last executing test programs: 1m11.973784144s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x0, 0x2e, 0x0, 0x1, 0x5}, 0x28) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000540)={0x88, {{0x29, 0x0, 0x43000000, @mcast2, 0x8}}}, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x48) 1m11.664210898s ago: executing program 2 (id=6): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x1, 0x236, &(0x7f0000000300)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000fc000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x20000023896) 1m10.423570106s ago: executing program 2 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x400140) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000ac0)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade13f394da5f9b2ef4af4a460c89b6ec0cff39595477509058ba86c902080000004a32000402160040fa0a0000000000e000e218d1", 0x78, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000023c0)=0x400004, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB], 0x10) bind$inet6(r2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$NFT_BATCH(r1, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000", @ANYBLOB="00aa2e6c"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r6, &(0x7f0000000040)=""/4109, 0x100d) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000001380)={{r5}, "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 55.115392401s ago: executing program 32 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x400140) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000ac0)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade13f394da5f9b2ef4af4a460c89b6ec0cff39595477509058ba86c902080000004a32000402160040fa0a0000000000e000e218d1", 0x78, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000023c0)=0x400004, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB], 0x10) bind$inet6(r2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$NFT_BATCH(r1, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000", @ANYBLOB="00aa2e6c"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r6, &(0x7f0000000040)=""/4109, 0x100d) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000001380)={{r5}, "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.077198677s ago: executing program 4 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$inet(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xa84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r10, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 8.124162441s ago: executing program 4 (id=211): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x24, 0x2, 0x6) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c60128370000000100"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e2, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) 7.197565514s ago: executing program 4 (id=217): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000fa74a39a369acb33fbd607f7e42dfcba6387df2e21aa293288440a53489e83d974da2e3a74315d6315df3345c86d82d8e0a8d682d220d9f8727f1d52794d0eb909137b371e7d387000af8444d29349af2a361a30a4c1432d766383bd90995569f76707e1c764e3c43c6edaed55dd1ffabd77699e0da5066ce2886fcfb380d55f502c58ee520531adc9e8b791fc7bc22535db5f8ea835fae252c0dc4c23126952ac97aea1b7390bf4d7a6849e55f88c18214b626b99299c0533725de293a74cbb874633e163ee0b12b2f4f1b60b42cf646a03c547"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r8, 0x0, 0x0}, 0x10) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x24) 6.832468449s ago: executing program 5 (id=220): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0xf) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xa41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0xe}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$ptp0(0xffffffffffffff9c, 0x0, 0x141001, 0x0) epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48085}, 0x40080c0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5.43836817s ago: executing program 1 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_virtio(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x14400, &(0x7f00000001c0)={'trans=virtio,', {[{@cache_readahead}]}}) 5.346359371s ago: executing program 1 (id=224): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x83501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400c0, 0x190) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x200440c4) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0x400, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000180)={0x101, 0x1, "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"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 4.674962821s ago: executing program 5 (id=225): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 4.647579401s ago: executing program 5 (id=227): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000003b2afb3572c429c87ebcf6f1cf6d50000000002000000030000000f000000000000000000000d000000000000000000000009030000000000"], 0x0, 0x4a, 0x0, 0xa, 0x7}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x19c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x168, 0x2, [@TCA_MATCHALL_ACT={0x164, 0x2, [@m_ife={0x160, 0x1, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xf6, 0x6, 0x4}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0xfffffffffffffd57, 0x5, @val=0x100}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd}, @IFE_META_PRIO={0x8, 0x3, @val=0x8f5f}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3d}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}]}, @TCA_IFE_TYPE={0x0, 0x5, 0x3}]}, {0xa0, 0x6, "a7cefcfe3762aec7f70043d02d9c19e498a3a76a257c4eaa650033792c66221d79ce602b08d3d796cb060f4be9b50532581b0d339d4fe7d3e243e9cdd335af43c7593c5582cae3198ed84e3fdf123639250443a1f91078875c0ce5a2794670641a503121e33bfd052e147224c50a68975d3e14b3c1f1bfb87cef1de99c489e48ebf4753cb026476c232222bfe3b9d8fed9d07d7437c76de4044e8575"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24040094}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r12 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/60, &(0x7f00000002c0)=0x3c) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r14, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008"], 0xd0}}, 0x571f68543cec8180) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) 4.408275524s ago: executing program 1 (id=228): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000fa74a39a369acb33fbd607f7e42dfcba6387df2e21aa293288440a53489e83d974da2e3a74315d6315df3345c86d82d8e0a8d682d220d9f8727f1d52794d0eb909137b371e7d387000af8444d29349af2a361a30a4c1432d766383bd90995569f76707e1c764e3c43c6edaed55dd1ffabd77699e0da5066ce2886fcfb380d55f502c58ee520531adc9e8b791fc7bc22535db5f8ea835fae252c0dc4c23126952ac97aea1b7390bf4d7a6849e55f88c18214b626b99299c0533725de293a74cbb874633e163ee0b12b2f4f1b60b42cf646a03c547"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x24) 4.246701977s ago: executing program 1 (id=229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) 4.206043958s ago: executing program 1 (id=230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180e00000200000000000000fc00dcdf"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000df"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x225, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x4, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x8, 0x0, 0xe89f, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000440)={0x0, 0xfffffffffffffff3, 0x6, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x8, 0x27}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0x7ff, 0x6, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={0x0, "2b8f46d009a28c9dae77f2b8b69f7e4f"}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0, 0x0, 0x0, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000040), 0x0}, 0x20) ftruncate(r5, 0x1000006) sendfile(r5, r5, 0x0, 0x100000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, 0x0, 0xfebc) timerfd_create(0x1, 0x80800) 4.163659528s ago: executing program 4 (id=232): clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xfff0bdc1, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x7fff, 0x4, 0x100000000, 0xff, 0x0, 0xfffffffffffffffc, 0x618f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0xeff, 0x6, 0x679e, 0x0, 0x3, 0x6}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0x0, 0x2}]}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4(r1, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x12, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ec5000/0x4000)=nil, 0x4000, 0x400000e, 0x109132, 0xffffffffffffffff, 0x9a29b000) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, 0x0, 0x20004000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x40040d0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010324bd7002fddbdf251100000052312db38375e16ce722770cbdf3cfcb1dc315b2317fd44612d2e7e4aeb9e9d02afaed347743c9747c908df7e798487cad66da482772689a7c1dc3"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 4.0358334s ago: executing program 0 (id=234): capset(0x0, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) syz_open_dev$sg(0x0, 0x0, 0x40000) timer_create(0x0, 0x0, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'a', ' *:* ', 'rw\x00'}, 0x9) syz_clone3(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) capset(0x0, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280)=0x3, 0x4) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) (async) syz_open_dev$sg(0x0, 0x0, 0x40000) (async) timer_create(0x0, 0x0, 0x0) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r1, &(0x7f0000000080)={'a', ' *:* ', 'rw\x00'}, 0x9) (async) syz_clone3(0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') (async) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async) 3.879484393s ago: executing program 4 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$inet(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xa84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3.812191014s ago: executing program 5 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000140), 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$eJzs3U9rJEUUAPDXk57OhICZswj2YQ9eDJu9ejCLRBBzUubgH9BFs7BsBiGBgVVx2JOfwIMHv4c374IXv4HgwaM3FwmUdPf8zUxmdlcnK+H3u6R49V5V9XQ1Ewhd+fSV/ksRcf/x179Fp5NF6zAO40kW3WjFWBoJAOBGeJJS/Plc3+95a1NrAgA2a+b7v31FyvZi6M1NLwsA2KD3P/jw3bvHx0fvlWUnov/toJdF87Ppv3s/HsRpnMTt2IuL6d8CUmrab79zfBR5WenGrf5w0Ksq+5/8Mkktoq4/iL3oLq8/KBsz9cNBXv/mkWURDw6rhdzpjFY8V1/1H91ZUh+9Il4bl1Tz78de/PpZfBGn8Xk9ynT+b4oo30rf/fXVR1VyVZ8NB73tOm8qbV3nfQEAAAAAAAAAAAAAAAAAAAAA4GbbLye6catfhZrzd3pbF3X//lx/fb5Oq+5v6rOIom5cOh9omOKH8fk6t8uyTFmTPznfZyePl/PIX9iFAwAAAAAAAAAAAAAAAAAAwP/I+aMvH947PT05+08ao5f8J6/1P+84hzORV2N18vYzzRVbo/RqrZdzDn7+uD+JVBdxsrOQs7YxaJcRq9bcXojsVOtZP/LfKaWUZREzXTv1XPnTlI8b7WdJvqKxuzqn+oB/+n739Yf3slgzYGd8436c7Sri7PzRpXsa2epJL+YiaW5L5Gu2erFi5GK0Y57m8yl2/+VD9MbvzWSjSLZmY7fHje70KYirtl9n3b2Yf1IAAAAAAAAAAAAAAAAAAIBrNn3pd0nn45WlrY0tCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu2fT//08bsRC51BjGH3Xx8pyU0nASKeLs/EVfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADffPwEAAP//NZhh/A==") gettid() syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shmget(0x2, 0x4000, 0x1, &(0x7f0000c2e000/0x4000)=nil) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0xfffffffd, 0x0, 0x0, 0x72, 0x81}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2278, &(0x7f0000000180)) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000180)={0x2d, 0x4, 0xfffffffe}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x8841) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xfffe}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xd, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3fd1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) 3.681509595s ago: executing program 0 (id=237): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5800"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 3.634454916s ago: executing program 0 (id=238): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000009548d64cc66f453dff7d9b8b2a98008fcb180a187a5eeb5d87c636d1ca452fb57f0209a7031580a2493b73cc55c126bccd6686570704502591044c375e7fbe1a048e38870fc2d546a226b290ac4452d1a5a1f22b9a41e998b365e1a7b899d58ddf989d3870218486908dda"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r5], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r8, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) 2.739767669s ago: executing program 1 (id=239): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xbfff, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0x35}, 0x28) prctl$PR_SET_DUMPABLE(0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.664412641s ago: executing program 3 (id=240): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x43}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) 2.573520682s ago: executing program 5 (id=241): perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x401a, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7ffb}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) lstat(0x0, &(0x7f00000005c0)) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x3}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x101, 0x2, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) getpgid(r3) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9d}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002200300426bd7000ffdbdf2502102000030000030000000031bbebad15dfdb42aea994981b6c2aad2f703f6afefc397b8c25b81f617896e6933244d6f4822e52ed3c6651b11ff869bd26725ff64d8c7f26eb4c1302ed91610ae2c356b041a662798e536b9c4a8ad4671d20d31501337d1b53fcdd183a765f6dcd34f7728a99b56a943da1c348c48dc4d2d60e0839f10061af00d2302593137a5cbdc61b9809416a6e8fbd4f17bb08062bf3d8bf3001a09bfb375c5d15f1d7b775"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) 2.305284356s ago: executing program 0 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$inet(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xa84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r10, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.452724998s ago: executing program 4 (id=243): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000fa74a39a369acb33fbd607f7e42dfcba6387df2e21aa293288440a53489e83d974da2e3a74315d6315df3345c86d82d8e0a8d682d220d9f8727f1d52794d0eb909137b371e7d387000af8444d29349af2a361a30a4c1432d766383bd90995569f76707e1c764e3c43c6edaed55dd1ffabd77699e0da5066ce2886fcfb380d55f502c58ee520531adc9e8b791fc7bc22535db5f8ea835fae252c0dc4c23126952ac97aea1b7390bf4d7a6849e55f88c18214b626b99299c0533725de293a74cbb874633e163ee0b12b2f4f1b60b42cf646a03c547"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r8, 0x0, 0x0}, 0x10) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x24) 1.232347492s ago: executing program 3 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.169925372s ago: executing program 3 (id=245): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/182, 0xb6}], 0x1, 0x7, 0x9) unshare(0x2a000600) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000280)=ANY=[], 0x8, 0x0) msgsnd(r1, &(0x7f0000000440)=ANY=[], 0x401, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x740, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000002340)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="a460994b2f00000008200000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) msgrcv(r1, &(0x7f0000000d40)={0x0, ""/4096}, 0x1008, 0x0, 0x1000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r6 = accept(r5, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf, 0xe}, {0xa, 0xb}, {0xd, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x9, 0x400, {{0x18, 0x4, 0x1, 0x8, 0x60, 0x66, 0x0, 0x55, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@generic={0x83, 0x8, "6ec6ddf34704"}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x0, 0xc, "dea90bdde0f2d770d15d"}]}, @lsrr={0x83, 0xb, 0xed, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xc, [@rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x3}, @local]}, @ssrr={0x89, 0x13, 0x2e, [@loopback, @rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2d}]}, @end]}}}}}) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013000100000000000000000007000000", @ANYRES32=r14, @ANYBLOB="000000000000000024001a80200004801c000180"], 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002300)={&(0x7f0000001d80)=ANY=[@ANYBLOB="44050000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400d201000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006e6f7469ec18da86f3baef875f69f4b778674f00816c0000000000000000000036ea19c05e404433443af5b9717c050003000300000008000400f100000040000100240001006c62d5706f72745f737461747300"/110, @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400b874000008000100", @ANYRES32=0x0, @ANYBLOB="700002806c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400000002f40400000000000a047f00000005005900010000002dd809040300000006000105080000000700d3090200000000f000060000000008000100", @ANYRES32=0x0, @ANYBLOB="4001028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400edd5000008000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB], 0x544}, 0x1, 0x0, 0x0, 0x20040000}, 0x40095) 1.098622583s ago: executing program 5 (id=246): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x41}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r3}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 540.252032ms ago: executing program 3 (id=247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000850000007d000000b708000000000000dba8f8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000850000007d000000b708000000000000dba8f8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) setresgid(0xee00, 0x0, 0x0) r2 = getpid() socket$inet(0x2, 0x807, 0x6) (async) r3 = socket$inet(0x2, 0x807, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}}], 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0xee00, &(0x7f0000000000)) 504.993132ms ago: executing program 3 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06006000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 404.827483ms ago: executing program 3 (id=249): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010818000000000000002c0000002c00000002000000000000000100000d00000000000000000000000000000000000002a64d01bd991d72520004000000000000000000c2f7f402a594ef9c576fe68216b5718ed8c26642d742068fb02f19667c8ac98d969d8f588204dd81c39ef81938f65971f0a1b25700c38bd45f15eaaec38d8d48ae3413f760d722fc1875"], 0x0, 0x46, 0x0, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x4800) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x4, @mcast2, 0x401}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast2, 0x85ef}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x16, 0x6) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x4d, 0x1ffffffffb, 0x0, 0x2, 0x0) 71.657809ms ago: executing program 0 (id=250): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x8000000080, 0x0, 0xfffffffc, 0x7}, 0x0) 0s ago: executing program 0 (id=251): socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a00020000"], 0x5c}}, 0xc080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200, 0xacbc324905b669bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x400000, 0xfffffffd, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) gettid() syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) umount2(0x0, 0x1e) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 28.768917][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 28.768934][ T28] audit: type=1400 audit(1782520661.676:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.798079][ T28] audit: type=1400 audit(1782520661.706:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.798770][ T3284] cgroup: Unknown subsys name 'net' [ 28.825786][ T28] audit: type=1400 audit(1782520661.726:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.957896][ T3284] cgroup: Unknown subsys name 'cpuset' [ 28.964020][ T3284] cgroup: Unknown subsys name 'rlimit' [ 29.124239][ T28] audit: type=1400 audit(1782520662.026:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.156384][ T28] audit: type=1400 audit(1782520662.026:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.177348][ T28] audit: type=1400 audit(1782520662.026:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.184217][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.198103][ T28] audit: type=1400 audit(1782520662.026:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.226824][ T28] audit: type=1400 audit(1782520662.026:133): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.238399][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.251781][ T28] audit: type=1400 audit(1782520662.026:134): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.283699][ T28] audit: type=1400 audit(1782520662.056:135): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.415081][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.422210][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.429353][ T3295] bridge_slave_0: entered allmulticast mode [ 31.435890][ T3295] bridge_slave_0: entered promiscuous mode [ 31.455499][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.462605][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.469748][ T3295] bridge_slave_1: entered allmulticast mode [ 31.476103][ T3295] bridge_slave_1: entered promiscuous mode [ 31.511579][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.518692][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.525763][ T3301] bridge_slave_0: entered allmulticast mode [ 31.532161][ T3301] bridge_slave_0: entered promiscuous mode [ 31.538689][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.545791][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.552921][ T3296] bridge_slave_0: entered allmulticast mode [ 31.559342][ T3296] bridge_slave_0: entered promiscuous mode [ 31.576352][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.583438][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.590640][ T3301] bridge_slave_1: entered allmulticast mode [ 31.597001][ T3301] bridge_slave_1: entered promiscuous mode [ 31.607546][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.614682][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.621782][ T3296] bridge_slave_1: entered allmulticast mode [ 31.628098][ T3296] bridge_slave_1: entered promiscuous mode [ 31.640082][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.650240][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.682516][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.695878][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.703159][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.710343][ T3303] bridge_slave_0: entered allmulticast mode [ 31.716708][ T3303] bridge_slave_0: entered promiscuous mode [ 31.730249][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.744487][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.753689][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.760855][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.768020][ T3303] bridge_slave_1: entered allmulticast mode [ 31.774369][ T3303] bridge_slave_1: entered promiscuous mode [ 31.781560][ T3295] team0: Port device team_slave_0 added [ 31.796663][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.815604][ T3295] team0: Port device team_slave_1 added [ 31.826357][ T3301] team0: Port device team_slave_0 added [ 31.833544][ T3301] team0: Port device team_slave_1 added [ 31.852198][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.859351][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.866485][ T3302] bridge_slave_0: entered allmulticast mode [ 31.872883][ T3302] bridge_slave_0: entered promiscuous mode [ 31.884125][ T3296] team0: Port device team_slave_0 added [ 31.890712][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.904253][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.911413][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.918547][ T3302] bridge_slave_1: entered allmulticast mode [ 31.925020][ T3302] bridge_slave_1: entered promiscuous mode [ 31.936055][ T3296] team0: Port device team_slave_1 added [ 31.942536][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.951795][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.958781][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.984699][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.000232][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.007225][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.033176][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.052369][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.059402][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.085344][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.100635][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.107606][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.133522][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.156032][ T3303] team0: Port device team_slave_0 added [ 32.162749][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.175300][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.184595][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.191672][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.217625][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.229260][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.236489][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.262379][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.276281][ T3303] team0: Port device team_slave_1 added [ 32.296685][ T3302] team0: Port device team_slave_0 added [ 32.303605][ T3302] team0: Port device team_slave_1 added [ 32.328789][ T3295] hsr_slave_0: entered promiscuous mode [ 32.334742][ T3295] hsr_slave_1: entered promiscuous mode [ 32.356248][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.363280][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.389230][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.414761][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.421752][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.447716][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.458622][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.465571][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.491481][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.506767][ T3296] hsr_slave_0: entered promiscuous mode [ 32.512833][ T3296] hsr_slave_1: entered promiscuous mode [ 32.518796][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.524532][ T3296] Cannot create hsr debugfs directory [ 32.532403][ T3301] hsr_slave_0: entered promiscuous mode [ 32.538457][ T3301] hsr_slave_1: entered promiscuous mode [ 32.544245][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.550012][ T3301] Cannot create hsr debugfs directory [ 32.555840][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.562828][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.588789][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.658402][ T3303] hsr_slave_0: entered promiscuous mode [ 32.664306][ T3303] hsr_slave_1: entered promiscuous mode [ 32.670163][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 32.675900][ T3303] Cannot create hsr debugfs directory [ 32.683284][ T3302] hsr_slave_0: entered promiscuous mode [ 32.689377][ T3302] hsr_slave_1: entered promiscuous mode [ 32.695132][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 32.700868][ T3302] Cannot create hsr debugfs directory [ 32.872381][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.880542][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.888101][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.896401][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.904259][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.912559][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.922360][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.931119][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.950882][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.959358][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.967820][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.976466][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.984172][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.992434][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.000113][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.008653][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.043575][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.052576][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.060224][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.069420][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.078130][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.086690][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.100767][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.109139][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.126902][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.136778][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.145185][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.154039][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.162357][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.170626][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.179154][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.187518][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.220357][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.229520][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.237033][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.245484][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.254319][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.262911][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.270759][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.279250][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.310012][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.335631][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.345941][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.353038][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.369880][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.377062][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.394806][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.413862][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.431888][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.439024][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.451242][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.465484][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.472569][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.486239][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.495498][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.512438][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.519526][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.532267][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.544764][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.551832][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.569082][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.580716][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.590067][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.597167][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.608893][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.624607][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.631779][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.642096][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.649184][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.666452][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.673599][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.810379][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.864850][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.958203][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.974373][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.992465][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.019163][ T3301] veth0_vlan: entered promiscuous mode [ 34.036663][ T3301] veth1_vlan: entered promiscuous mode [ 34.054637][ T3302] veth0_vlan: entered promiscuous mode [ 34.071371][ T3302] veth1_vlan: entered promiscuous mode [ 34.088290][ T3301] veth0_macvtap: entered promiscuous mode [ 34.106270][ T3301] veth1_macvtap: entered promiscuous mode [ 34.116210][ T3302] veth0_macvtap: entered promiscuous mode [ 34.130099][ T3302] veth1_macvtap: entered promiscuous mode [ 34.144641][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.163670][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.181573][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.190437][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.200017][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.209054][ T326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.219313][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.238926][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.247294][ T3296] veth0_vlan: entered promiscuous mode [ 34.254238][ T3295] veth0_vlan: entered promiscuous mode [ 34.264050][ T3295] veth1_vlan: entered promiscuous mode [ 34.277277][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.286384][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 34.286399][ T28] audit: type=1400 audit(1782520667.186:146): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.zHfP9e/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.318237][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.327127][ T28] audit: type=1400 audit(1782520667.186:147): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.335030][ T3296] veth1_vlan: entered promiscuous mode [ 34.351022][ T28] audit: type=1400 audit(1782520667.186:148): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.zHfP9e/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.382473][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.382795][ T28] audit: type=1400 audit(1782520667.186:149): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.397523][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.419509][ T28] audit: type=1400 audit(1782520667.186:150): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.zHfP9e/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.429683][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.455982][ T28] audit: type=1400 audit(1782520667.186:151): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.zHfP9e/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.485106][ T3303] veth0_vlan: entered promiscuous mode [ 34.500577][ T3303] veth1_vlan: entered promiscuous mode [ 34.504471][ T28] audit: type=1400 audit(1782520667.186:152): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.530207][ T3295] veth0_macvtap: entered promiscuous mode [ 34.534650][ T28] audit: type=1400 audit(1782520667.186:153): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.566803][ T3303] veth0_macvtap: entered promiscuous mode [ 34.572669][ T28] audit: type=1400 audit(1782520667.186:154): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.595389][ T28] audit: type=1400 audit(1782520667.436:155): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.634503][ T3303] veth1_macvtap: entered promiscuous mode [ 34.646062][ T3295] veth1_macvtap: entered promiscuous mode [ 34.672181][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.697166][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.763757][ T3296] veth0_macvtap: entered promiscuous mode [ 34.775880][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.785933][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.841087][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.853399][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.862341][ T3509] loop2: detected capacity change from 0 to 128 [ 34.864335][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.884882][ T3296] veth1_macvtap: entered promiscuous mode [ 34.891290][ T3509] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.892439][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.907507][ T3509] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.895125][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.904509][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.936842][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.952042][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.982618][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.019324][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.039284][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.110380][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.140788][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.191258][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.214210][ T3522] loop0: detected capacity change from 0 to 512 [ 36.228883][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.253400][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.808186][ T3530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7'. [ 36.941469][ T3522] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 36.976232][ T3522] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1: bg 0: block 4: invalid block bitmap [ 37.023159][ T3522] loop0: lost filesystem error report for type 5 error -117 [ 37.027481][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 37.041282][ C0] EXT4-fs (loop0): initial error at time 1782520669: ext4_validate_block_bitmap:432 [ 37.050701][ C0] EXT4-fs (loop0): last error at time 1782520669: ext4_validate_block_bitmap:432 [ 37.104525][ T3522] EXT4-fs (loop0): Remounting filesystem read-only [ 37.121166][ T3522] EXT4-fs (loop0): 1 truncate cleaned up [ 37.138599][ T3522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.173232][ T3522] syz.0.1 (3522) used greatest stack depth: 10944 bytes left [ 39.395209][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.404448][ T3544] Illegal XDP return value 8388608 on prog (id 6) dev N/A, expect packet loss! [ 39.570055][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 39.570073][ T28] audit: type=1326 audit(1782520672.456:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 39.602176][ T28] audit: type=1326 audit(1782520672.456:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 39.627693][ T28] audit: type=1326 audit(1782520672.466:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 39.652881][ T28] audit: type=1326 audit(1782520672.466:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 39.680386][ T28] audit: type=1326 audit(1782520672.466:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 39.922094][ T28] audit: type=1326 audit(1782520672.466:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 39.950126][ T28] audit: type=1326 audit(1782520672.466:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 40.036206][ T28] audit: type=1326 audit(1782520672.466:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 40.215775][ T3569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11'. [ 40.247553][ T3569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11'. [ 40.257374][ T3569] Zero length message leads to an empty skb [ 41.107618][ T28] audit: type=1326 audit(1782520672.466:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 42.143000][ T28] audit: type=1326 audit(1782520672.466:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.3.13" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc113cece59 code=0x7ffc0000 [ 42.384239][ T3552] loop3: detected capacity change from 0 to 4096 [ 42.578789][ T3579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 42.600701][ T3579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 43.427825][ T3552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.842501][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.429881][ T3589] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19'. [ 44.484416][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 44.996527][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 44.996542][ T28] audit: type=1400 audit(1782520677.786:322): avc: denied { create } for pid=3590 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.051664][ T3598] loop4: detected capacity change from 0 to 128 [ 45.204844][ T28] audit: type=1400 audit(1782520677.786:323): avc: denied { bind } for pid=3590 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.246718][ T3598] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.297047][ T3595] syz.3.20 (3595) used greatest stack depth: 10880 bytes left [ 45.316421][ T3598] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.370051][ T28] audit: type=1400 audit(1782520677.786:324): avc: denied { write } for pid=3590 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.918319][ T28] audit: type=1400 audit(1782520678.826:325): avc: denied { ioctl } for pid=3604 comm="syz.0.23" path="socket:[4920]" dev="sockfs" ino=4920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.952189][ T3554] syz.1.15 (3554) used greatest stack depth: 10360 bytes left [ 46.209892][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.381523][ T28] audit: type=1400 audit(1782520679.276:326): avc: denied { create } for pid=3618 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_connector_socket permissive=1 [ 46.443570][ T28] audit: type=1400 audit(1782520679.346:327): avc: denied { map } for pid=3618 comm="syz.1.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.486178][ T3621] capability: warning: `syz.1.28' uses deprecated v2 capabilities in a way that may be insecure [ 46.486852][ T28] audit: type=1400 audit(1782520679.346:328): avc: denied { read write } for pid=3618 comm="syz.1.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.529165][ T3619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.536504][ T3619] IPv6: NLM_F_CREATE should be set when creating new route [ 46.544071][ T3619] IPv6: NLM_F_CREATE should be set when creating new route [ 46.551390][ T3619] IPv6: NLM_F_CREATE should be set when creating new route [ 46.559606][ T28] audit: type=1400 audit(1782520679.426:329): avc: denied { create } for pid=3618 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 46.614987][ T28] audit: type=1400 audit(1782520679.436:330): avc: denied { write } for pid=3618 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 47.863982][ T28] audit: type=1400 audit(1782520679.436:331): avc: denied { nlmsg_write } for pid=3618 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 47.901592][ T3619] loop1: detected capacity change from 0 to 256 [ 48.188669][ T3619] msdos: Bad value for 'uid' [ 48.227923][ T3619] msdos: Bad value for 'uid' [ 49.189388][ T3642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'. [ 49.227014][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 49.389987][ T3640] loop4: detected capacity change from 0 to 4096 [ 49.406881][ T3640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.118844][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.338869][ T28] kauditd_printk_skb: 222 callbacks suppressed [ 50.338893][ T28] audit: type=1400 audit(1782520683.216:554): avc: denied { read write } for pid=3663 comm="syz.1.40" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.391544][ T3664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.411270][ T3664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.444558][ T3669] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 50.456557][ T28] audit: type=1400 audit(1782520683.276:555): avc: denied { open } for pid=3663 comm="syz.1.40" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.636757][ T3665] loop1: detected capacity change from 0 to 2048 [ 50.643291][ T28] audit: type=1400 audit(1782520683.286:556): avc: denied { ioctl } for pid=3663 comm="syz.1.40" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.730372][ T28] audit: type=1400 audit(1782520683.386:557): avc: denied { create } for pid=3666 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.815895][ T28] audit: type=1400 audit(1782520683.396:558): avc: denied { ioctl } for pid=3666 comm="syz.0.41" path="socket:[5046]" dev="sockfs" ino=5046 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.877998][ T3665] loop1: p2 < > p3 p4 [ 50.883010][ T3665] loop1: p3 start 65535 is beyond EOD, truncated [ 50.891722][ T3665] loop1: p4 size 8192 extends beyond EOD, truncated [ 51.011940][ T28] audit: type=1400 audit(1782520683.916:559): avc: denied { setopt } for pid=3673 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.091892][ T28] audit: type=1400 audit(1782520683.916:560): avc: denied { write } for pid=3673 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.137141][ T3674] syzkaller0: entered promiscuous mode [ 51.148616][ T3674] syzkaller0: entered allmulticast mode [ 51.168229][ T3675] netlink: 100 bytes leftover after parsing attributes in process `syz.4.39'. [ 51.566269][ T3682] loop1: detected capacity change from 0 to 1764 [ 51.708949][ T3690] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 51.723720][ T3690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 51.732077][ T28] audit: type=1400 audit(1782520684.626:561): avc: denied { create } for pid=3688 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.788243][ T28] audit: type=1400 audit(1782520684.626:562): avc: denied { write } for pid=3688 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.334420][ T28] audit: type=1400 audit(1782520685.126:563): avc: denied { write } for pid=3695 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.508605][ T3702] loop4: detected capacity change from 0 to 8192 [ 52.516500][ T3702] ======================================================= [ 52.516500][ T3702] WARNING: The mand mount option has been deprecated and [ 52.516500][ T3702] and is ignored by this kernel. Remove the mand [ 52.516500][ T3702] option from the mount to silence this warning. [ 52.516500][ T3702] ======================================================= [ 54.585145][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.592408][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.703706][ T3702] syz.4.50 (3702) used greatest stack depth: 9736 bytes left [ 54.711858][ T3685] bridge_slave_0: entered allmulticast mode [ 54.722009][ T3685] bridge_slave_0: entered promiscuous mode [ 55.584032][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.592702][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.601298][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 55.601328][ T28] audit: type=1400 audit(1782520688.506:584): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.601857][ T3685] bridge_slave_1: entered allmulticast mode [ 55.609593][ T3303] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 55.628704][ T3685] bridge_slave_1: entered promiscuous mode [ 55.839851][ T28] audit: type=1326 audit(1782520688.576:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 55.889111][ T3303] FAT-fs (loop4): Filesystem has been set read-only [ 56.041508][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.069891][ T3725] loop1: detected capacity change from 0 to 1756 [ 56.086042][ T28] audit: type=1326 audit(1782520688.576:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.111691][ T3727] tmpfs: Bad value for 'mpol' [ 56.119679][ T3725] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 56.130530][ T3685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.171019][ T3685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.211850][ T28] audit: type=1326 audit(1782520688.676:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.244846][ T3728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54'. [ 56.276850][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.308832][ T3685] team0: Port device team_slave_0 added [ 56.320130][ T28] audit: type=1326 audit(1782520688.676:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.346558][ T3685] team0: Port device team_slave_1 added [ 56.353566][ T3729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=3729 comm=syz.4.54 [ 56.403585][ T28] audit: type=1326 audit(1782520688.676:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.433073][ T3728] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 56.478780][ T3728] bond1 (unregistering): Released all slaves [ 56.486339][ T28] audit: type=1326 audit(1782520688.696:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.562046][ T28] audit: type=1326 audit(1782520688.696:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.643603][ T28] audit: type=1326 audit(1782520688.696:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.687684][ T28] audit: type=1326 audit(1782520688.696:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3716 comm="syz.0.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdbedce59 code=0x7ffc0000 [ 56.757228][ T3720] loop0: detected capacity change from 0 to 4096 [ 56.783484][ T3685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.805072][ T3685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.878898][ T3685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.927049][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.938116][ T3720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.952137][ T3685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.959219][ T3685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.025850][ T3742] capability: warning: `syz.1.58' uses 32-bit capabilities (legacy support in use) [ 57.089611][ T3685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.129513][ T3685] hsr_slave_0: entered promiscuous mode [ 57.136122][ T3685] hsr_slave_1: entered promiscuous mode [ 57.143756][ T3685] debugfs: 'hsr0' already exists in 'hsr' [ 57.149642][ T3685] Cannot create hsr debugfs directory [ 57.172647][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.407117][ T3753] netlink: 120 bytes leftover after parsing attributes in process `syz.4.61'. [ 57.581367][ T30] bridge_slave_1: left allmulticast mode [ 57.608628][ T30] bridge_slave_1: left promiscuous mode [ 57.626677][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.689537][ T30] bridge_slave_0: left allmulticast mode [ 57.709529][ T30] bridge_slave_0: left promiscuous mode [ 57.728237][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.870309][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.908380][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.937290][ T30] bond0 (unregistering): Released all slaves [ 58.016175][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.026180][ T3685] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.072276][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.081824][ T3685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.107255][ T30] hsr_slave_0: left promiscuous mode [ 58.114670][ T30] hsr_slave_1: left promiscuous mode [ 58.120719][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.133650][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.169176][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.325669][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.346548][ T30] veth1_macvtap: left promiscuous mode [ 58.352267][ T30] veth0_macvtap: left promiscuous mode [ 58.363594][ T30] veth1_vlan: left promiscuous mode [ 58.369119][ T30] veth0_vlan: left promiscuous mode [ 58.499408][ T3778] loop1: detected capacity change from 0 to 4096 [ 58.522836][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.760452][ T3781] loop3: detected capacity change from 0 to 512 [ 58.789911][ T3781] EXT4-fs: Ignoring removed nobh option [ 58.800062][ T3781] ------------[ cut here ]------------ [ 58.805609][ T3781] EA inode 11 i_nlink=1026 [ 58.805628][ T3781] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.3.65/3781 [ 58.820819][ T3781] Modules linked in: [ 58.824767][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.834060][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.844202][ T3781] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 58.850928][ T3781] Code: 36 d2 96 ff 49 8d 7e 40 4c 8d 2d 0b 8d 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 41 1a d9 03 90 90 90 90 90 90 90 [ 58.870643][ T3781] RSP: 0018:ffffc90004e7f7f8 EFLAGS: 00010246 [ 58.876732][ T3781] RAX: ffff888102620b30 RBX: ffff8881073b85a8 RCX: ffffffff81c2a506 [ 58.884757][ T3781] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3200 [ 58.892760][ T3781] RBP: 000000000000000b R08: 00018881073b855b R09: 0000000000000000 [ 58.900816][ T3781] R10: ffffc90004e7f728 R11: 0001c90004e7f728 R12: ffff8881073b8558 [ 58.908869][ T3781] R13: ffffffff871d3200 R14: ffff8881073b8510 R15: 0000000000000001 [ 58.916913][ T3781] FS: 00007fc1127476c0(0000) GS:ffff8882ae9d2000(0000) knlGS:0000000000000000 [ 58.925899][ T3781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.932510][ T3781] CR2: 00007fc113cd5fc0 CR3: 000000011b682000 CR4: 00000000003506f0 [ 58.940646][ T3781] Call Trace: [ 58.943937][ T3781] [ 58.946927][ T3781] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 58.952923][ T3781] ext4_xattr_delete_inode+0x6b5/0x790 [ 58.958423][ T3781] ext4_evict_inode+0xb18/0xdf0 [ 58.963388][ T3781] ? __pfx_ext4_evict_inode+0x10/0x10 [ 58.968794][ T3781] evict+0x2a5/0x510 [ 58.972766][ T3781] iput+0x430/0x5a0 [ 58.976590][ T3781] ext4_process_orphan+0x1a4/0x1c0 [ 58.981825][ T3781] ext4_orphan_cleanup+0x6a6/0xa10 [ 58.986960][ T3781] ? ext4_register_li_request+0x14c/0x440 [ 58.992755][ T3781] ext4_fill_super+0x33ab/0x3760 [ 58.997842][ T3781] ? set_blocksize+0x14c/0x270 [ 59.002633][ T3781] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.007980][ T3781] get_tree_bdev_flags+0x291/0x300 [ 59.013127][ T3781] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.018477][ T3781] get_tree_bdev+0x1f/0x30 [ 59.022943][ T3781] ext4_get_tree+0x1c/0x30 [ 59.027485][ T3781] vfs_get_tree+0x57/0x1d0 [ 59.031925][ T3781] do_new_mount+0x288/0x8d0 [ 59.036451][ T3781] path_mount+0x4ad/0xb90 [ 59.040912][ T3781] __se_sys_mount+0x28c/0x2e0 [ 59.045620][ T3781] __x64_sys_mount+0x67/0x80 [ 59.050252][ T3781] x64_sys_call+0x2d61/0x3020 [ 59.055133][ T3781] do_syscall_64+0x136/0x3c0 [ 59.059859][ T3781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.065780][ T3781] RIP: 0033:0x7fc113cee0ca [ 59.070236][ T3781] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.085339][ T3788] netlink: 'syz.4.67': attribute type 21 has an invalid length. [ 59.089955][ T3781] RSP: 002b:00007fc112746e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.089986][ T3781] RAX: ffffffffffffffda RBX: 00007fc112746ee0 RCX: 00007fc113cee0ca [ 59.090003][ T3781] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fc112746ea0 [ 59.090018][ T3781] RBP: 0000200000000180 R08: 00007fc112746ee0 R09: 0000000000800718 [ 59.090035][ T3781] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 59.090111][ T3781] R13: 00007fc112746ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 59.090134][ T3781] [ 59.090143][ T3781] ---[ end trace 0000000000000000 ]--- [ 59.161385][ T3788] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.165592][ T30] team0 (unregistering): Port device team_slave_1 removed [ 59.169407][ T3781] EXT4-fs (loop3): 1 orphan inode deleted [ 59.185692][ T3781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.198513][ T30] team0 (unregistering): Port device team_slave_0 removed [ 59.246009][ T3788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.253411][ T3788] IPv6: NLM_F_CREATE should be set when creating new route [ 59.260848][ T3788] IPv6: NLM_F_CREATE should be set when creating new route [ 59.268268][ T3788] IPv6: NLM_F_CREATE should be set when creating new route [ 59.275239][ T3781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 59.322249][ T3793] xt_policy: neither incoming nor outgoing policy selected [ 59.323249][ T3685] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.338778][ T3685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.361685][ T3788] vlan2: entered promiscuous mode [ 59.367105][ T3788] bridge0: entered promiscuous mode [ 59.378647][ T3685] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.380777][ T3685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.381347][ T3685] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.383261][ T3685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.461875][ T3685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.469384][ T3685] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.472084][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.472122][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.475448][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.475484][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.603257][ T3805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.68'. [ 59.633642][ T3781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.65'. [ 59.701243][ T3685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.742591][ T3829] loop4: detected capacity change from 0 to 1024 [ 59.743029][ T3829] ext4: Unknown parameter 'nojournal' [ 59.824532][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 60.476765][ T3847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'. [ 60.620521][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.684470][ T28] kauditd_printk_skb: 492 callbacks suppressed [ 60.684485][ T28] audit: type=1400 audit(1782520693.586:1086): avc: denied { connect } for pid=3845 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.795438][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.808263][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.818443][ T28] audit: type=1400 audit(1782520693.726:1087): avc: denied { module_request } for pid=3685 comm="syz-executor" kmod="netdevsim5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.941268][ T28] audit: type=1400 audit(1782520693.846:1088): avc: denied { bind } for pid=3869 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.122592][ T28] audit: type=1400 audit(1782520693.886:1089): avc: denied { write } for pid=3857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.180050][ T3882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.204460][ T3880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.214097][ T3882] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 61.228032][ T28] audit: type=1326 audit(1782520693.896:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.1.73" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419f23ce59 code=0x7ffc0000 [ 61.253650][ T3880] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 61.262915][ T3882] audit: backlog limit exceeded [ 61.335276][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.346347][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 61.415724][ T3879] loop1: detected capacity change from 0 to 4096 [ 61.427585][ T3879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.515582][ T3886] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 61.529846][ T3886] netlink: 'syz.3.75': attribute type 2 has an invalid length. [ 61.622321][ T3904] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 61.636598][ T3904] bond1 (unregistering): Released all slaves [ 61.652649][ T3685] veth0_vlan: entered promiscuous mode [ 61.664321][ T3685] veth1_vlan: entered promiscuous mode [ 61.681466][ T3685] veth0_macvtap: entered promiscuous mode [ 61.689309][ T3685] veth1_macvtap: entered promiscuous mode [ 61.700299][ T3685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.715306][ T3909] loop3: detected capacity change from 0 to 512 [ 61.721528][ T3685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.726965][ T3909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.740775][ T3766] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.747742][ T3909] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.750106][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.759028][ T3909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 61.774340][ T3909] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 61.777007][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.785404][ T3909] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 61.795753][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.803428][ T3909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.494088][ T3904] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.77: dx entry: limit 65535 != root limit 120 [ 62.549862][ T3904] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.77: Corrupt directory, running e2fsck is recommended [ 62.578559][ T3909] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.77: dx entry: limit 65535 != root limit 120 [ 62.597480][ T3922] loop0: detected capacity change from 0 to 128 [ 62.613654][ T3904] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.77: path /18/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 62.651739][ T3922] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.695645][ T3922] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.727021][ T3909] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.77: Corrupt directory, running e2fsck is recommended [ 62.763254][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 62.899844][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.942100][ T3922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 62.976480][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.004669][ T30] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.508562][ T3928] loop4: detected capacity change from 0 to 512 [ 64.181775][ T3938] tmpfs: Bad value for 'mpol' [ 64.203279][ T3928] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.84: error while reading EA inode 32 err=-116 [ 64.230206][ T3928] loop4: lost filesystem error report for type 5 error -117 [ 64.234307][ T3928] EXT4-fs (loop4): 1 orphan inode deleted [ 64.241743][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 64.241766][ C0] EXT4-fs (loop4): initial error at time 1782520697: ext4_xattr_inode_iget:446 [ 64.241805][ C0] EXT4-fs (loop4): last error at time 1782520697: ext4_xattr_inode_iget:446 [ 64.278032][ T3938] loop1: detected capacity change from 0 to 512 [ 64.291792][ T3938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.301712][ T3928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.349926][ T3938] EXT4-fs (loop1): 1 truncate cleaned up [ 64.350443][ T3938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.488386][ T3928] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.84: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 64.521298][ T3951] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.84: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 64.662754][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.059542][ T3963] FAULT_INJECTION: forcing a failure. [ 65.059542][ T3963] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.059576][ T3963] CPU: 0 UID: 0 PID: 3963 Comm: syz.4.91 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 65.059646][ T3963] Tainted: [W]=WARN [ 65.059654][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 65.059667][ T3963] Call Trace: [ 65.059675][ T3963] [ 65.059684][ T3963] __dump_stack+0x1d/0x30 [ 65.059762][ T3963] dump_stack_lvl+0x95/0xd0 [ 65.059785][ T3963] dump_stack+0x15/0x1b [ 65.059806][ T3963] should_fail_ex+0x25e/0x270 [ 65.059951][ T3963] should_fail+0xb/0x20 [ 65.060039][ T3963] should_fail_usercopy+0x1a/0x20 [ 65.060069][ T3963] _copy_to_user+0x20/0xa0 [ 65.060090][ T3963] simple_read_from_buffer+0xb5/0x130 [ 65.060140][ T3963] proc_fail_nth_read+0x10e/0x150 [ 65.060164][ T3963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.060188][ T3963] vfs_read+0x18e/0x7c0 [ 65.060315][ T3963] ? __rcu_read_unlock+0x4e/0x70 [ 65.060343][ T3963] ? __fget_files+0x184/0x1c0 [ 65.060369][ T3963] ? mutex_lock+0x57/0x90 [ 65.060395][ T3963] ksys_read+0xdc/0x1a0 [ 65.060416][ T3963] __x64_sys_read+0x40/0x50 [ 65.060488][ T3963] x64_sys_call+0x2886/0x3020 [ 65.060514][ T3963] do_syscall_64+0x136/0x3c0 [ 65.060565][ T3963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.060588][ T3963] RIP: 0033:0x7f2b8d47d68e [ 65.060605][ T3963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.060625][ T3963] RSP: 002b:00007f2b8bef5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.060678][ T3963] RAX: ffffffffffffffda RBX: 00007f2b8bef66c0 RCX: 00007f2b8d47d68e [ 65.060771][ T3963] RDX: 000000000000000f RSI: 00007f2b8bef60a0 RDI: 0000000000000004 [ 65.060843][ T3963] RBP: 00007f2b8bef6090 R08: 0000000000000000 R09: 0000000000000000 [ 65.060858][ T3963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.060870][ T3963] R13: 00007f2b8d736128 R14: 00007f2b8d736090 R15: 00007fff39c0fae8 [ 65.060891][ T3963] [ 65.221204][ T3965] loop0: detected capacity change from 0 to 2048 [ 65.298895][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.367552][ T3974] 9p: Bad value for 'wfdno' [ 65.379342][ T3448] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.379453][ T3448] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.379479][ T3448] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.379479][ T3448] [ 65.379493][ T3448] EXT4-fs (loop0): Total free blocks count 0 [ 65.379574][ T3448] EXT4-fs (loop0): Free/Dirty block details [ 65.379586][ T3448] EXT4-fs (loop0): free_blocks=2415919104 [ 65.379600][ T3448] EXT4-fs (loop0): dirty_blocks=32 [ 65.379614][ T3448] EXT4-fs (loop0): Block reservation details [ 65.379636][ T3448] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 65.381224][ T3448] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 66.013588][ T3295] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 66.575865][ T3994] random: crng reseeded on system resumption [ 66.623080][ T28] kauditd_printk_skb: 370 callbacks suppressed [ 66.623100][ T28] audit: type=1400 audit(1782520954.472:1460): avc: denied { write } for pid=3993 comm="syz.3.101" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.623130][ T28] audit: type=1400 audit(1782520954.472:1461): avc: denied { open } for pid=3993 comm="syz.3.101" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.152023][ T4020] loop5: detected capacity change from 0 to 2048 [ 68.160758][ T4020] ext4: Unknown parameter 'nouser_xattr' [ 69.315327][ T28] audit: type=1400 audit(1782520957.133:1462): avc: denied { setopt } for pid=4017 comm="syz.5.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.029437][ T4039] syz.5.110 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.037100][ T9] kernel read not supported for file [fscontext] (pid: 9 comm: kworker/0:0) [ 71.039925][ T4039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.110'. [ 71.062492][ T28] audit: type=1400 audit(1782520958.933:1463): avc: denied { create } for pid=4032 comm="syz.5.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.032088][ T4055] loop0: detected capacity change from 0 to 512 [ 72.035555][ T4055] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.059683][ T4055] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.059790][ T4055] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.061787][ T4055] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.115: corrupted xattr entries [ 72.116744][ T28] audit: type=1400 audit(1782520960.003:1464): avc: denied { write } for pid=4048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.136923][ T4055] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.144035][ T4055] EXT4-fs (loop0): Remounting filesystem read-only [ 72.153291][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 72.153312][ C0] EXT4-fs (loop0): initial error at time 1782520960: xattr_find_entry:337: inode 15 [ 72.153345][ C0] EXT4-fs (loop0): last error at time 1782520960: xattr_find_entry:337: inode 15 [ 72.184961][ T4055] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.185019][ T4055] EXT4-fs (loop0): 1 truncate cleaned up [ 72.185480][ T4055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.205983][ T28] audit: type=1400 audit(1782520960.103:1465): avc: denied { write } for pid=4062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.544942][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.609558][ T28] audit: type=1400 audit(1782520960.483:1466): avc: denied { write } for pid=4067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.667823][ T28] audit: type=1400 audit(1782520960.533:1467): avc: denied { write } for pid=4084 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.749838][ T28] audit: type=1400 audit(1782520960.633:1468): avc: denied { ioctl } for pid=4044 comm="syz.4.114" path="socket:[6757]" dev="sockfs" ino=6757 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.849359][ T28] audit: type=1400 audit(1782520960.693:1469): avc: denied { watch_reads } for pid=4085 comm="syz.1.118" path="/16" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.086382][ T28] audit: type=1400 audit(1782520960.743:1470): avc: denied { read append } for pid=4097 comm="syz.3.119" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.216969][ T28] audit: type=1400 audit(1782520960.743:1471): avc: denied { open } for pid=4097 comm="syz.3.119" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.240392][ T28] audit: type=1400 audit(1782520960.823:1472): avc: denied { read } for pid=4085 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.288193][ T28] audit: type=1400 audit(1782520961.083:1473): avc: denied { write } for pid=4091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.614799][ T4124] loop5: detected capacity change from 0 to 4096 [ 73.648410][ T4119] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 73.692463][ T4124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.051250][ T4114] loop4: detected capacity change from 0 to 8192 [ 74.299478][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.493783][ T4150] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 74.515056][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.534087][ T4149] ip6erspan0: entered allmulticast mode [ 74.611676][ T4150] FAT-fs (loop4): Filesystem has been set read-only [ 75.129686][ T4153] loop4: detected capacity change from 0 to 8192 [ 75.225598][ T4153] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 75.264324][ T4153] FAT-fs (loop4): Filesystem has been set read-only [ 75.380551][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 76.007986][ T4165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 76.172647][ T4158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.129'. [ 76.250095][ T4158] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.257305][ T4158] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.451088][ T4174] loop3: detected capacity change from 0 to 2048 [ 76.511348][ T4174] ext4: Unknown parameter 'dont_hash' [ 76.867597][ T4155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.129'. [ 77.458700][ T28] kauditd_printk_skb: 389 callbacks suppressed [ 77.458749][ T28] audit: type=1400 audit(1782520965.364:1863): avc: denied { write } for pid=4193 comm="syz.3.140" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.505362][ T4194] loop3: detected capacity change from 0 to 512 [ 77.512027][ T4194] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 77.531416][ T28] audit: type=1400 audit(1782520965.434:1864): avc: denied { map } for pid=4193 comm="syz.3.140" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.876778][ T4202] netlink: 'syz.5.143': attribute type 2 has an invalid length. [ 78.147626][ T4211] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 78.227156][ T4211] bond2 (unregistering): Released all slaves [ 78.290191][ T4215] loop3: detected capacity change from 0 to 512 [ 78.331086][ T4214] loop4: detected capacity change from 0 to 128 [ 78.362394][ T4215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.440210][ T4214] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.467952][ T4215] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 78.546226][ T4215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 78.563751][ T4214] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.614453][ T4215] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 78.682304][ T4215] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 78.757938][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.975930][ T4211] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.146: dx entry: limit 65535 != root limit 120 [ 79.035361][ T4211] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.146: Corrupt directory, running e2fsck is recommended [ 79.090789][ T4211] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.146: path /38/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 79.843839][ T4227] loop5: detected capacity change from 0 to 128 [ 79.896944][ T4227] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.933926][ T4227] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.970731][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.988165][ T28] audit: type=1400 audit(1782520967.884:1865): avc: denied { write } for pid=4226 comm="syz.5.151" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.091600][ T28] audit: type=1400 audit(1782520967.884:1866): avc: denied { add_name } for pid=4226 comm="syz.5.151" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.118111][ T3685] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.157344][ T28] audit: type=1400 audit(1782520967.884:1867): avc: denied { read write open } for pid=4226 comm="syz.5.151" path="/15/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.231742][ T28] audit: type=1400 audit(1782520967.884:1868): avc: denied { setattr } for pid=4226 comm="syz.5.151" path="/15/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.367175][ T28] audit: type=1400 audit(1782520967.924:1869): avc: denied { ioctl } for pid=4226 comm="syz.5.151" path="/15/file1/file1" dev="loop5" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.367208][ T4244] process 'syz.0.157' launched './file0' with NULL argv: empty string added [ 81.354429][ T28] audit: type=1400 audit(1782520968.274:1870): avc: denied { execute } for pid=4243 comm="syz.0.157" name="file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.392439][ T4244] Invalid argument reading file caps for ./file0 [ 81.398838][ T28] audit: type=1400 audit(1782520969.294:1871): avc: denied { execute_no_trans } for pid=4243 comm="syz.0.157" path="/37/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.702468][ T4236] loop4: detected capacity change from 0 to 512 [ 83.788240][ T4236] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.154: corrupted inode contents [ 83.814387][ T4236] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.814559][ T4236] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.154: mark_inode_dirty error [ 83.823774][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 83.823792][ C1] EXT4-fs (loop4): initial error at time 1782520971: ext4_do_update_inode:5742: inode 16 [ 83.823821][ C1] EXT4-fs (loop4): last error at time 1782520971: ext4_do_update_inode:5742: inode 16 [ 84.010753][ T4236] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 84.010972][ T4236] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.154: corrupted inode contents [ 84.076155][ T4236] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 84.076319][ T4236] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.154: mark_inode_dirty error [ 84.141204][ T4236] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 84.141524][ T4236] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.154: corrupted inode contents [ 84.207316][ T4236] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 84.207468][ T4236] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 84.232630][ T4236] loop4: lost filesystem error report for type 5 error -117 [ 84.247431][ T4236] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.154: corrupted inode contents [ 84.304235][ T4236] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 84.304501][ T4236] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.154: mark_inode_dirty error [ 84.340280][ T4236] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 84.340914][ T4236] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 84.359102][ T4236] loop4: lost filesystem error report for type 5 error -117 [ 84.366369][ T4236] EXT4-fs (loop4): 1 truncate cleaned up [ 84.392162][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.405695][ T30] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.483016][ T4236] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.605973][ T4262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.791819][ T4262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.991215][ T4262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.113520][ T4262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.206799][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.230077][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.242877][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.274838][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.367790][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 1 [ 85.428760][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.490525][ T28] audit: type=1400 audit(1782520973.395:1872): avc: denied { read write } for pid=4276 comm="syz.4.164" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.513976][ T28] audit: type=1400 audit(1782520973.395:1873): avc: denied { open } for pid=4276 comm="syz.4.164" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.687978][ T28] audit: type=1400 audit(1782520973.485:1874): avc: denied { create } for pid=4267 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.936523][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 86.152182][ T28] audit: type=1400 audit(1782520974.055:1875): avc: denied { create } for pid=4294 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.652746][ T4313] loop5: detected capacity change from 0 to 1024 [ 86.659814][ T4313] ext4: Unknown parameter 'subj_type' [ 86.769960][ T4269] loop0: detected capacity change from 0 to 1024 [ 86.790791][ T4269] ext4: Unknown parameter 'smackfshat' [ 86.889650][ T4321] loop4: detected capacity change from 0 to 128 [ 86.910228][ T28] audit: type=1400 audit(1782520974.805:1876): avc: denied { map } for pid=4267 comm="syz.0.162" path="socket:[7631]" dev="sockfs" ino=7631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.001292][ T4321] EXT4-fs: Ignoring removed nobh option [ 87.013236][ T28] audit: type=1400 audit(1782520974.805:1877): avc: denied { read } for pid=4267 comm="syz.0.162" path="socket:[7631]" dev="sockfs" ino=7631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.059383][ T4321] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.076297][ T4321] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.152274][ T28] audit: type=1400 audit(1782520975.055:1878): avc: denied { map } for pid=4323 comm="syz.5.180" path="socket:[7648]" dev="sockfs" ino=7648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 87.969070][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.196724][ T28] audit: type=1400 audit(1782520975.095:1879): avc: denied { write } for pid=4320 comm="syz.4.179" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.638778][ T28] audit: type=1400 audit(1782520979.535:1880): avc: denied { create } for pid=4359 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.921297][ T28] audit: type=1400 audit(1782520979.645:1881): avc: denied { read } for pid=4359 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.041752][ T28] audit: type=1400 audit(1782520979.865:1882): avc: denied { create } for pid=4368 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.091962][ T4374] loop1: detected capacity change from 0 to 128 [ 92.133778][ T4374] EXT4-fs: Ignoring removed nobh option [ 92.185551][ T28] audit: type=1400 audit(1782520979.975:1883): avc: denied { accept } for pid=4368 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.228738][ T4374] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.248695][ T4377] sctp: [Deprecated]: syz.0.188 (pid 4377) Use of int in maxseg socket option. [ 92.248695][ T4377] Use struct sctp_assoc_value instead [ 92.289180][ T4374] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.322039][ T28] audit: type=1400 audit(1782520979.975:1884): avc: denied { ioctl } for pid=4368 comm="syz.4.192" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 92.399920][ T28] audit: type=1400 audit(1782520980.265:1885): avc: denied { connect } for pid=4380 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.426914][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.428935][ T28] audit: type=1400 audit(1782520980.325:1887): avc: denied { read } for pid=4380 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.463386][ T28] audit: type=1400 audit(1782520980.305:1886): avc: denied { write } for pid=4373 comm="syz.1.194" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.486351][ T28] audit: type=1400 audit(1782520980.365:1888): avc: denied { write } for pid=4380 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.506214][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.521061][ T28] audit: type=1400 audit(1782520980.426:1889): avc: denied { write } for pid=4380 comm="syz.5.195" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.777071][ T4390] loop3: detected capacity change from 0 to 8192 [ 92.904275][ T4392] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 92.931177][ T4392] FAT-fs (loop3): Filesystem has been set read-only [ 92.958358][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.757127][ T4404] loop4: detected capacity change from 0 to 1024 [ 93.821906][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.201'. [ 93.876273][ T4406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.201'. [ 94.171438][ T4404] EXT4-fs (loop4): Invalid log cluster size: 4294967295 [ 94.597810][ T4411] tipc: Started in network mode [ 94.607232][ T4411] tipc: Node identity , cluster identity 4711 [ 95.401460][ T4411] tipc: Failed to set node id, please configure manually [ 95.517620][ T4411] tipc: Enabling of bearer rejected, failed to enable media [ 95.602103][ T4422] ip6gretap1: entered allmulticast mode [ 97.985587][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.005204][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.086967][ T4435] loop5: detected capacity change from 0 to 764 [ 98.104110][ T4437] loop3: detected capacity change from 0 to 512 [ 98.111448][ T4435] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.135729][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 98.135746][ T28] audit: type=1400 audit(1782520986.036:1894): avc: denied { mount } for pid=4434 comm="syz.5.209" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 98.197926][ T4437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.239287][ T4437] EXT4-fs (loop3): resizing filesystem from 256 to 2 blocks [ 98.248870][ T28] audit: type=1400 audit(1782520986.136:1895): avc: denied { write } for pid=4436 comm="syz.3.210" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.272030][ T4437] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 98.349094][ T28] audit: type=1400 audit(1782520986.136:1896): avc: denied { append } for pid=4436 comm="syz.3.210" path=2F34392F66696C65302F233138202864656C6574656429 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.468542][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.495491][ T4446] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 98.981070][ T4452] netlink: 'syz.3.213': attribute type 10 has an invalid length. [ 98.998160][ T4452] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 99.012336][ T4452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.100839][ T28] audit: type=1400 audit(1782520986.996:1897): avc: denied { unmount } for pid=3685 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 99.136744][ T4457] loop3: detected capacity change from 0 to 1024 [ 99.178324][ T4457] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 99.185128][ T4459] loop1: detected capacity change from 0 to 1024 [ 99.203650][ T4459] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.233141][ T4457] EXT4-fs (loop3): mount failed [ 99.238071][ T4459] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.239096][ T4459] JBD2: no valid journal superblock found [ 99.254169][ T4459] EXT4-fs (loop1): Could not load journal inode [ 99.405709][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.438431][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.562690][ T4472] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 99.614888][ T4474] loop3: detected capacity change from 0 to 512 [ 99.618323][ T4472] bond2 (unregistering): Released all slaves [ 99.624400][ T4474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.655222][ T4474] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 99.668339][ T4474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 99.685021][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.220'. [ 99.695152][ T4474] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 99.707760][ T4474] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 99.762915][ T4474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.921065][ T4474] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.219: dx entry: limit 65535 != root limit 120 [ 100.653452][ T28] audit: type=1400 audit(1782520988.466:1898): avc: denied { create } for pid=4478 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.673304][ T28] audit: type=1400 audit(1782520988.526:1899): avc: denied { bind } for pid=4478 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.674257][ T4484] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.219: dx entry: limit 65535 != root limit 120 [ 100.692579][ T4474] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 100.705069][ T4484] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 100.730680][ T28] audit: type=1400 audit(1782520988.526:1900): avc: denied { write } for pid=4478 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.731716][ T4474] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.219: path /51/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 101.199362][ T4491] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.208118][ T4491] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.531940][ T28] audit: type=1400 audit(1782520989.427:1901): avc: denied { execute } for pid=4490 comm="syz.1.224" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 101.684475][ T4496] syzkaller0: entered promiscuous mode [ 101.691294][ T4496] syzkaller0: entered allmulticast mode [ 101.820942][ T4499] tipc: Started in network mode [ 101.826646][ T4499] tipc: Node identity 867523f83fc4, cluster identity 4711 [ 101.836300][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.837598][ T4499] tipc: Enabled bearer , priority 0 [ 101.872441][ T28] audit: type=1400 audit(1782520989.767:1902): avc: denied { read write } for pid=4505 comm="syz.3.226" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.895820][ T28] audit: type=1400 audit(1782520989.767:1903): avc: denied { open } for pid=4505 comm="syz.3.226" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.929982][ T4506] netlink: 13 bytes leftover after parsing attributes in process `syz.3.226'. [ 101.943851][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 101.961663][ T4490] tipc: Resetting bearer [ 101.972319][ T4490] tipc: Disabling bearer [ 102.003662][ T4504] netlink: 184 bytes leftover after parsing attributes in process `syz.5.227'. [ 102.012963][ T4504] netlink: 184 bytes leftover after parsing attributes in process `syz.5.227'. [ 102.022507][ T4504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.227'. [ 102.047473][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'. [ 102.073946][ T4507] syzkaller0: entered promiscuous mode [ 102.086036][ T4507] syzkaller0: entered allmulticast mode [ 102.101250][ T4504] TC_ACT_REPEAT abuse ? [ 102.122717][ T4504] netlink: 128 bytes leftover after parsing attributes in process `syz.5.227'. [ 102.602248][ T4523] netlink: 822 bytes leftover after parsing attributes in process `syz.4.232'. [ 102.800212][ T4538] loop5: detected capacity change from 0 to 256 [ 102.814933][ T4538] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.243208][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 103.243234][ T28] audit: type=1400 audit(1782521246.144:1909): avc: denied { create } for pid=4537 comm="syz.5.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 103.691509][ T28] audit: type=1400 audit(1782521246.184:1910): avc: denied { connect } for pid=4537 comm="syz.5.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 103.815379][ T4552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.845526][ T4552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.143496][ T4566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.257956][ T4566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.490102][ T4575] veth1_to_bond: entered promiscuous mode [ 105.496242][ T4575] veth1_to_bond: entered allmulticast mode [ 105.502383][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.246'. [ 105.555855][ T4575] veth1_to_bond (unregistering): left promiscuous mode [ 105.587931][ T4575] veth1_to_bond (unregistering): left allmulticast mode [ 105.613490][ T4575] bond0: (slave bond_slave_1): Releasing backup interface [ 105.751432][ T28] audit: type=1400 audit(1782521248.655:1911): avc: denied { accept } for pid=4571 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.843328][ T4576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 106.410893][ T28] audit: type=1400 audit(1782521249.275:1912): avc: denied { bind } for pid=4588 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.485915][ T28] audit: type=1400 audit(1782521249.275:1913): avc: denied { name_bind } for pid=4588 comm="syz.3.249" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 106.633328][ T4597] xfrm1: entered allmulticast mode [ 106.993856][ T4599] loop0: detected capacity change from 0 to 1024 [ 107.000612][ T4599] EXT4-fs: Ignoring removed nobh option [ 107.006216][ T4599] EXT4-fs: Ignoring removed i_version option [ 107.092611][ T4597] ================================================================== [ 107.100747][ T4597] BUG: KCSAN: data-race in touch_atime / touch_atime [ 107.107461][ T4597] [ 107.109800][ T4597] write to 0xffff888102024bd0 of 4 bytes by task 4598 on cpu 1: [ 107.117444][ T4597] touch_atime+0x1cb/0x300 [ 107.121871][ T4597] shmem_file_read_iter+0x3ed/0x4b0 [ 107.127090][ T4597] copy_splice_read+0x47a/0x6b0 [ 107.131957][ T4597] splice_direct_to_actor+0x27c/0x680 [ 107.137338][ T4597] do_splice_direct+0x119/0x1a0 [ 107.142201][ T4597] do_sendfile+0x37d/0x640 [ 107.146629][ T4597] __x64_sys_sendfile64+0x105/0x150 [ 107.151852][ T4597] x64_sys_call+0x2dc4/0x3020 [ 107.156542][ T4597] do_syscall_64+0x136/0x3c0 [ 107.161153][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.167063][ T4597] [ 107.169394][ T4597] read to 0xffff888102024bd0 of 4 bytes by task 4597 on cpu 0: [ 107.176936][ T4597] touch_atime+0x162/0x300 [ 107.181380][ T4597] shmem_file_read_iter+0x3ed/0x4b0 [ 107.186595][ T4597] copy_splice_read+0x47a/0x6b0 [ 107.191468][ T4597] splice_direct_to_actor+0x27c/0x680 [ 107.196863][ T4597] do_splice_direct+0x119/0x1a0 [ 107.201731][ T4597] do_sendfile+0x37d/0x640 [ 107.206175][ T4597] __x64_sys_sendfile64+0x105/0x150 [ 107.211389][ T4597] x64_sys_call+0x2dc4/0x3020 [ 107.216084][ T4597] do_syscall_64+0x136/0x3c0 [ 107.220695][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.226606][ T4597] [ 107.228964][ T4597] value changed: 0x3b53e877 -> 0x0051b9ba [ 107.234686][ T4597] [ 107.237014][ T4597] Reported by Kernel Concurrency Sanitizer on: [ 107.243173][ T4597] CPU: 0 UID: 0 PID: 4597 Comm: syz.0.251 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 107.253952][ T4597] Tainted: [W]=WARN [ 107.257759][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.267829][ T4597] ================================================================== [ 107.475942][ T28] audit: type=1400 audit(1782521249.275:1914): avc: denied { node_bind } for pid=4588 comm="syz.3.249" saddr=ff02::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 108.134516][ T4599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.379935][ T28] audit: type=1400 audit(1782521251.055:1915): avc: denied { mount } for pid=4595 comm="syz.0.251" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.388986][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.416883][ T28] audit: type=1400 audit(1782521251.055:1916): avc: denied { read write } for pid=4595 comm="syz.0.251" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.447961][ T28] audit: type=1400 audit(1782521251.055:1917): avc: denied { open } for pid=4595 comm="syz.0.251" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.490530][ T28] audit: type=1400 audit(1782521251.065:1918): avc: denied { write } for pid=4595 comm="syz.0.251" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.512738][ T28] audit: type=1400 audit(1782521251.065:1919): avc: denied { add_name } for pid=4595 comm="syz.0.251" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.535397][ T28] audit: type=1400 audit(1782521251.065:1920): avc: denied { create } for pid=4595 comm="syz.0.251" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.558122][ T28] audit: type=1400 audit(1782521251.175:1921): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.584107][ T28] audit: type=1400 audit(1782521251.235:1922): avc: denied { read append open } for pid=4595 comm="syz.0.251" path="/54/file1/cpuacct.usage_percpu_user" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.609568][ T28] audit: type=1400 audit(1782521251.285:1923): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1