option [ 455.157969][T19199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 455.202970][T19199] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.685115][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 456.237032][T19334] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3592'. [ 456.648921][T19392] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 456.665787][T19392] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.707166][T19392] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 456.739478][T19392] macvlan2: entered promiscuous mode [ 456.755491][T19392] macvlan2: entered allmulticast mode [ 456.765335][T19392] bond4: entered promiscuous mode [ 456.776333][T19392] veth0_to_bond: entered promiscuous mode [ 456.782556][T19392] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 456.793450][T19392] bond4: left promiscuous mode [ 456.801272][T19392] veth0_to_bond: left promiscuous mode [ 456.827432][T19432] 0: reclassify loop, rule prio 0, protocol 03 [ 457.142681][T19377] Set syz0 is full, maxelem 65536 reached [ 457.197152][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'. [ 457.324990][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.332288][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.353469][T19468] batman_adv: batadv0: Interface deactivated: dummy0 [ 457.364341][T19471] file system registered [ 457.372550][T19471] read descriptors [ 457.387040][T10884] ffs_data_put(): freeing [ 457.404509][T19468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.414395][T19468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.460101][ T6442] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.469250][ T6442] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.478886][ T6442] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.488741][ T6442] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.574430][T19488] loop4: detected capacity change from 0 to 512 [ 457.589507][T19488] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3618: iget: bad i_size value: 38620345925642 [ 457.606316][T19488] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 457.606579][T19488] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3618: couldn't read orphan inode 15 (err -117) [ 457.615794][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 457.615832][ C1] EXT4-fs (loop4): initial error at time 1785757511: ext4_orphan_get:1399: inode 15 [ 457.615870][ C1] EXT4-fs (loop4): last error at time 1785757511: ext4_orphan_get:1399: inode 15 [ 457.653899][T19488] loop4: lost filesystem error report for type 5 error -117 [ 457.656288][T19488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.726019][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 457.726039][ T28] audit: type=1400 audit(1785757511.496:2335): avc: denied { write } for pid=19486 comm="syz.4.3618" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.874338][T19488] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3618: bg 0: block 5: invalid block bitmap [ 457.900217][T19488] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1132 with error 28 [ 457.923247][T19488] EXT4-fs (loop4): This should not happen!! Data will be lost [ 457.923247][T19488] [ 457.945350][T19488] EXT4-fs (loop4): Total free blocks count 0 [ 457.951859][T19488] EXT4-fs (loop4): Free/Dirty block details [ 457.960156][T19488] EXT4-fs (loop4): free_blocks=0 [ 457.969482][T19488] EXT4-fs (loop4): dirty_blocks=1132 [ 457.980240][T19488] EXT4-fs (loop4): Block reservation details [ 457.990133][T19488] EXT4-fs (loop4): i_reserved_data_blocks=1132 [ 458.025757][T19488] EXT4-fs (loop4): shut down requested (0) [ 460.612255][T19562] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3635'. [ 460.637975][ T28] audit: type=1400 audit(1785757514.406:2336): avc: denied { accept } for pid=19558 comm="syz.4.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 460.894510][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 460.929669][ T28] audit: type=1400 audit(1785757514.696:2337): avc: denied { listen } for pid=19586 comm="syz.0.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.045859][T19603] loop4: detected capacity change from 0 to 2048 [ 461.082400][T19603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.115861][ T28] audit: type=1400 audit(1785757514.886:2338): avc: denied { write } for pid=19602 comm="syz.4.3644" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.199856][T19603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 461.216633][T19603] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 614 with error 28 [ 461.229428][T19603] EXT4-fs (loop4): This should not happen!! Data will be lost [ 461.229428][T19603] [ 461.239661][T19603] EXT4-fs (loop4): Total free blocks count 0 [ 461.245833][T19603] EXT4-fs (loop4): Free/Dirty block details [ 461.253046][T19603] EXT4-fs (loop4): free_blocks=2415919104 [ 461.258827][T19603] EXT4-fs (loop4): dirty_blocks=624 [ 461.264376][T19603] EXT4-fs (loop4): Block reservation details [ 461.286082][T19603] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 461.336253][ T6451] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 461.350590][T17949] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 461.904277][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3649'. [ 462.194391][T19686] syzkaller0: entered promiscuous mode [ 462.212997][T19686] syzkaller0: entered allmulticast mode [ 462.232994][T19694] bridge0: port 3(syz_tun) entered blocking state [ 462.247868][T19694] bridge0: port 3(syz_tun) entered disabled state [ 462.261008][T19694] syz_tun: entered allmulticast mode [ 462.267312][T19694] syz_tun: entered promiscuous mode [ 462.273607][T19694] bridge0: port 3(syz_tun) entered blocking state [ 462.280129][T19694] bridge0: port 3(syz_tun) entered forwarding state [ 462.353515][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 462.411723][T19712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3660'. [ 462.520092][T19712] loop4: detected capacity change from 0 to 164 [ 462.594445][T19712] rock: directory entry would overflow storage [ 462.612502][T19712] rock: sig=0x5252, size=5, remaining=3 [ 463.396985][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 463.478205][T19745] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3668'. [ 463.654405][T19755] 0: reclassify loop, rule prio 0, protocol 03 [ 463.793123][T19764] 0: reclassify loop, rule prio 0, protocol 03 [ 463.963667][T19768] infiniband syz1: set down [ 463.981111][T19768] infiniband syz1: added syz_tun [ 464.003246][T19761] loop4: detected capacity change from 0 to 512 [ 464.029052][T19768] RDS/IB: syz1: added [ 464.044298][T19768] smc: adding ib device syz1 with port count 1 [ 464.060426][T19768] smc: ib device syz1 port 1 has no pnetid [ 464.093063][T19761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 464.197354][T19761] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 464.219968][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 464.226470][ C0] EXT4-fs (loop4): initial error at time 1785757517: ext4_mb_generate_buddy:1317 [ 464.235648][ C0] EXT4-fs (loop4): last error at time 1785757517: ext4_mb_generate_buddy:1317 [ 464.262953][T19792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3676'. [ 464.310170][T19761] EXT4-fs (loop4): 1 truncate cleaned up [ 464.370267][T19761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.461287][ T28] audit: type=1400 audit(1785757518.226:2339): avc: denied { write } for pid=19758 comm="syz.4.3671" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.535918][T19794] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3677'. [ 464.551478][T17949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.901916][T19816] batadv_slave_1: entered promiscuous mode [ 464.923183][T19819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'. [ 465.169556][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'. [ 465.189417][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'. [ 465.209910][T19846] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 465.630025][T19870] netlink: 'syz.1.3697': attribute type 1 has an invalid length. [ 465.654032][T19870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.684104][T19870] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 466.017571][T19920] SELinux: ebitmap: truncated map [ 466.023667][T19920] SELinux: invalid class [ 466.111586][T19920] SELinux: failed to load policy [ 466.225578][T19952] tipc: Enabling of bearer rejected, failed to enable media [ 466.321309][T19964] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 467.660527][T20016] __nla_validate_parse: 2 callbacks suppressed [ 467.660545][T20016] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3723'. [ 467.790316][T19993] loop2: detected capacity change from 0 to 1764 [ 467.832565][T19993] isofs_fill_super: get root inode failed [ 468.018296][T20034] syzkaller0: entered promiscuous mode [ 468.035725][T20034] syzkaller0: entered allmulticast mode [ 468.054725][T20034] tipc: Enabled bearer , priority 0 [ 468.077970][T20033] tipc: Resetting bearer [ 468.105775][ T28] audit: type=1400 audit(1785757521.866:2340): avc: denied { read } for pid=20038 comm="syz.3.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 468.132649][T20033] tipc: Disabling bearer [ 468.165106][T20039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=20039 comm=syz.3.3728 [ 468.188157][T20039] bridge0: port 1(team0) entered blocking state [ 468.196786][T20039] bridge0: port 1(team0) entered disabled state [ 468.217391][T20039] team0: entered allmulticast mode [ 468.224909][T20039] team_slave_0: entered allmulticast mode [ 468.227716][T20044] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3729'. [ 468.232163][T20039] team_slave_1: entered allmulticast mode [ 468.249860][T20039] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 468.261206][T20039] vlan0: entered allmulticast mode [ 468.266777][T20039] veth0_vlan: entered allmulticast mode [ 468.274616][T20039] syz_tun: entered allmulticast mode [ 468.447223][T20039] team0: entered promiscuous mode [ 468.453404][T20039] team_slave_0: entered promiscuous mode [ 468.462117][T20039] team_slave_1: entered promiscuous mode [ 468.474370][T20039] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 468.477923][T20048] loop2: detected capacity change from 0 to 164 [ 468.489329][T20039] syz_tun: entered promiscuous mode [ 468.493480][T20039] bridge0: port 1(team0) entered blocking state [ 468.511645][T20039] bridge0: port 1(team0) entered forwarding state [ 468.637108][T20055] bridge0: port 3(syz_tun) entered blocking state [ 468.656037][T20048] rock: directory entry would overflow storage [ 468.672119][T20048] rock: sig=0x5252, size=5, remaining=3 [ 468.679335][T20055] bridge0: port 3(syz_tun) entered disabled state [ 468.687763][T20055] syz_tun: entered allmulticast mode [ 468.695046][T20055] syz_tun: entered promiscuous mode [ 468.924004][ T28] audit: type=1400 audit(1785757522.696:2341): avc: denied { name_connect } for pid=20082 comm="syz.1.3743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 468.964325][ T28] audit: type=1400 audit(1785757522.716:2342): avc: denied { accept } for pid=20082 comm="syz.1.3743" lport=45965 faddr=::ffff:172.30.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.002287][T20089] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3745'. [ 469.623333][ T28] audit: type=1400 audit(1785757523.366:2343): avc: denied { write } for pid=20119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.651090][ T28] audit: type=1400 audit(1785757523.386:2344): avc: denied { write } for pid=20132 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.688570][ T28] audit: type=1400 audit(1785757524.456:2345): avc: denied { write } for pid=20139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.722178][ T28] audit: type=1400 audit(1785757524.496:2346): avc: denied { bind } for pid=20151 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 470.752989][ T28] audit: type=1400 audit(1785757524.496:2347): avc: denied { listen } for pid=20151 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 470.804291][ T28] audit: type=1400 audit(1785757524.576:2348): avc: denied { write } for pid=20162 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.819999][T20159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 470.913269][T20181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3758'. [ 470.924818][T20175] netlink: 'syz.1.3757': attribute type 12 has an invalid length. [ 470.996609][T20189] xt_hashlimit: size too large, truncated to 1048576 [ 471.099371][T20181] loop2: detected capacity change from 0 to 164 [ 471.228585][T20181] rock: directory entry would overflow storage [ 471.239102][T20181] rock: sig=0x5252, size=5, remaining=3 [ 471.386734][T20213] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3766'. [ 471.636970][T20217] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 471.645233][T20217] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 471.792135][T20228] loop2: detected capacity change from 0 to 128 [ 471.808797][T20228] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 471.996444][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3771'. [ 472.018271][T20235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.027977][T20235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.218344][T20249] netlink: 'syz.3.3777': attribute type 10 has an invalid length. [ 472.230098][ T28] audit: type=1400 audit(1785757525.996:2349): avc: denied { read } for pid=20246 comm="syz.4.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 472.235087][T20249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.262107][T20249] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 472.286204][T20250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.296728][T20250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.317749][T20250] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 472.330160][T20250] bond0 (unregistering): Released all slaves [ 472.653487][ T6453] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.792751][T20297] netlink: 'syz.2.3791': attribute type 1 has an invalid length. [ 472.866962][T20297] bond2: entered promiscuous mode [ 472.893850][T20297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.913258][T20323] macvtap1: entered allmulticast mode [ 472.936852][T20297] bond2: (slave bridge1): making interface the new active one [ 472.944570][T20297] bridge1: entered promiscuous mode [ 472.951805][T20297] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 472.986541][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3796'. [ 473.020508][ T28] audit: type=1400 audit(1785757526.786:2350): avc: denied { map } for pid=20354 comm="syz.2.3797" path="socket:[54353]" dev="sockfs" ino=54353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 473.091342][ T28] audit: type=1400 audit(1785757526.786:2351): avc: denied { read write } for pid=20354 comm="syz.2.3797" path="socket:[54353]" dev="sockfs" ino=54353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 473.167380][T20366] netlink: 'syz.1.3801': attribute type 3 has an invalid length. [ 473.176768][T20366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'. [ 473.187385][T20366] netlink: 'syz.1.3801': attribute type 3 has an invalid length. [ 473.201268][T20366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'. [ 473.213167][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3801'. [ 473.780193][T20408] syzkaller0: entered promiscuous mode [ 473.786106][T20408] syzkaller0: entered allmulticast mode [ 473.896485][T20416] bridge0: port 1(team0) entered disabled state [ 473.905265][T20416] team0: Device bridge0 is already an upper device of the team interface [ 473.934694][T20416] dummy0: left promiscuous mode [ 473.977036][T20416] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 474.032728][T20416] team0: Failed to send port change of device vlan0 via netlink (err -105) [ 474.103236][T20416] gretap1: left promiscuous mode [ 474.368855][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3814'. [ 474.719490][ T28] audit: type=1400 audit(1785757528.486:2352): avc: denied { execute_no_trans } for pid=20428 comm="syz.0.3819" path=2F6D656D66643A2D42D54F34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 474.986851][T20457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20457 comm=syz.1.3826 [ 475.071729][T20461] syzkaller0: entered promiscuous mode [ 475.096556][T20461] syzkaller0: entered allmulticast mode [ 475.128385][ T28] audit: type=1326 audit(1785757528.896:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.155642][ T28] audit: type=1326 audit(1785757528.906:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.201850][ T28] audit: type=1326 audit(1785757528.906:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.239180][ T28] audit: type=1326 audit(1785757528.926:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.281795][ T28] audit: type=1326 audit(1785757528.926:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.341420][ T28] audit: type=1326 audit(1785757528.926:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.343603][T20476] syzkaller0: entered promiscuous mode [ 475.401388][ T28] audit: type=1326 audit(1785757528.926:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.413237][T20476] syzkaller0: entered allmulticast mode [ 475.442455][ T28] audit: type=1326 audit(1785757528.926:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.500547][ T28] audit: type=1326 audit(1785757528.926:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.1.3828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe87ee019 code=0x7ffc0000 [ 475.698262][T20498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3835'. [ 475.797099][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 476.294820][T20515] team0: Failed to send options change via netlink (err -105) [ 476.308642][T20515] team0: Port device bridge0 added [ 476.325890][T20515] batadv_slave_1: left promiscuous mode [ 477.551844][T20580] netlink: 'syz.2.3856': attribute type 1 has an invalid length. [ 477.596873][T20589] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3858'. [ 477.631377][T20591] syz_tun (unregistering): left allmulticast mode [ 477.643057][T20591] syz_tun (unregistering): left promiscuous mode [ 477.649818][T20591] bridge0: port 3(syz_tun) entered disabled state [ 478.026422][T20596] loop2: detected capacity change from 0 to 2048 [ 478.138092][T20596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.213834][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.426441][T20634] syzkaller0: entered promiscuous mode [ 478.433219][T20634] syzkaller0: entered allmulticast mode [ 478.499724][T20643] loop2: detected capacity change from 0 to 1024 [ 478.527013][T20643] EXT4-fs: Ignoring removed bh option [ 478.590216][T20643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 478.617773][T20643] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.824973][T20687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.840193][T20687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.105798][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 479.540684][T20711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3884'. [ 479.557629][T20712] syzkaller0: entered promiscuous mode [ 479.563436][T20712] syzkaller0: entered allmulticast mode [ 480.393729][T20737] syzkaller0: entered promiscuous mode [ 480.429185][T20737] syzkaller0: entered allmulticast mode [ 480.828919][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 482.310475][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 482.838663][T20783] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3901'. [ 482.886029][T20785] syzkaller0: entered promiscuous mode [ 482.899332][T20785] syzkaller0: entered allmulticast mode [ 483.050729][T20797] clocksource: Switched to clocksource kvm-clock [ 483.269187][ T28] kauditd_printk_skb: 291 callbacks suppressed [ 483.269206][ T28] audit: type=1400 audit(1785757537.030:2653): avc: denied { mounton } for pid=20800 comm="syz.0.3906" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 483.328103][T20804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3907'. [ 483.895580][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 484.546299][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 484.667616][T20857] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3921'. [ 484.804819][ T28] audit: type=1400 audit(1785757538.570:2654): avc: denied { firmware_load } for pid=20854 comm="syz.1.3920" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 485.033723][T20863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.046403][T20863] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.059350][T20863] batman_adv: batadv0: Interface activated: dummy0 [ 485.077825][T20863] batadv0: mtu less than device minimum [ 485.085215][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.096294][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.107363][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.118375][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.129227][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.140409][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.151406][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.162312][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.173206][T20863] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.198647][T20863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.282626][T20863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.309779][T20863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.482745][T20863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 485.501494][T20866] loop2: detected capacity change from 0 to 8192 [ 485.508085][T20863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.549681][ T28] audit: type=1400 audit(1785757539.310:2655): avc: denied { ioctl } for pid=20865 comm="syz.2.3923" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 485.580688][T20863] veth1_vlan: left promiscuous mode [ 485.587314][T20863] veth0_vlan: left promiscuous mode [ 485.594997][T20863] veth0_vlan: entered promiscuous mode [ 485.602192][T20863] veth1_vlan: entered promiscuous mode [ 485.611632][T20863] veth1_macvtap: left promiscuous mode [ 485.618438][T20863] veth0_macvtap: left promiscuous mode [ 485.625205][T20863] veth0_macvtap: entered promiscuous mode [ 485.633463][T20863] veth1_macvtap: entered promiscuous mode [ 485.645050][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.653748][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.662624][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.671730][T20863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.682102][T20878] syz_tun: entered allmulticast mode [ 485.690874][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.698008][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.707649][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.714770][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.745217][T20868] : renamed from vlan0 (while UP) [ 485.780467][ T6453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.834080][ T6453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.857756][ T6453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.890104][ T6451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.143707][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3926'. [ 486.279167][T20929] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=20929 comm=syz.4.3932 [ 486.383002][T20892] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 486.450113][T20892] bond0 (unregistering): Released all slaves [ 486.606457][T20940] tipc: Enabling of bearer rejected, failed to enable media [ 486.748482][T20985] loop2: detected capacity change from 0 to 512 [ 486.781629][T20985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 486.815069][T20985] EXT4-fs (loop2): 1 truncate cleaned up [ 486.827022][T20985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.842923][ T28] audit: type=1400 audit(1785757540.610:2656): avc: denied { setattr } for pid=20983 comm="syz.2.3940" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 487.205752][T21026] syzkaller0: entered promiscuous mode [ 487.220103][T21026] syzkaller0: entered allmulticast mode [ 487.347277][ T28] audit: type=1400 audit(1785757541.100:2657): avc: denied { ioctl } for pid=21036 comm="syz.3.3949" path="socket:[54154]" dev="sockfs" ino=54154 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 487.463014][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.494628][T21043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21043 comm=syz.3.3961 [ 487.926408][T21069] veth0_macvtap: left promiscuous mode [ 488.112691][T21067] loop2: detected capacity change from 0 to 512 [ 488.315558][T21095] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3963'. [ 488.342616][ T28] audit: type=1400 audit(1785757542.110:2658): avc: denied { write } for pid=21082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.455700][ T28] audit: type=1400 audit(1785757542.220:2659): avc: denied { write } for pid=21104 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.480195][T21067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.497753][T21067] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.508458][ T28] audit: type=1400 audit(1785757542.270:2660): avc: denied { setopt } for pid=21098 comm="syz.0.3962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 488.572546][ T3019] veth0_macvtap: entered promiscuous mode [ 488.622352][ T28] audit: type=1400 audit(1785757542.350:2661): avc: denied { write } for pid=21066 comm="syz.2.3956" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.672709][T21118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3956'. [ 488.823060][ T28] audit: type=1400 audit(1785757542.590:2662): avc: denied { write } for pid=21119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.873747][T21132] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.3965'. [ 488.879033][ T35] IPVS: starting estimator thread 0... [ 488.890294][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.941883][ T28] audit: type=1400 audit(1785757542.700:2663): avc: denied { write } for pid=21135 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.118602][T21145] loop2: detected capacity change from 0 to 512 [ 489.147347][T21145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.553982][T21134] IPVS: using max 2160 ests per chain, 108000 per kthread [ 489.566430][T21158] tipc: Enabling of bearer rejected, failed to enable media [ 489.932413][T21171] xt_CT: No such helper "netbios-ns" [ 490.285766][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.039848][ T28] audit: type=1400 audit(1785757544.800:2664): avc: denied { append } for pid=21202 comm="syz.0.3982" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.217247][T21212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3983'. [ 491.375568][T21218] all: renamed from lo [ 491.425184][T21229] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3997'. [ 491.448020][T21233] syzkaller0: entered promiscuous mode [ 491.456144][T21233] syzkaller0: entered allmulticast mode [ 492.470844][ T28] audit: type=1400 audit(1785757546.240:2665): avc: denied { setopt } for pid=21271 comm="syz.0.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 492.534985][T21284] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 492.544749][ T28] audit: type=1400 audit(1785757546.300:2666): avc: denied { mac_admin } for pid=21282 comm="syz.1.3999" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 492.569930][T21287] loop2: detected capacity change from 0 to 164 [ 492.634566][T21296] netlink: 'syz.1.3999': attribute type 4 has an invalid length. [ 492.654500][ T28] audit: type=1400 audit(1785757546.340:2667): avc: denied { relabelto } for pid=21282 comm="syz.1.3999" name="179" dev="tmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 492.754960][T21301] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 492.805794][T21277] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 493.715774][T21340] syzkaller0: entered promiscuous mode [ 493.731123][T21340] syzkaller0: entered allmulticast mode [ 493.743943][T21340] net_ratelimit: 57 callbacks suppressed [ 493.743957][T21340] TC_ACT_REPEAT abuse ? [ 493.821399][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4012'. [ 494.022897][T21345] hsr_slave_1 (unregistering): left promiscuous mode [ 494.353309][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 494.353325][ T28] audit: type=1400 audit(1785757548.110:2677): avc: denied { connect } for pid=21370 comm="syz.2.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 494.709460][T21378] all: renamed from lo (while UP) [ 494.755340][T21373] loop2: detected capacity change from 0 to 1024 [ 494.797799][T21373] EXT4-fs: Ignoring removed bh option [ 494.970636][T21373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 494.989374][T21373] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.046529][ T28] audit: type=1400 audit(1785757548.810:2678): avc: denied { write } for pid=21370 comm="syz.2.4017" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 495.079560][ T28] audit: type=1400 audit(1785757548.810:2679): avc: denied { write } for pid=21370 comm="syz.2.4017" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 496.419009][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 496.494426][T21404] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4022'. [ 496.637978][T21404] loop2: detected capacity change from 0 to 164 [ 496.745847][ T28] audit: type=1400 audit(1785757550.440:2680): avc: denied { kexec_image_load } for pid=21420 comm="syz.1.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 497.056608][T21404] rock: directory entry would overflow storage [ 497.162615][T21404] rock: sig=0x5252, size=5, remaining=3 [ 498.086329][T21463] loop2: detected capacity change from 0 to 1024 [ 498.136601][T21463] EXT4-fs: Ignoring removed bh option [ 498.360671][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 498.438159][T21463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 498.454922][T21478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21478 comm=syz.0.4039 [ 498.547065][T21474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4039'. [ 498.559642][T21463] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.774408][T21474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.870169][T21477] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 498.952840][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 499.070850][T21527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21527 comm=syz.3.4043 [ 499.209869][T21516] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.4040'. [ 499.230299][ T28] audit: type=1400 audit(1785757552.980:2681): avc: denied { create } for pid=21536 comm="syz.2.4046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 499.275217][ T28] audit: type=1400 audit(1785757552.990:2682): avc: denied { write } for pid=21536 comm="syz.2.4046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 499.324006][ T28] audit: type=1400 audit(1785757553.000:2683): avc: denied { write } for pid=21536 comm="syz.2.4046" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 499.325599][T21543] loop2: detected capacity change from 0 to 512 [ 499.385934][T21543] EXT4-fs: Ignoring removed orlov option [ 499.419730][T21543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.833174][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.246097][T21533] syz.3.4045 (21533) used greatest stack depth: 9280 bytes left [ 500.450673][T21568] all: renamed from lo (while UP) [ 500.634294][T21580] bridge_slave_0: left allmulticast mode [ 500.642677][T21580] bridge_slave_0: left promiscuous mode [ 500.648583][T21580] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.685783][T21580] bond0: (slave bond_slave_0): Releasing backup interface [ 500.703681][T21578] loop2: detected capacity change from 0 to 128 [ 500.729902][T21578] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 501.786887][T21580] bond0: (slave bond_slave_1): Releasing backup interface [ 501.811519][T21580] team0: Port device team_slave_0 removed [ 501.818167][ T7734] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 501.833422][T21580] team0: Port device team_slave_1 removed [ 501.841993][T21580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.853156][T21580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.865217][T21580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.872889][T21580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.882506][T21580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 502.095065][ T28] audit: type=1400 audit(1785757555.860:2684): avc: denied { write } for pid=21601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.142880][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4058'. [ 502.179417][ T28] audit: type=1400 audit(1785757555.940:2685): avc: denied { write } for pid=21624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.026047][T21653] bond2: left promiscuous mode [ 503.034591][T21653] bridge1: left promiscuous mode [ 503.046920][T21653] bond2: entered allmulticast mode [ 503.058980][T21653] bridge1: entered allmulticast mode [ 503.071240][T21653] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 503.087301][T21653] bridge1: entered promiscuous mode [ 503.110925][T21668] all: renamed from lo (while UP) [ 503.507047][T21680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4074'. [ 504.888670][T21742] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 505.134592][T21748] netlink: 'syz.2.4086': attribute type 6 has an invalid length. [ 505.262127][T21762] vlan2: entered allmulticast mode [ 505.274148][T21762] bond0: entered allmulticast mode [ 505.284004][T21762] bond_slave_0: entered allmulticast mode [ 505.294299][T21762] bond_slave_1: entered allmulticast mode [ 505.354215][T21762] netlink: 'syz.4.4098': attribute type 10 has an invalid length. [ 505.386165][T21762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.396837][T21762] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 505.405474][T21762] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 505.415031][T21767] all: renamed from lo (while UP) [ 505.776091][T21787] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4095'. [ 506.095636][T21790] loop2: detected capacity change from 0 to 164 [ 506.205161][T21790] rock: directory entry would overflow storage [ 506.230220][T21790] rock: sig=0x5252, size=5, remaining=3 [ 506.774372][T21817] loop2: detected capacity change from 0 to 1024 [ 506.840358][T21817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.856799][ T28] audit: type=1400 audit(1785757560.620:2686): avc: denied { write } for pid=21816 comm="syz.2.4105" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.879466][ T28] audit: type=1400 audit(1785757560.620:2687): avc: denied { write } for pid=21816 comm="syz.2.4105" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.902355][ T28] audit: type=1400 audit(1785757560.620:2688): avc: denied { unlink } for pid=21816 comm="syz.2.4105" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 507.010371][T21827] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 507.827956][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.889727][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 507.929870][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 507.981442][T21840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21840 comm=syz.1.4109 [ 508.079035][T21839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.478514][ T28] audit: type=1400 audit(1785757562.230:2689): avc: denied { name_bind } for pid=21881 comm="syz.2.4111" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 508.943837][T21883] loop2: detected capacity change from 0 to 512 [ 508.974508][T21883] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 509.224593][T21883] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 509.359269][T21883] EXT4-fs (loop2): failed to open journal device unknown-block(4,1) -ENXIO [ 509.595653][T21895] netlink: 'syz.4.4112': attribute type 13 has an invalid length. [ 509.666758][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4112'. [ 510.288058][T21912] netlink: 'syz.0.4116': attribute type 1 has an invalid length. [ 511.498976][T21925] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003 [ 511.647193][T21971] syz_tun: left allmulticast mode [ 512.125964][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'. [ 512.509142][T21987] netlink: 'syz.1.4129': attribute type 27 has an invalid length. [ 512.519448][T21989] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4131'. [ 512.532316][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4130'. [ 514.092060][T22009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4136'. [ 516.143454][T22045] batadv_slave_0: Caught tx_queue_len zero misconfig [ 516.831171][T22048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'. [ 517.095351][T22053] nfs: Unknown parameter '' [ 517.122961][T22055] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4143'. [ 517.167371][T22058] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4154'. [ 517.349757][T22067] loop2: detected capacity change from 0 to 128 [ 517.438608][ T3374] IPVS: starting estimator thread 0... [ 517.850472][T22072] IPVS: using max 2208 ests per chain, 110400 per kthread [ 519.485685][ T28] audit: type=1400 audit(1785757573.250:2690): avc: denied { ioctl } for pid=22102 comm="syz.1.4156" path="socket:[57363]" dev="sockfs" ino=57363 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 519.852196][ T28] audit: type=1400 audit(1785757573.310:2691): avc: denied { write } for pid=22102 comm="syz.1.4156" name="midi2.usb0" dev="configfs" ino=43949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 519.933342][T22100] loop2: detected capacity change from 0 to 512 [ 520.997190][T22100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.019709][T22100] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.064311][T22124] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4162'. [ 521.221986][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 521.272002][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.717751][T22153] loop2: detected capacity change from 0 to 128 [ 521.893342][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4172'. [ 521.893788][T22153] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.926871][T22157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4172'. [ 521.927373][T22153] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.219028][ T28] audit: type=1400 audit(1785757575.980:2692): avc: denied { write } for pid=22152 comm="syz.2.4171" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.230239][T10884] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.334848][T22180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 524.855782][T22203] loop2: detected capacity change from 0 to 512 [ 524.917744][ T28] audit: type=1400 audit(1785757578.680:2693): avc: denied { mounton } for pid=22196 comm="syz.2.4184" path="/file0" dev="ramfs" ino=57559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 524.967798][T22203] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 524.997054][T22203] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.4184: invalid block [ 525.011155][T22203] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 525.020602][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 525.039503][ C1] EXT4-fs (loop2): initial error at time 1785757578: ext4_get_branch:178: inode 13: block 1024 [ 525.054082][ C1] EXT4-fs (loop2): last error at time 1785757578: ext4_get_branch:178: inode 13: block 1024 [ 525.073087][T22203] EXT4-fs (loop2): 1 truncate cleaned up [ 525.116849][T22203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.148483][T22173] ================================================================== [ 525.156617][T22173] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 525.164481][T22173] [ 525.166841][T22173] write to 0xffffea0005353798 of 8 bytes by task 22172 on cpu 0: [ 525.174580][T22173] __filemap_remove_folio+0x201/0x2e0 [ 525.180010][T22173] filemap_remove_folio+0x6d/0x1d0 [ 525.185193][T22173] truncate_inode_folio+0x42/0x50 [ 525.190287][T22173] shmem_undo_range+0x27f/0xb60 [ 525.195189][T22173] shmem_evict_inode+0x132/0x520 [ 525.200180][T22173] evict+0x2a5/0x510 [ 525.204105][T22173] iput+0x430/0x5a0 [ 525.207961][T22173] dentry_unlink_inode+0x24a/0x260 [ 525.213130][T22173] dentry_kill+0x184/0x500 [ 525.217583][T22173] finish_dput+0x16/0x1d0 [ 525.221947][T22173] dput+0x48/0x50 [ 525.225622][T22173] __fput+0x43e/0x630 [ 525.229648][T22173] ____fput+0x1c/0x30 [ 525.233671][T22173] task_work_run+0x130/0x1a0 [ 525.238312][T22173] exit_to_user_mode_loop+0x1e4/0x8c0 [ 525.243729][T22173] do_syscall_64+0x23c/0x3c0 [ 525.248447][T22173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.254379][T22173] [ 525.256728][T22173] read to 0xffffea0005353798 of 8 bytes by task 22173 on cpu 1: [ 525.264378][T22173] folio_mapping+0xa1/0xe0 [ 525.268834][T22173] evict_folios+0x2300/0x2d60 [ 525.273560][T22173] try_to_shrink_lruvec+0x74d/0x8b0 [ 525.278796][T22173] shrink_lruvec+0x25e/0x1b60 [ 525.283505][T22173] shrink_node+0x67c/0x1e30 [ 525.288034][T22173] do_try_to_free_pages+0x408/0xc90 [ 525.293268][T22173] try_to_free_mem_cgroup_pages+0x201/0x420 [ 525.299196][T22173] mem_cgroup_resize_max+0x1cd/0x240 [ 525.304508][T22173] mem_cgroup_write+0x1ad/0x250 [ 525.309394][T22173] cgroup_file_write+0x197/0x350 [ 525.314362][T22173] kernfs_fop_write_iter+0x1d2/0x2e0 [ 525.319689][T22173] vfs_write+0x57d/0x990 [ 525.324037][T22173] ksys_write+0xdc/0x1a0 [ 525.328304][T22173] __x64_sys_write+0x40/0x50 [ 525.332916][T22173] x64_sys_call+0x27e1/0x3020 [ 525.337630][T22173] do_syscall_64+0x136/0x3c0 [ 525.342331][T22173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.348246][T22173] [ 525.350595][T22173] value changed: 0xffff888104936540 -> 0x0000000000000000 [ 525.357713][T22173] [ 525.360053][T22173] Reported by Kernel Concurrency Sanitizer on: [ 525.366236][T22173] CPU: 1 UID: 0 PID: 22173 Comm: syz.1.4176 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 525.377210][T22173] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 525.382865][T22173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.393407][T22173] ================================================================== [ 525.459378][T22203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.613703][T22203] netlink: 'syz.2.4184': attribute type 6 has an invalid length.