last executing test programs: 21m50.581157489s ago: executing program 32 (id=921): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = memfd_create(0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(r4, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) writev(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000980)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r5, 0xb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c"], 0x24}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) 21m6.676215256s ago: executing program 33 (id=974): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0xa80, &(0x7f0000002380)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020646b9e97747b761d448d42e0500e6ffffffff07002a001700e9ded674098068a76f20d8a75e000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x1a, 0x18, 0x1, 0x6, 0xe, {0x20000003, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)={'gre0\x00', r8, 0x20, 0x80, 0x8, 0x1, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x21, [@multicast2, @broadcast, @local, @multicast2]}, @generic={0x86, 0x2}, @end, @generic={0x88, 0xf, "c4c652c2d95975a93ec707c13f"}, @lsrr={0x83, 0x13, 0x4a, [@empty, @private=0xa110101, @broadcast, @broadcast]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000900)=""/211, &(0x7f0000000a00)=0xd3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 15m40.400823996s ago: executing program 34 (id=1400): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = memfd_create(0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(r4, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000980)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r5, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c"], 0x24}}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) 15m36.805999154s ago: executing program 35 (id=1405): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = memfd_create(0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(r4, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000980)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r5, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) 14m12.166692467s ago: executing program 36 (id=1518): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = memfd_create(0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(r3, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000980)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r4, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) 12m14.396891624s ago: executing program 37 (id=1685): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0xa80, &(0x7f0000002380)="$eJzs3d1vHOW5APBnNrZjGwQBcoATAZkEBQzkOGv7kCji4pDYm2Q5/qhsRyJSK4KIU0WxSkVaCaJKBKnqVVFRVVVqK1UVl71CohflpspV28te9aJSy39QoV6Fqu1UM7tr7zr7EZu1HdLfL1rvfDzvvM87MztvvN6dN/gyy7KseGxx/vwvdzJZ7j6nZz798KP388d7N2Io9sSLya8jhiMijRj4Z3GuDE7PLC7M9djQ1YiLEXEzIomIvVF77mCkZe5iJD+I+9fnb0bys3i8TbHhTTaOnjL+o+32+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHel6ZlyeSKJ2er8+VfTzoohwLusb2zuk2LU7+STXtUmEUn+iOHhxlDfj+9fX/1o/uNwPFGbe6I28vdwXL/v0X0vPTJQapTvktCOuPbO9auvr66uvFWf35umgz0L7d32tDZvaGvFzlbmq0sL1blTZytpdWkhPXn8ePnYuTNL6ZlqVJYuLC1X5tLpxcqp5YXFdGz6uXTi5MmptDJ+YeH8/NmZ8dlKY+GJ/5ksl4+nr4x/pXJqcWlh/tgr40vT56qzs9X5s0VMvjqPOZGfiP9fXU6XK6fm0vTyldWVqV5J5kETbdckrUGTvbY0WZ6cnJiYHInjL5588US5PFBfMDnRWFDeIG6L2P2Tln77+R1H/qrv12/4Akr1/j9moxrzcT5ejbTtv+mYicVYiLk265L17TX6/yPHKl3rbe7/G7384+urD0TR/z9Vm3uqU//fIdfe/7KstuWtlm/8uxbvxPW4Gq/HaqzGSrz1hbeYxm9b5z/fuP4fWZZtYbtp3tqDzfugD7mejUrMRzWWYiGqMReniiVpfUkaJ+N4HI9yvBbnbmVZXuOZqMZsVGIpLsRSLEelOKOmYzEqacRyLMRipDEW0/FcpDERJ2MkpiKNSozHhViI8zEfZ2MmThVbuRxXiv0+1SXHtaCJOwma7BJ0W2f+xfr/7G78nyDbrc9XcNi6rN7/D3UMyBpTY9M7lhUAAADQT//9+3hg/8O/+3PEYDxZvC9/pjpbKe92WgAAAEAfFR/XeyJ/Gswi4slI2vz+X9ql5AAAAIC+SIrv2CURMRoHa1O1b0LtCR8CAAAAgHtE8ff/p/Kn0XzqYCRrd0K5uNu5AQAAAP3R+x77PSOS4ajf0zK9VHu+VI+o3+d39Ex1tjI+vTD70kQ8U9xloPimwW1b2xORDBZfP3g+DtWiDo3WnkdbtzicR02MvzQRz8fhekPGns6fnh5rEzlZi3y2Fvlsl8ipPBIA7nWHb++PP8822f8/H0drEUcPDAxFxMCBNj1reb1nHdiNhgIAa3qPsdMa8W69XHP//7/rv/8P1le39P8Px+V/5QtXYjzeiDdjNS7F0eLbBsUnDlrq/eoH9fcM1j6GUI6jPd4NaMT+4UQpjvZ4P2C0aaCXoz3eEajFxtciprb3IADADjvcoR/u1P8XEdH44GCt/z/a9Pt/3P77/9rQQiu+UggAd4W1Eez7OpHtaV6y220EAFrdaS89uFMJAQAAAAAAAAAAAAAAAAAAAAAAAAAAwD2gr7f9H95i8b/Ux/WrLcn6Px5B+4mR+j5oLHl3U3vjvWvvXP9hRDSvKuWN2J6ci0z7u+VSH7aTRcROHa+dm4h9EVveq9Fu1VBEbHvyI/2o4vP6RO21Uep28TjfdS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAknEnnbLSxF7I6IcEcd2Pqvtc2O3E9h5/9c8k9yKW/F2PLB76QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Jvq9/8vRe35vtqiGChFHImIixGR7XaO/XRrtxPok5Etlmu6/39+zCNLYqB22CMZnJ5ZXJjLD38x9kPp0w8/ev+x1uJ777SeIrC0YXCJeg0bY39xf2PqoaLU6MzKtavfevOb6czpKMVQnF4+Mzszd3bx5fUijyYfR6RRezTk+eaP7xz5zQdtWv5x3tL2NtZ7ptg5M7fX+1i70t3r7ebK6spkXtNy5dXlb3/jyttNqx6OQxFPj0WMtdb09fzRoaZDMdittuSz5HvJA/HjuFgc/3xvJFmSH6IHi/aPXL6yujL+xpurlzrktC8ORsSliOGeOa3t6oPF9aSt4qwrDea1loug/Mf+Hm1sr3mMi9oWJzq04aHilBmtt2GopQ2lDnWmndtQ7PCm/V5qTCTJxoym6hkNRWtGj8QzbY50tjei8154pvuRbi/5LPlTci7+GN9tGv+jlB//I9H51dm6iSKy6UzpGFmqRRYtn2xe8drGyL/+5I6ybztMDZv1/ZYXb6np+l8/Vn26HmVJ1+tRU41THWps/7rYUOPGs6LUseFFj7R/Q4n61adjoVqe+2tRHfL8r3ghYuBAt6vibb31C52vKK3lX26/equv/58mY/G3uGH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O6XROxpt7wUcSQi9jXm04hsE5vd22lFaTTZbIp9dWPtx5fc/uJnqWXZe72LJbfiVvbudiUFAAAAAAAAwE47PfPphx+9nz+Kv8fvuZVl9b/vpxEDEbEv+dFIzCwuzPXY0GDExYi4mU8Pdwr6e1bTujQvF/evz9+MyB7cepMAgB7+HQAA//8L2HXs") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r3, 0x8, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020646b9e97747b761d448d42e0500e6ffffffff07002a001700e9ded674098068a76f20d8a75e000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x1a, 0x18, 0x1, 0x6, 0xe, {0x20000003, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)={'gre0\x00', r7, 0x20, 0x80, 0x8, 0x1, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x21, [@multicast2, @broadcast, @local, @multicast2]}, @generic={0x86, 0x2}, @end, @generic={0x88, 0xf, "c4c652c2d95975a93ec707c13f"}, @lsrr={0x83, 0x13, 0x4a, [@empty, @private=0xa110101, @broadcast, @broadcast]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000900)=""/211, &(0x7f0000000a00)=0xd3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 11m10.12062007s ago: executing program 38 (id=1778): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = memfd_create(0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(r3, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000980)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r4, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/419], &(0x7f0000000100)='GPL\x00'}, 0x94) 10m22.547955928s ago: executing program 39 (id=1849): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = memfd_create(0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(r4, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) writev(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000980)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r5, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c"], 0x24}}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) 6m22.878503225s ago: executing program 40 (id=2237): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = memfd_create(0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(r3, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000980)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r4, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) 1m50.573334446s ago: executing program 41 (id=2938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff}, {0x1, 0x9, 0x80}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000202030084b9a165084a4281020000092400028014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 1m47.686450776s ago: executing program 3 (id=3046): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="effd0000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 1m47.624863537s ago: executing program 3 (id=3048): r0 = socket$kcm(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syslog(0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000080)=0x4, 0x7, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) 1m47.494852568s ago: executing program 3 (id=3051): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nogrpid}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x156}, {&(0x7f0000000bc0)="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", 0x1ca}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb42", 0xa9}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2012}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000200)='fd', &(0x7f0000000240)="f3f2a703", 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x50, r1, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m46.593768038s ago: executing program 3 (id=3056): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000000000000000005703c4e3f94ec1b7309947cd96f2590000027c0000"], 0x14}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000) fstat(0xffffffffffffffff, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000000013, 0x2000000000002006, &(0x7f0000002480)) readahead(r0, 0x8000000000000001, 0x101) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000001340)={0x8, 0x8fc4, 0x9, 0xb, 0x0, 0x6, 0x7c, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2a, 0xe, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4000010) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES8=r8], 0x28}}, 0x4010) timer_create(0x1, &(0x7f0000001640)={0x0, 0x2d, 0x0, @thr={&(0x7f00000004c0)="e8305632a39e1c39f728116b3c50c00a00b287c32eeeeaba84df7d2c00b4c1cb6a740a5fbeee759739f21f8eb1bcc65051cbe6c7632205d7220b420040ba22a1a777aa2aa6ee81dd752bc66b902da5aba934d5af9dcd9239879e5451de9198dc7e04c1569714ef4382010bd7beb12016032be8861fd8f94570d12244ade942e0950e5ea974b46f", &(0x7f0000000340)="a4c92fd4edc0cbcf88fa7b57843c121ceb2d819d33cd6c7062e1287952d4ecb39662d3392f7d4faa8a4a80233241382805932e7a3ccdd722cf5dc1108fb65fc9a5c33da350fd779fd00e438a2df8b2dfa620c39b266c487426714de683eb5f844cd3a766c8f3c1c4e69135da84267664209f5a3e068038a5b8dab86428948fe1fdb9bf0a86172ee0d3cc2086a7980200000000000000263e157e86db5e2b562501050f384b6e582ddacd6b4e372f0b60f838fd9725c4f09b93830a"}}, &(0x7f0000001680)) 1m46.248647521s ago: executing program 3 (id=3057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) 1m45.878275385s ago: executing program 3 (id=3061): syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x31}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x20040040) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x8084, 0x1224, 0x0, 0x5, 0x1, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x8) close(r4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000620000300012800b00010065727370616e00002000028004001200060010004e23000006000f"], 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 1m45.826788896s ago: executing program 42 (id=3061): syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x31}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x20040040) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x8084, 0x1224, 0x0, 0x5, 0x1, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x8) close(r4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000620000300012800b00010065727370616e00002000028004001200060010004e23000006000f"], 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 1m21.383452006s ago: executing program 8 (id=3202): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40142, 0x20a) close_range(r0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m21.283780437s ago: executing program 8 (id=3203): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 1m21.114041279s ago: executing program 8 (id=3204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r3, &(0x7f0000005640)=ANY=[@ANYRES16=r5], 0x69) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m20.138256829s ago: executing program 8 (id=3212): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 1m19.861144992s ago: executing program 8 (id=3214): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000e400)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x2}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1e65c99de5cd9ce1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000130700000000000000000a01010000000000680e000000000000ac1e010100000000000000ff"], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 1m18.794905853s ago: executing program 8 (id=3229): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1m18.548035415s ago: executing program 43 (id=3229): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1m10.796534478s ago: executing program 0 (id=3303): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x209, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x8, 0x0, 0x0, 0x20000000}}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m10.65395065s ago: executing program 0 (id=3306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 1m10.039131056s ago: executing program 0 (id=3308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.927812457s ago: executing program 0 (id=3311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2263804, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 1m9.874090268s ago: executing program 0 (id=3313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) 1m9.149710176s ago: executing program 0 (id=3332): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 1m9.075109896s ago: executing program 44 (id=3332): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 29.306063669s ago: executing program 7 (id=3962): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0xffffffff) 29.288055759s ago: executing program 7 (id=3964): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00', 0x6}], 0x1}}], 0x1, 0x40444c4) 29.22626587s ago: executing program 7 (id=3966): r0 = creat(0x0, 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 28.987073623s ago: executing program 7 (id=3971): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 28.906239323s ago: executing program 7 (id=3973): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x4000000, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80, 0xfffffffc, 0xdc66}}) 28.30348053s ago: executing program 2 (id=3985): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000280), 0x0}, 0x20) 28.24603391s ago: executing program 2 (id=3986): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, 0x0, 0x0) recvfrom(r1, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) sendto(r1, &(0x7f00000007c0)="5bea", 0x2, 0x8001, 0x0, 0x0) 28.24573247s ago: executing program 7 (id=3987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r1, @ANYBLOB="24002f80080001"], 0x40}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 28.24544345s ago: executing program 2 (id=3988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x353a, 0x1}}, 0x20) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 28.21105519s ago: executing program 45 (id=3987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r1, @ANYBLOB="24002f80080001"], 0x40}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 28.207725591s ago: executing program 2 (id=3990): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 28.132947702s ago: executing program 2 (id=3992): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x891e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f5e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80000) 27.765930355s ago: executing program 2 (id=3998): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000) 27.734959775s ago: executing program 46 (id=3998): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000) 4.908674908s ago: executing program 9 (id=4181): socket$kcm(0xa, 0x2, 0x3a) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syslog(0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) 4.844891069s ago: executing program 9 (id=4184): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000200)={[{@inlinecrypt}, {@inlinecrypt}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7a4f1rL0xa2+8/nykybz35sf3+xzPeGb3aSaAc+v5iHgjIj5M0/SliJjN20v5FK3OlK33/sN3l7MpiTR9629JJHlbtlqaXtjb5+V8s+mI+NpXIr6ZPBJwOp/v7N5eqtdrm3m12ly/U93a2b2+tr60WlutbSwszL+6+NriK4s3htLPKxHx+pf+9P3v/PTLr//ys+/88eZfrn0rS2smX97txzFMHraw0/XyhemeDTaPGexJlPWn/EFeuTjYNvdOMiEAAPrKrvE/EhGfioiXYjYmDr+cBQAAAM6g9Asz8UESkRab6tMOAAAAnCGl9hjYpFTJxwLMRKlUqXTG8H4sLpXqja3mZ241tjdWOmNl56JcurVWr93IxwrPRTnJ6vPt8n795Z76QkQ8HRHfm73YrleWG/WVUX/4AQAAAOfE5Z77/3/Odu7/D5ecTnIAAADA8MyNOgEAAADgxLn/BwAAgLFWHnUCAAAAwIn76ptvZlPaff/1yts727cbb19fqW3drqxvL1eWG5t3KquNxmr7mX3rR+2v3mjc+VxsbN+tNmtbzeqVnd2b643tjebNtZg+lQ4BAAAABzz9yfu/TyKi9fmL7SkzNeqkgFMxuVfqPtOz4Oj/w1Od+XunlBRwKiYGWOe9C8XtrhPgbJvsbehzrAPjx/h/4Kg3evQdvPObzqw05HwAAIDhu/qJ4u//j76eb7nkhzPOQQznV8/3/+nsqBIBTl37+/9BB/K4WICxUh5oBCAwzv7f7/+PlqaPlRAAADB0M+0pKVXyj/dmolSqVCKutF8LWE5urdVrNyLiqYj43Wz5Qlafb2+ZHHnPAAAAAAAAAAAAAAAAAAAAAAAAAAB0pGkSKQAAADDWIkp/Tn7VeZb/1dkXZ3o/H5hK/t1+JfBURLzzo7d+cHep2dycz9r/vtfe/GHe/vIoPsEAAAAAenXv09vzf406GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGzfsP313uTgOsfnFYcf/6xYiYK4o/GdPt+XSUI+LSP5KYfGS7JCImhhC/dS8iPl4UP8nS2gtZFH8YP4TWvaSVthXGj7n8p1AU//IQ4sN5dj87/7xRdPyX4vn2vPj4m4z4n/px9T//xd75b6LP8X9lwBjPPPh5tW/8exHPTBaf/7rxkz7xXxgoejm+8fXd3X5L0x9HXO3+/Wmf8R6NsF+qNtfvVLd2dq+vrS+t1lZrGwsL868uvrb4yuKN6q21ei3/tzDGd5/9xYeH9f9S4d+/JM+mf/9fLNjfREH+/3lw9+FHu5XWwfjXXiiI/+uf5GscjF/K43w6L2fLr3bLrU75Uc/97LfPHdb/lf3+lx/n//9av532OnCgPDvYrw4AcCK2dnZvL9Xrtc2xLWR36U9AGscpTMUTkcb4FSaiU/h21vJgWHtO0zTNjqmCRfcjYpD9JDHknpaK89kv9D0DjPrMBAAADNv+Rf+oMwEAAAAAAAAAAAAAAAAAAIDz6zQet9Ybc/8RyMkwHqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU/w0AAP//lr3ZLg==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x3, 0x1731b, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000042c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYBLOB="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"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000340)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x9, 0x28, 0xffffffffffffffff, 0x2000000}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x48501, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@noauto_da_alloc}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r5, 0x2285, 0x0) socket$packet(0x11, 0x3, 0x300) 4.439026153s ago: executing program 6 (id=4195): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000200)={[{@inlinecrypt}, {@inlinecrypt}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x3, 0x1731b, 0x3}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000042c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYBLOB="f166f402daa22df71431047c165cfeb094454a4a5c6fce60cd08c9168a85dca483faf7b5fac5de13946e1e6830820248bff93029510ff30e671b9e1f858d3710937e892b950a867949502ca52d6cc220795a266126b679fd8751c7acc6ae67bc594fb4a73a119a2ebca6056f965d15dce97d35776538454a6dc2e7ff1e9a320bf15192ee533b9f934f30e33454da34806177c5529977b4a3b5adb7f00864c946e94f4a7d212387f184c6a262eb5c36a12134d96198501457fc3dbccb2d2ead52ac0b2c8fe2dc118f82ff839696a5b6a6614948cf4aec96ce322be305b8312c16e55be2c63e2d133a649558255fcd9c2e916d80cd948249a957edd2a422ae39f2d27536f94f6289662ac8c125da1a78d5dbd1cb7e9cb3c42cdd409973a19d7ddf022701e9e3437c6f3e212524a67bdeba68c3fc9b56179d5cb2fd34a7c13357c8cb1e07fa7f08986c15d3fda002de63269a80f54fb1c89b6f6fbd6285b87956c34254e757dd650f1dd6e4c216c3e2eedbdf34682f30e4439e35a3ba7d70b54efa575b2f953c718b3e17f48d8bffb367b7f2287c2288eacf8f82a9a4c9569be09b823bedb83e9afbf4969e6eece2daf53be10b1cbaf16f9506936f2874f6f841093ae08badebb7c063f3c8f5bb3ba260a1efd543e804e54911464f7c7cf51a032e3cd15a718ad19cfd05f4d72d180dfa59f3a575075e5d6dfbe5e40ca32560cb36fa95b01b92f50c0afc3ca943b2e413e1aa00a0912bcc09c28a230999aa36a06049b9a714473d357f69398c6af7256a7981eb21dde043f00b6236d5e1788b559f1a544fbce24ebf0e5c26b980b48a6aa3037f9bff1699bc21c5c2af1201adcb548d8f82d0f1dec0b0a0733978e2b729ea088c9f43c6abc5dc269ffb4d9ba08772d6d6ea62f50ff8d80c540ceaff73fe0ef4888481a53080f25ab514121836c4fa357c53122c0f6419e0ae4ed23618bc59f5a99c146fb79882465e4a349a49964e8b95b256cc8c9e52ac99debed20cd42a876f58f1e630012e25dbc814566dae51f282c49624a47899422a83d157299b64a60123f4e83f7452abbce5df92e154e3a83e22972be54ff1c28747f8ff5c01ed6bd3f6486ca74c0948b807d6716037c0edd68f836e3d5c8bc20ebaa03f61dc01aa9189f101dd0b68aa4d3e449c243c4fd563b15f0bf37d54a0ba5b34af15bae70c9b22e33f2cf816fc2fcbdb2eee7c3c193979ea619fffe6ea86e7892d7983a626580d1f84b60b9df039e6db165f972c120a768287431b04fe4cc4a1c87a5aef35d372407a936cabd540fbcd1d563cc92cfc82048a3d9d96c5575517f17b5c5f7b2bcb04dbc87ed3d64234074c8cdcffaedc007a797ed56e6608740e1789247583f3c5e33b0f2bd3f667164f7421072c86b7049563716f1822b267c7c7bd24a0796ea54d81f333fa42e7f4d96c37c41ea094ba618ee3340af119a9c7b9871d35efc4f81406c0ece261ebfc3df041663bcdf781e2002c0a40d23e744379d101269631bf9468b84fa2db3e8aafbb429018d3040214c39ddb115d827a5752977d30f44a6b10bd78ef6339ad5d80947a4cb57cbdb6b4d84c37f453a5727dc041d0263cb9cba5b76a628a0af32092c0cddacd60cd6c545cb93574d77ca4de0080d8181733e756c5774f7d3ad32e3d2d1e1975448490558f3aa2c8d18fc1b05788fa4048c7fb999d465f6258756a57c4bcd0e9eefefbbde29b781f4710bb16bf7677e58c4d20c7263e5afb0d61550fae9ffbfb4c6e56bbf233e83827025116c3722ffbb40a39aac6e364cace37c580fd8bb85a1dcc81d15de60c14a991b92af22991bac83ca8291826657a683c4e441050d5a8cba21bc5a1a412997b40a9cf4ac56beeab26e86812015a301b9a52cab02723f4a95ac7e338e05191cd5f0fe1d956a7371af6f8ea5437f087ce42610c39a67a266e17e196f60c6ab1ea81a55ddd9568b7897306225b24557fad5b7ce4def701befdcc3c39e213f62499c4935ff49dcf845ee9bf6d326821e0c116c141023dd0ad7cc993f34a43ccef379507dd52e80626106667cf8187519ef89c6aef9ed4c5137ac2b25d399d2c49e840ff97d04863f641fb1d8074ee3968592eebd27656a289ef02cfa70b41425948d2031e89098e31cfbfaed14e5edfbd7923cf6f6d003c5bf8370fc3e7637a2a21244eb7fc5aea3385e8d15c9adcb9e256dd9806b7ce284096c8b622a8ee94cc83dd4a66cd35c6599c918557d5cd780900928f1ef052f2f2a5b0bc4bd9811a7de382611a87d5c89d634ea849d66cdb9379c1387c199d7547cbd45787cd8841e1a177091b9456dc6aea672ce857e2efcb9ce7bf969e43d135ae0a55064f666527be219ef5b6df1e98efbd60a5f132b6d16323744fa285b5a28960fe820b0e7a7e633c6e13d8806dc5f8e7d9506b39a6069c95169b589e9d83e4c61a401bb87ca4446a1a2b316ffb02cc456769c89b28363c09d3c065ab15c3c4ae507a39aa6210e5fe0cec524f6ebabdd759951f5abe7d2c760f313ca37ed3b55f143e0bf127b04d3ad427f867408423f3d0ac0946c6d29f8c7b1374cc44d93181a6b4f712fb01f212f4587c2eb3b48db690dc6103eaa22ed8ecf905c93112c7f24c788bbd05a00b52a95391204ea6fddf5a822f3d4be9b4a9035fa64030e56ae420052fe380852432eb2ba5ab573d8474fe70ae3303aa1defbb1a6c6affa70c062cce8d6a7c6b0b46b6095b0a327d5c96726807a99780c111ec4f1cdad4c7f2b7a1998643c4833072044da54abcd098814b52b9fb9548c1c449a7ba53a6dbddda7ecf5dd6eb918742f2f331c05526f6eae9766571382affc04ff822332df9ce097f4a7cbebfc1fbd068c75d343074ad841c83e35b8a2427a7400f2923fdea8350caa3d9eb4af6123354611943ca8e391d2e96c55c8f1f4db82973fcbe7bba47d6500a4a368faf139f244c5bd7c386d54f011aa2307b552fdee46aae1fb8a2b75d5e9c1ea45c327431f7750394fa00d176c39bd76a7b7ec4dac21653cd7c46de0ca242e6a9686d0d0260ffba9173b5ce3b40bbe1e9c6d762bd38a3f9ceebee063b97a75e43ff86876856894f32c39c38915d019b05737dfd9b65a75c4dfcd72d18e14cea22267a03232b7424e57737169a01780561d73d4469ef1eeb1b9188a4f00918dbfbdd36c0cbe0ddfe96bd914209c3d6b24da2887846d8913703f603314cf038ddca98f74b9eb506d840cb1cb62fae717c339023e46f200b4c13d7b9d4ac0727915ddaed6095bb199097e8f5d25ca136dd7ff2e78b28cead00b6c6ae55545d4a4f4100d38a67e35ae2f7c04700ae4019a5726dccb8e65f89f7719b883426c93bc4054161543cca37b91dd9757910f37df7dc2188a9846334188167b05fe6b4cf8cfe1ac8b89802bb7e94529f3aafb9ac88ac7c07fa8815d4ccfe6aa53774f038cdddeab9ea5616b5d1ad8278a59718f8aa48e52d5f74625c5380458a8f8409e8bea1a67ecfa7eef6c7aaf4f9b7879b118a350bda230683d1b455cae11b379f305b86e6fc6f309495c9425816fda361b74bdea6fb267ce54c47fd3dc9976fd850412eb8aecf2f50349b6980539aa4b4f8e2744b5a0838edd2e0ac08bdd457c835b440b6c096e9bcc55509e36f3b20fec12327a69bb2a93c756c3673c5d0512cff0cc8117a297e1c006e56ddbc983fcbc3bb886b0094da60058d0ff08f517ff9bdd76534689d21aebcbe28e5490c50a9ad964f2a6808944cf45ab6085cc544b4cc6942d334bcfde57c77e310a1cd8e7d7a2b1b1e6880e20bfe79f94f99768bb903e3185c8fa71ed571ac8f843ff4398f926949321a97cfc1c4d4894f3ad60333369d077b5a5f56e965f04d8117005320e1533a1f6a5992be42c444f1d30659c981baf2a318dd84063d62280b991c5bf2811a215d49baa8d38e63b4315f51944abffa4b642e637d06357e0a9a765bf5707456b4acb64a34d7ac819741ad6c7cf09e1b09ee4f7e33ac12b758e31e58d5cfcd968b7dfa2a8507a7e1e79187604438d9bc015d666693873a0c2ac8b6cf9328df4caf518ac0010f5403655a0f088978a88d547fb79e4ae03846582ca7be00f075f0678818d8bd2cfbcf95e1baf514783b0a703d8afec3addc8b43acdbb9677a924c5c295f5c8babe6333e9165f52bd9ccbb2cefa9cf633cedf639414f48b7a45e7650e5147606a8cde24718b965be755398aaaa865761067ae2adffc94ac9812b13be9024dec28b02e658fde1fdb522ace06e02d8025b4d3dd616e42b82bf06522e37fa9ea1f258d23ccdcd420d0c94c05e05da47a0d05da53be62dd6f6698df508e079c4a2c5d959b5c39529fb65de2f15fc337b5d392b9f577691f835078d7bd426e41255010561678239ff56f8052b547d87ed2bbf1ad0ea39fd8e2bc1fc84b763fc84e34bdfce384af46025a8e4690e045d20b91136aabd83b8f4b3bd815a1cd8ae88f08c1cc1e54e1600ff8735a5b6a6281e0294838204b3051ddaf3d59b62b00cef343a391a13fe097c2ce666865a5ed652dd798b193c11fa2aa5c0ef9454272c84832f69cafde6c993cf41747bc4aab9833524c366f5c890250a0f6b0ba2c213b31ba3556131ea0ac50dff96eb6de6f24c21c43f03e5f6facb707a2f4dc8fed682ba0d5ac63725b05ab63cc2e96b8ac6a1bc76640562c00dc27c9c9ffd09902072166195312e8b2003da299f2afc833bd81b8c2acaa737db967c1b46316935678d0e1b7befe3484a9752ff89486d773fc1965c3f6889721b565b4879204cb1c74296fe4e7e851c994e227581f7cf1c916001e9805ed9d3c04f55961c3b1ebabaa75491bdb742ff312470a45b9d630b272cbb9d9ed41ac96d6fd5cf55cc3133a153a30a3c6469953b656113cd929dc0177283bb754545dcb4d81054c5b336abe89654edcd8e7f962003b31d697ce8d4dfcbce6468af23298e8893c0b764e34cc39141621f93fbd6828639824a757cdf4d1176c980e1a5ddc6c32c8891e34796454fd7cdab7241775cf0f74947eb79b8a7a6e6f7fb50007875f9115a9b383a519f3da86444464d7a7a7380f1f038a8b41777d41ddc77df2d556bcd5c54b3e88ca71a9ba68e1122a418d84b9ec8269f6c0e69e95b585106c774cc565851b87f6815e1b4ef2e7b3657b52963ef09d72527f96812f3a38a64b2f38fb8b06a8ad749e13426db4236226efcbcb534c63238523618e08030152ed3f7662cfd1f2fc3471d7d2ec1fe065753c8c367dbfaa94ab921cc13beda279e662466275e9785f59945fabe638aae903a3cd980f5bed3b793cca2a78a978b12378ad4c035788555975cd058eb264efe3a298e0fc9656d0b0c6ac526c4e5244600f35d7a0f1ead2688cf824cb0e494dfae5af2aa930fec411de923c962e7e7833ca102b1e6dd9b13a63c2bd650c2f837ca0c443b86d65fe3f3d4d5626ccb390edea08482ecfd93fabb67331b2a7f0d62e9f3636b6447c199dbd8c9dfdaa974081d7089537bec902576efc97744228f77b7222a091942bd424609d25718f4903c431932c603ec1368459a10c9a725d21684b6cdb958da670e1321fcc051a5e96efd0478d8fb652f689fdf44345c70135e786b4a65b5468da70209b3d96e29877973a9230ce1fb475a11fbb7cb613d604338b547dba85567a287f946e43fc16381518992709d30dc8d723b20336542da8a435cfb791cd2db907dc4186df6c040176ba9ff5d649596a1ad5f0ecf63294eb9816555"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000340)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x9, 0x28, 0xffffffffffffffff, 0x2000000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x48501, 0x0) write$rfkill(r5, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x1}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x268, 0xa, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x1d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@noauto_da_alloc}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r7, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000040) 3.860158779s ago: executing program 9 (id=4209): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 2.793385441s ago: executing program 9 (id=4213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.774584091s ago: executing program 6 (id=4214): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.666976172s ago: executing program 9 (id=4215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 1.614189783s ago: executing program 6 (id=4216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 1.403911136s ago: executing program 4 (id=4220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd2d, 0x234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}]}, 0x1c}}, 0x0) 1.371888126s ago: executing program 6 (id=4221): syz_open_procfs(0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffa83) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0x7fff) 1.313159546s ago: executing program 4 (id=4224): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.192257588s ago: executing program 5 (id=4225): close(0xffffffffffffffff) r0 = socket(0x2b, 0x1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.069685749s ago: executing program 9 (id=4226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0xffffffff, {0xa}}, 0x14}}, 0x20008080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x8a) socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x6, 0x6, @random="a55378321800"}, 0x14) eventfd(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000200)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@nodelalloc}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe4a}}, {@journal_dev={'journal_dev', 0x3d, 0xffffffffffffffff}}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e7, &(0x7f0000000780)="$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") ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) openat$cgroup_devices(r5, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) pwritev(r5, 0x0, 0x0, 0xffffff01, 0xa) 1.069262029s ago: executing program 5 (id=4227): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 812.559801ms ago: executing program 5 (id=4228): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 753.198662ms ago: executing program 4 (id=4229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 729.359642ms ago: executing program 5 (id=4230): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0), 0x106}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 679.407763ms ago: executing program 5 (id=4231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x200048d0) 625.920934ms ago: executing program 4 (id=4232): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r0, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a000000060000000000000604000000005d17"], 0x0, 0x2e, 0x0, 0x1, 0x18404cbc}, 0x28) r3 = socket$inet6(0xa, 0x3, 0x8c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x2001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 514.380585ms ago: executing program 5 (id=4233): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffa83) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) sendfile(r0, r2, &(0x7f00000001c0)=0x7, 0x7fff) 445.468436ms ago: executing program 4 (id=4234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd2d, 0x234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}]}, 0x1c}}, 0x0) 373.794466ms ago: executing program 1 (id=4235): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) mkdir(0x0, 0x18b) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x7f, 0x7, 0x5, 0x6, 0x1b, "f5e108e145d9b44d27e9e9291b9255212c5480"}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000300)=r8) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 349.342397ms ago: executing program 4 (id=4236): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001", @ANYRESHEX], 0xd4}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_names='erspan0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r5, 0x10040) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) 292.577877ms ago: executing program 6 (id=4237): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x40009}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbb"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x2200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 292.108487ms ago: executing program 1 (id=4238): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x40009}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbb"], 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x2200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 197.935839ms ago: executing program 1 (id=4239): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 173.461399ms ago: executing program 1 (id=4240): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x8522c000) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000008) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x0, 0x3, 0x1, {0xa, 0x4e21, 0x5, @private2, 0x2}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 133.259079ms ago: executing program 6 (id=4241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8000080}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 37.85895ms ago: executing program 1 (id=4242): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290080004300e6e8b685a7feffffff0024000000"], 0x40}}], 0x1, 0x4888) 0s ago: executing program 1 (id=4243): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x5a) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) kernel console output (not intermixed with test programs): 00-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1687.124284][T21456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1687.170373][T21456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1687.182354][T21456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1687.208210][T21456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1687.219287][T21456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1687.235766][T21456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1687.237384][T21602] loop0: detected capacity change from 0 to 512 [ 1687.250696][T21456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1687.258091][T21602] EXT4-fs: inline encryption not supported [ 1687.284427][T21602] EXT4-fs: inline encryption not supported [ 1687.292962][T21456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1687.301112][T21602] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1687.335477][T21602] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1687.354137][ T3025] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1687.369466][T21611] loop8: detected capacity change from 0 to 1024 [ 1687.373897][T21602] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3054: bg 0: block 248: padding at end of block bitmap is not set [ 1687.393432][T21602] loop0: lost filesystem error report for type 5 error -117 [ 1687.402099][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1687.405344][T17111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.409642][ C1] EXT4-fs (loop0): last error at time 1777943319: ext4_validate_block_bitmap:441 [ 1687.421518][T21611] EXT4-fs: Ignoring removed nobh option [ 1687.425323][ C1] [ 1687.444851][T21602] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3054: Failed to acquire dquot type 1 [ 1687.476096][T21602] loop0: lost filesystem error report for type 5 error -28 [ 1687.492285][T21611] EXT4-fs: Ignoring removed bh option [ 1687.494528][T21602] EXT4-fs (loop0): 1 truncate cleaned up [ 1687.500405][T21611] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1687.515976][T21617] loop3: detected capacity change from 0 to 512 [ 1687.537534][T21602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1687.548799][T21456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.582262][T21456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.583461][T21617] EXT4-fs (loop3): 1 truncate cleaned up [ 1687.601349][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.608661][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.617873][T21611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1687.632618][T21617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1687.654802][T21602] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1687.664345][ T1916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.671461][ T1916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.763956][T17111] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1687.829716][T17111] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1687.860196][T11037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.875187][T17111] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1687.944278][ T3025] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1687.953998][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.999367][T21456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.055523][T21669] xt_hashlimit: size too large, truncated to 1048576 [ 1688.094116][T17111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.106654][ T1916] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.167112][ T1916] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.214117][ T1916] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.263992][ T1916] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.325254][T14491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1688.385024][T21708] FAULT_INJECTION: forcing a failure. [ 1688.385024][T21708] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.406532][T21708] CPU: 1 UID: 0 PID: 21708 Comm: syz.0.3063 Not tainted syzkaller #0 PREEMPT(full) [ 1688.406567][T21708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1688.406582][T21708] Call Trace: [ 1688.406590][T21708] [ 1688.406600][T21708] __dump_stack+0x1d/0x30 [ 1688.406629][T21708] dump_stack_lvl+0x95/0xd0 [ 1688.406702][T21708] dump_stack+0x15/0x1b [ 1688.406737][T21708] should_fail_ex+0x263/0x280 [ 1688.406805][T21708] should_failslab+0x8c/0xb0 [ 1688.406885][T21708] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1688.406922][T21708] ? skb_clone+0x151/0x1f0 [ 1688.406998][T21708] skb_clone+0x151/0x1f0 [ 1688.407025][T21708] netlink_trim+0x101/0x1c0 [ 1688.407054][T21708] netlink_broadcast_filtered+0x4c/0xcd0 [ 1688.407086][T21708] ? should_fail_ex+0xd9/0x280 [ 1688.407169][T21708] ? skb_put+0xa9/0xf0 [ 1688.407187][T21708] ? tcf_action_dump+0x156/0x1d0 [ 1688.407219][T21708] nlmsg_notify+0xcf/0x170 [ 1688.407250][T21708] rtnetlink_send+0x48/0x60 [ 1688.407320][T21708] tc_ctl_action+0x735/0x830 [ 1688.407369][T21708] ? __mutex_lock_slowpath+0xa/0x10 [ 1688.407442][T21708] ? __pfx_tc_ctl_action+0x10/0x10 [ 1688.407480][T21708] rtnetlink_rcv_msg+0x6a7/0x720 [ 1688.407511][T21708] netlink_rcv_skb+0x123/0x220 [ 1688.407581][T21708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1688.407639][T21708] rtnetlink_rcv+0x1c/0x30 [ 1688.407670][T21708] netlink_unicast+0x5a8/0x680 [ 1688.407836][T21708] netlink_sendmsg+0x5c8/0x6f0 [ 1688.407870][T21708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.407917][T21708] ____sys_sendmsg+0x563/0x5b0 [ 1688.407946][T21708] ___sys_sendmsg+0x195/0x1e0 [ 1688.407982][T21708] __x64_sys_sendmsg+0xd4/0x160 [ 1688.408022][T21708] x64_sys_call+0x194c/0x3020 [ 1688.408052][T21708] do_syscall_64+0x12c/0x3b0 [ 1688.408137][T21708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.408163][T21708] RIP: 0033:0x7f2fd185cdd9 [ 1688.408181][T21708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.408200][T21708] RSP: 002b:00007f2fd02af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.408276][T21708] RAX: ffffffffffffffda RBX: 00007f2fd1ad5fa0 RCX: 00007f2fd185cdd9 [ 1688.408295][T21708] RDX: 0000000000000880 RSI: 0000200000000300 RDI: 0000000000000003 [ 1688.408355][T21708] RBP: 00007f2fd02af090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.408374][T21708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.408389][T21708] R13: 00007f2fd1ad6038 R14: 00007f2fd1ad5fa0 R15: 00007ffd1db812e8 [ 1688.408444][T21708] [ 1688.410018][T21456] veth0_vlan: entered promiscuous mode [ 1688.540107][T21726] loop0: detected capacity change from 0 to 512 [ 1688.548751][T21456] veth1_vlan: entered promiscuous mode [ 1688.683923][T21726] EXT4-fs: inline encryption not supported [ 1688.690371][T21726] EXT4-fs: inline encryption not supported [ 1688.726736][T21726] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1688.803996][T21732] loop2: detected capacity change from 0 to 512 [ 1688.811513][T21732] ext2: Bad value for 'journal_dev' [ 1688.844969][T21726] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1688.986869][T21726] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3065: bg 0: block 248: padding at end of block bitmap is not set [ 1689.026547][T21456] veth0_macvtap: entered promiscuous mode [ 1689.059170][T21456] veth1_macvtap: entered promiscuous mode [ 1689.066471][T21726] loop0: lost filesystem error report for type 5 error -117 [ 1689.071324][T21726] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3065: Failed to acquire dquot type 1 [ 1689.078825][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1689.078846][ C0] EXT4-fs (loop0): last error at time 1777943321: ext4_validate_block_bitmap:441 [ 1689.088803][T21456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.113308][T21726] loop0: lost filesystem error report for type 5 error -28 [ 1689.114829][T21726] EXT4-fs (loop0): 1 truncate cleaned up [ 1689.151364][T21726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1689.167574][T21726] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1689.183825][T21726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.196346][T21726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.224661][ T1916] bond0 (unregistering): Released all slaves [ 1689.227836][T21726] Cannot find del_set index 29 as target [ 1689.254067][T21456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.272576][ T1916] hsr_slave_0: left promiscuous mode [ 1689.278513][ T1916] hsr_slave_1: left promiscuous mode [ 1689.287608][ T1916] veth1_macvtap: left promiscuous mode [ 1689.294715][ T1916] veth0_macvtap: left promiscuous mode [ 1689.300513][ T1916] veth1_vlan: left promiscuous mode [ 1689.308660][ T1916] veth0_vlan: left promiscuous mode [ 1689.406507][ T8621] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.416345][ T8621] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.426102][ T8621] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.460359][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1689.460379][ T28] audit: type=1400 audit(1777943322.012:2534): avc: denied { mounton } for pid=21456 comm="syz-executor" path="/root/syzkaller.VC1bT4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=62102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1689.499313][ T8621] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.509010][ T28] audit: type=1400 audit(1777943322.022:2535): avc: denied { write } for pid=21742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.543819][ T28] audit: type=1400 audit(1777943322.052:2536): avc: denied { write } for pid=21753 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.571384][T21758] loop7: detected capacity change from 0 to 1024 [ 1689.585023][T21758] EXT4-fs: Ignoring removed nobh option [ 1689.596538][T21758] EXT4-fs: Ignoring removed bh option [ 1689.605320][T21758] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1689.638577][T21758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.659326][ T28] audit: type=1400 audit(1777943322.212:2537): avc: denied { write } for pid=21757 comm="syz.7.3028" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1689.700384][ T28] audit: type=1400 audit(1777943322.252:2538): avc: denied { write } for pid=21756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.714397][T21690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.727785][T21456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.731206][T21690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.748194][T21690] bridge_slave_0: entered allmulticast mode [ 1689.756000][T21690] bridge_slave_0: entered promiscuous mode [ 1689.763193][T21690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.770340][T21690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.777818][T21690] bridge_slave_1: entered allmulticast mode [ 1689.792797][T21690] bridge_slave_1: entered promiscuous mode [ 1689.793329][ T28] audit: type=1400 audit(1777943322.342:2539): avc: denied { write } for pid=21777 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.833573][T21690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.851212][T21690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1689.891613][T21690] team0: Port device team_slave_0 added [ 1689.899539][T14491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1689.905797][T21690] team0: Port device team_slave_1 added [ 1689.938784][T21690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.953755][T21690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.985163][T21690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.997329][T21690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.001547][ T28] audit: type=1400 audit(1777943322.552:2540): avc: denied { write } for pid=21781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.028371][T21690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.055172][T21798] loop0: detected capacity change from 0 to 1024 [ 1690.057248][ T28] audit: type=1400 audit(1777943322.582:2541): avc: denied { map } for pid=21788 comm="syz.7.3069" path="socket:[63043]" dev="sockfs" ino=63043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1690.061545][T21690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.097909][ T28] audit: type=1400 audit(1777943322.582:2542): avc: denied { read } for pid=21788 comm="syz.7.3069" path="socket:[63043]" dev="sockfs" ino=63043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1690.100089][T21798] EXT4-fs: Ignoring removed nobh option [ 1690.126490][ T28] audit: type=1400 audit(1777943322.612:2543): avc: denied { write } for pid=21801 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.131024][T21798] EXT4-fs: Ignoring removed bh option [ 1690.169760][T21798] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1690.200377][T21690] hsr_slave_0: entered promiscuous mode [ 1690.201232][T21798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1690.207132][T21690] hsr_slave_1: entered promiscuous mode [ 1690.325985][T14491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.373391][T21821] loop0: detected capacity change from 0 to 1764 [ 1690.719590][T21844] loop0: detected capacity change from 0 to 4096 [ 1690.844126][T21844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1691.032096][T21644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1691.126494][T21690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1691.162668][T21690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1691.187199][T21690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1691.220605][T21690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1691.231112][T21855] loop8: detected capacity change from 0 to 512 [ 1691.246355][T14491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.254248][T21855] EXT4-fs: Ignoring removed bh option [ 1691.271330][T21690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1691.285412][T21855] EXT4-fs (loop8): 1 truncate cleaned up [ 1691.292904][T21690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1691.314516][T21855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1691.314850][T21865] loop2: detected capacity change from 0 to 1764 [ 1691.334766][T21690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1691.348165][ T1037] IPVS: starting estimator thread 0... [ 1691.371595][T21866] capability: warning: `syz.0.3076' uses deprecated v2 capabilities in a way that may be insecure [ 1691.388048][T21690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1691.426667][T21858] syzkaller0: entered promiscuous mode [ 1691.432554][T21858] syzkaller0: entered allmulticast mode [ 1691.472296][T21867] IPVS: using max 2112 ests per chain, 105600 per kthread [ 1691.801630][T21887] loop2: detected capacity change from 0 to 4096 [ 1692.275899][T21690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.287423][T21690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.307126][T21690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1692.317574][T21690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1692.342873][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.350055][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.362308][T21887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1692.367905][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.382246][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1692.411199][T21892] loop0: detected capacity change from 0 to 512 [ 1692.424715][T21892] EXT4-fs: inline encryption not supported [ 1692.433598][T21892] EXT4-fs: inline encryption not supported [ 1692.464004][T21892] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1692.554069][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.568992][T21892] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1692.587178][T21892] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3078: bg 0: block 248: padding at end of block bitmap is not set [ 1692.602413][T21892] loop0: lost filesystem error report for type 5 error -117 [ 1692.606196][T21892] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3078: Failed to acquire dquot type 1 [ 1692.613677][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1692.613708][ C0] EXT4-fs (loop0): last error at time 1777943325: ext4_validate_block_bitmap:441 [ 1692.640980][T21892] loop0: lost filesystem error report for type 5 error -28 [ 1692.642806][T21892] EXT4-fs (loop0): 1 truncate cleaned up [ 1692.694909][T21892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1692.754236][T21690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.879643][T21892] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1692.902575][T21923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.967635][T21923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.281305][T21933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1693.366009][T21892] Cannot find del_set index 29 as target [ 1693.409842][T11037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.689922][T21950] set_capacity_and_notify: 2 callbacks suppressed [ 1693.689951][T21950] loop7: detected capacity change from 0 to 512 [ 1693.704011][T21950] ext2: Bad value for 'journal_dev' [ 1693.731688][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.335372][T21968] FAULT_INJECTION: forcing a failure. [ 1694.335372][T21968] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.352524][T21968] CPU: 0 UID: 0 PID: 21968 Comm: syz.2.3083 Not tainted syzkaller #0 PREEMPT(full) [ 1694.352600][T21968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1694.352638][T21968] Call Trace: [ 1694.352646][T21968] [ 1694.352655][T21968] __dump_stack+0x1d/0x30 [ 1694.352683][T21968] dump_stack_lvl+0x95/0xd0 [ 1694.352707][T21968] dump_stack+0x15/0x1b [ 1694.352728][T21968] should_fail_ex+0x263/0x280 [ 1694.352790][T21968] should_failslab+0x8c/0xb0 [ 1694.352825][T21968] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1694.352930][T21968] ? skb_clone+0x151/0x1f0 [ 1694.352957][T21968] skb_clone+0x151/0x1f0 [ 1694.352982][T21968] __netlink_deliver_tap+0x2c9/0x500 [ 1694.353019][T21968] ? netlink_attachskb+0x2e2/0x660 [ 1694.353047][T21968] netlink_sendskb+0x126/0x150 [ 1694.353075][T21968] netlink_unicast+0x28a/0x680 [ 1694.353120][T21968] netlink_ack+0x4c8/0x500 [ 1694.353152][T21968] netlink_rcv_skb+0x192/0x220 [ 1694.353182][T21968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1694.353228][T21968] rtnetlink_rcv+0x1c/0x30 [ 1694.353287][T21968] netlink_unicast+0x5a8/0x680 [ 1694.353345][T21968] netlink_sendmsg+0x5c8/0x6f0 [ 1694.353380][T21968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1694.353486][T21968] ____sys_sendmsg+0x563/0x5b0 [ 1694.353513][T21968] ___sys_sendmsg+0x195/0x1e0 [ 1694.353551][T21968] __x64_sys_sendmsg+0xd4/0x160 [ 1694.353637][T21968] x64_sys_call+0x194c/0x3020 [ 1694.353736][T21968] do_syscall_64+0x12c/0x3b0 [ 1694.353766][T21968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.353792][T21968] RIP: 0033:0x7f0e57e1cdd9 [ 1694.353811][T21968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.353885][T21968] RSP: 002b:00007f0e5686f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1694.353919][T21968] RAX: ffffffffffffffda RBX: 00007f0e58095fa0 RCX: 00007f0e57e1cdd9 [ 1694.353970][T21968] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1694.353985][T21968] RBP: 00007f0e5686f090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.354000][T21968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.354015][T21968] R13: 00007f0e58096038 R14: 00007f0e58095fa0 R15: 00007fff364e67b8 [ 1694.354036][T21968] [ 1694.537037][T21690] veth0_vlan: entered promiscuous mode [ 1694.606340][T14491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1694.652236][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1694.652254][ T28] audit: type=1400 audit(1777943327.202:2564): avc: denied { read } for pid=21975 comm="syz.2.3084" name="file0" dev="tmpfs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1694.672274][T21690] veth1_vlan: entered promiscuous mode [ 1694.684054][T21983] loop7: detected capacity change from 0 to 1764 [ 1694.695204][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 1694.738030][ T28] audit: type=1400 audit(1777943327.202:2565): avc: denied { open } for pid=21975 comm="syz.2.3084" path="/272/file0" dev="tmpfs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1694.807375][ T28] audit: type=1400 audit(1777943327.322:2566): avc: denied { ioctl } for pid=21975 comm="syz.2.3084" path="/272/file0" dev="tmpfs" ino=1570 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1694.856447][T21690] veth0_macvtap: entered promiscuous mode [ 1694.867308][T21690] veth1_macvtap: entered promiscuous mode [ 1694.887420][ T28] audit: type=1400 audit(1777943327.442:2567): avc: denied { write } for pid=21974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.894175][T21690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.156131][T21997] loop7: detected capacity change from 0 to 4096 [ 1695.178823][T21997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1695.478069][ T28] audit: type=1400 audit(1777943327.752:2568): avc: denied { write } for pid=21982 comm="syz.7.3086" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1695.529269][T21690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.541672][T22001] loop2: detected capacity change from 0 to 1764 [ 1695.571705][ T28] audit: type=1400 audit(1777943328.122:2569): avc: denied { write } for pid=21996 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1695.711224][T21456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.724388][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.752271][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.002421][T22018] loop2: detected capacity change from 0 to 4096 [ 1696.027965][T22018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1696.037055][ T28] audit: type=1400 audit(1777943328.582:2570): avc: denied { write } for pid=22000 comm="syz.2.3088" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1696.387351][ T28] audit: type=1400 audit(1777943328.942:2571): avc: denied { write } for pid=22007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1696.438241][ T28] audit: type=1400 audit(1777943328.992:2572): avc: denied { getopt } for pid=22012 comm="syz.0.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1696.466268][ T28] audit: type=1400 audit(1777943329.022:2573): avc: denied { write } for pid=22031 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1696.481213][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.509953][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.554620][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.659756][T22033] syzkaller0: entered promiscuous mode [ 1696.666170][T22033] syzkaller0: entered allmulticast mode [ 1697.782154][T22048] loop4: detected capacity change from 0 to 512 [ 1697.789110][T22048] ext2: Bad value for 'journal_dev' [ 1697.818145][T22061] loop8: detected capacity change from 0 to 1024 [ 1697.851571][T22068] loop0: detected capacity change from 0 to 512 [ 1697.858628][T22068] ext2: Bad value for 'journal_dev' [ 1697.879844][T22061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1698.023718][T22061] FAULT_INJECTION: forcing a failure. [ 1698.023718][T22061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1698.093381][T22061] CPU: 1 UID: 0 PID: 22061 Comm: syz.8.3097 Not tainted syzkaller #0 PREEMPT(full) [ 1698.093417][T22061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1698.093432][T22061] Call Trace: [ 1698.093441][T22061] [ 1698.093451][T22061] __dump_stack+0x1d/0x30 [ 1698.093543][T22061] dump_stack_lvl+0x95/0xd0 [ 1698.093568][T22061] dump_stack+0x15/0x1b [ 1698.093590][T22061] should_fail_ex+0x263/0x280 [ 1698.093685][T22061] should_fail+0xb/0x20 [ 1698.093711][T22061] should_fail_usercopy+0x1a/0x20 [ 1698.093747][T22061] _copy_from_user+0x1c/0xb0 [ 1698.093793][T22061] ___sys_sendmsg+0xc1/0x1e0 [ 1698.093820][T22061] ? _raw_spin_unlock+0x9/0x30 [ 1698.093874][T22061] __sys_sendmmsg+0x185/0x320 [ 1698.093923][T22061] __x64_sys_sendmmsg+0x57/0x70 [ 1698.093953][T22061] x64_sys_call+0x27aa/0x3020 [ 1698.093980][T22061] do_syscall_64+0x12c/0x3b0 [ 1698.094050][T22061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.094077][T22061] RIP: 0033:0x7fd5de23cdd9 [ 1698.094097][T22061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.094118][T22061] RSP: 002b:00007fd5dcc97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1698.094143][T22061] RAX: ffffffffffffffda RBX: 00007fd5de4b5fa0 RCX: 00007fd5de23cdd9 [ 1698.094186][T22061] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 000000000000000d [ 1698.094202][T22061] RBP: 00007fd5dcc97090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.094218][T22061] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.094281][T22061] R13: 00007fd5de4b6038 R14: 00007fd5de4b5fa0 R15: 00007fff10876bb8 [ 1698.094304][T22061] [ 1698.376914][T11037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.353324][T22117] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3103'. [ 1699.669830][T22107] loop2: detected capacity change from 0 to 512 [ 1699.728974][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1699.728993][ T28] audit: type=1400 audit(1777943332.282:2584): avc: denied { write } for pid=22140 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.300785][T22142] bond0: option arp_interval: invalid value (18446744073709551615) [ 1700.331260][T22142] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1700.628290][T22149] syzkaller0: entered promiscuous mode [ 1700.645624][T22149] syzkaller0: entered allmulticast mode [ 1700.656935][T22107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1700.693229][T22107] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.859648][T22164] loop4: detected capacity change from 0 to 512 [ 1700.866843][T22164] ext2: Bad value for 'journal_dev' [ 1701.716931][T22175] loop0: detected capacity change from 0 to 512 [ 1701.723967][T22175] ext2: Bad value for 'journal_dev' [ 1701.840519][ T28] audit: type=1400 audit(1777943334.392:2585): avc: denied { mount } for pid=22176 comm="syz.4.3113" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1702.359672][ T28] audit: type=1400 audit(1777943334.912:2586): avc: denied { bind } for pid=22186 comm="syz.7.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1703.326673][ T28] audit: type=1400 audit(1777943335.782:2587): avc: denied { read } for pid=22199 comm="syz.7.3122" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1703.543238][ T28] audit: type=1400 audit(1777943335.782:2588): avc: denied { setopt } for pid=22201 comm="syz.8.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1703.710961][ T28] audit: type=1400 audit(1777943335.782:2589): avc: denied { write } for pid=22201 comm="syz.8.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1703.893189][ T28] audit: type=1400 audit(1777943335.902:2590): avc: denied { open } for pid=22199 comm="syz.7.3122" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1704.012012][ T28] audit: type=1400 audit(1777943335.902:2591): avc: denied { ioctl } for pid=22199 comm="syz.7.3122" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1704.038562][ T28] audit: type=1400 audit(1777943336.402:2592): avc: denied { write } for pid=22178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.077727][ T3025] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1704.126957][ T28] audit: type=1400 audit(1777943336.572:2593): avc: denied { write } for pid=22216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.214590][T22230] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3128'. [ 1704.270067][T22242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3131'. [ 1704.304300][T22246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.345267][T22250] syz_tun: entered allmulticast mode [ 1704.348524][T22246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.376910][T22250] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1704.385912][T22250] mroute: pending queue full, dropping entries [ 1704.618144][T22270] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 1704.618144][T22270] program syz.4.3139 not setting count and/or reply_len properly [ 1704.649814][ T3025] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1705.079697][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1705.079783][ T28] audit: type=1400 audit(1777943337.632:2601): avc: denied { write } for pid=22273 comm="syz.4.3140" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1705.227830][T22277] netlink: 'syz.7.3141': attribute type 13 has an invalid length. [ 1705.271551][ T30] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1705.306787][ T30] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1705.336085][ T30] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1705.365300][ T30] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1705.490447][T22293] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1705.541593][T22299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3147'. [ 1705.565090][ T28] audit: type=1400 audit(1777943338.112:2602): avc: denied { write } for pid=22279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.640145][ T28] audit: type=1400 audit(1777943338.182:2603): avc: denied { write } for pid=22303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.701083][ T3025] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1705.719801][ T28] audit: type=1400 audit(1777943338.242:2604): avc: denied { map } for pid=22306 comm="syz.7.3149" path="socket:[63919]" dev="sockfs" ino=63919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1705.806105][ T28] audit: type=1400 audit(1777943338.242:2605): avc: denied { read } for pid=22306 comm="syz.7.3149" path="socket:[63919]" dev="sockfs" ino=63919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1706.244299][ T28] audit: type=1400 audit(1777943338.802:2606): avc: denied { write } for pid=22320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.304343][T22338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.310910][ T28] audit: type=1400 audit(1777943338.842:2607): avc: denied { write } for pid=22335 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.338309][T22338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.855597][ T3025] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1707.033108][T13851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1707.077339][ T28] audit: type=1400 audit(1777943339.632:2608): avc: denied { write } for pid=22353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.084739][T22365] process 'syz.4.3163' launched './file0' with NULL argv: empty string added [ 1707.136092][ T28] audit: type=1400 audit(1777943339.632:2609): avc: denied { execute } for pid=22362 comm="syz.4.3163" name="file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1707.143362][T22365] Invalid argument reading file caps for ./file0 [ 1707.193756][ T28] audit: type=1400 audit(1777943339.702:2610): avc: denied { execute_no_trans } for pid=22362 comm="syz.4.3163" path="/17/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1707.248586][T22376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.259388][T22376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.465714][T22395] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3172'. [ 1709.494214][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3183'. [ 1709.540557][T22437] netlink: 'syz.2.3186': attribute type 10 has an invalid length. [ 1709.549868][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3184'. [ 1709.698526][T22437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1709.728782][T22437] team0: Port device netdevsim2 added [ 1710.218039][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1710.218065][ T28] audit: type=1400 audit(1777943342.772:2620): avc: denied { write } for pid=22444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.810998][ T28] audit: type=1400 audit(1777943343.362:2621): avc: denied { write } for pid=22469 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.253362][T22473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.296483][T22473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.136259][ T28] audit: type=1400 audit(1777943344.692:2622): avc: denied { write } for pid=22475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.509560][T22499] loop2: detected capacity change from 0 to 7 [ 1712.520430][ T28] audit: type=1400 audit(1777943345.072:2623): avc: denied { write } for pid=22496 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.564409][T22499] loop2: [ 1712.674638][T11297] kernel write not supported for file bpf-map (pid: 11297 comm: kworker/0:0) [ 1712.787645][ T28] audit: type=1400 audit(1777943345.342:2624): avc: denied { write } for pid=22504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.873646][ T28] audit: type=1400 audit(1777943345.422:2625): avc: denied { write } for pid=22527 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1713.142334][ T28] audit: type=1400 audit(1777943345.692:2626): avc: denied { watch } for pid=22528 comm="syz.8.3204" path="/369" dev="tmpfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1713.730689][ T28] audit: type=1400 audit(1777943346.282:2627): avc: denied { mounton } for pid=22552 comm="syz.4.3210" path="/29/file0" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1713.897333][ T28] audit: type=1400 audit(1777943346.392:2628): avc: denied { write } for pid=22533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.036764][T22568] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3213'. [ 1714.492417][T22576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.500740][ T28] audit: type=1400 audit(1777943346.432:2629): avc: denied { write } for pid=22561 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.533988][T22523] syz_tun (unregistering): left allmulticast mode [ 1714.547131][T22576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.847538][ T55] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.051684][ T55] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.263241][ T55] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.449456][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1715.449473][ T28] audit: type=1400 audit(1777943348.002:2633): avc: denied { write } for pid=22604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.510028][ T55] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.560715][ T28] audit: type=1400 audit(1777943348.112:2634): avc: denied { write } for pid=22632 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.439531][ T55] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1716.520385][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1716.722180][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.722600][ T28] audit: type=1400 audit(1777943349.272:2635): avc: denied { write } for pid=22639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.766305][T22671] loop2: detected capacity change from 0 to 7 [ 1716.767324][ T55] bond0 (unregistering): Released all slaves [ 1716.790136][ T55] bond1 (unregistering): Released all slaves [ 1716.926858][ T28] audit: type=1400 audit(1777943349.482:2636): avc: denied { write } for pid=22674 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.077253][ T28] audit: type=1400 audit(1777943349.632:2637): avc: denied { map } for pid=22695 comm="syz.2.3245" path="socket:[65176]" dev="sockfs" ino=65176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1717.102002][T22698] futex_wake_op: syz.7.3246 tries to shift op by 32; fix this program [ 1717.315530][ T28] audit: type=1400 audit(1777943349.832:2638): avc: denied { setopt } for pid=22699 comm="syz.4.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1717.385438][ T55] hsr_slave_0: left promiscuous mode [ 1717.420278][ T55] hsr_slave_1: left promiscuous mode [ 1717.439380][ T28] audit: type=1400 audit(1777943349.992:2639): avc: denied { write } for pid=22686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.468914][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.481396][T22715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.506372][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.518711][T22715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.536984][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.558126][ T28] audit: type=1400 audit(1777943350.022:2640): avc: denied { name_bind } for pid=22714 comm="syz.2.3249" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1717.585567][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.611043][ T55] veth1_macvtap: left promiscuous mode [ 1717.636856][ T55] veth0_macvtap: left promiscuous mode [ 1717.656322][ T28] audit: type=1400 audit(1777943350.152:2641): avc: denied { write } for pid=22717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.679142][ T55] veth1_vlan: left promiscuous mode [ 1717.699209][ T55] veth0_vlan: left promiscuous mode [ 1717.780304][T22726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.799885][T22726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.850558][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1717.861342][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1718.395789][T22634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.403095][T22634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.410438][T22634] bridge_slave_0: entered allmulticast mode [ 1718.418063][T22634] bridge_slave_0: entered promiscuous mode [ 1718.426792][T22634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.434778][T22634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.452520][T22634] bridge_slave_1: entered allmulticast mode [ 1718.496589][T22634] bridge_slave_1: entered promiscuous mode [ 1718.662102][ T28] audit: type=1400 audit(1777943351.152:2642): avc: denied { write } for pid=22728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.687600][T22634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.765983][T22634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.875691][T22634] team0: Port device team_slave_0 added [ 1718.882644][T22634] team0: Port device team_slave_1 added [ 1718.898639][T22634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.905690][T22634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.932704][T22634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.991204][T22634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.008731][T22634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.077433][T22634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.209851][T22634] hsr_slave_0: entered promiscuous mode [ 1719.216266][T22634] hsr_slave_1: entered promiscuous mode [ 1719.222434][T22634] debugfs: 'hsr0' already exists in 'hsr' [ 1719.228178][T22634] Cannot create hsr debugfs directory [ 1720.862093][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1720.862115][ T28] audit: type=1400 audit(1777943353.402:2647): avc: denied { write } for pid=22790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1721.254779][ T28] audit: type=1400 audit(1777943353.502:2648): avc: denied { write } for pid=22825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1721.520671][T22634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1721.578653][T22634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1721.587166][T22634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1721.609702][T22634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1721.631545][T22634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1721.648805][T22634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1721.698534][T22634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1721.753014][T22634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1722.177036][T22634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1722.188248][T22634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.206757][T22634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1722.219262][T22634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1722.317664][T22861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.332227][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.339471][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.356085][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.363322][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.380671][T22861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.472374][ T28] audit: type=1400 audit(1777943355.022:2649): avc: denied { write } for pid=22844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.546445][ T28] audit: type=1400 audit(1777943355.092:2650): avc: denied { write } for pid=22885 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.585028][ T3025] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1722.644699][T22634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1722.851120][ T28] audit: type=1400 audit(1777943355.402:2651): avc: denied { write } for pid=22897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.924954][ T28] audit: type=1400 audit(1777943355.482:2652): avc: denied { write } for pid=22929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.989593][ T3025] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1723.052579][T22634] veth0_vlan: entered promiscuous mode [ 1723.070392][T22634] veth1_vlan: entered promiscuous mode [ 1723.129459][T22634] veth0_macvtap: entered promiscuous mode [ 1723.156249][T22634] veth1_macvtap: entered promiscuous mode [ 1723.197782][T22634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1723.227949][T22634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1723.310822][ T28] audit: type=1400 audit(1777943355.862:2653): avc: denied { write } for pid=22946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.371218][ T117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.401439][ T117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.506306][ T117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.591667][ T117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.685674][ T3025] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1723.982352][ T28] audit: type=1400 audit(1777943356.002:2654): avc: denied { write } for pid=22973 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1724.007046][ T28] audit: type=1400 audit(1777943356.022:2655): avc: denied { write } for pid=22960 comm="syz.4.3305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1724.028097][ T28] audit: type=1400 audit(1777943356.092:2656): avc: denied { mount } for pid=22634 comm="syz-executor" name="/" dev="gadgetfs" ino=3846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1724.280839][ T3025] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1724.323352][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.398484][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.482654][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.570677][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.761366][ T55] bridge_slave_1: left allmulticast mode [ 1724.782547][ T55] bridge_slave_1: left promiscuous mode [ 1724.801871][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.829208][ T55] bridge_slave_0: left allmulticast mode [ 1724.848085][ T55] bridge_slave_0: left promiscuous mode [ 1724.872192][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.078344][T23078] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3335'. [ 1725.219017][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1725.250391][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1725.283335][ T55] bond0 (unregistering): Released all slaves [ 1725.351763][ T55] hsr_slave_0: left promiscuous mode [ 1725.374762][ T55] hsr_slave_1: left promiscuous mode [ 1725.389062][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.407682][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.421277][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.429499][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1725.458690][ T55] veth1_macvtap: left promiscuous mode [ 1725.464868][ T55] veth0_macvtap: left promiscuous mode [ 1725.470569][ T55] veth1_vlan: left promiscuous mode [ 1725.649044][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1725.667703][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1725.978446][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1725.978466][ T28] audit: type=1400 audit(1777943358.532:2668): avc: denied { write } for pid=23123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.016014][ T55] IPVS: stop unused estimator thread 0... [ 1726.053901][ T28] audit: type=1400 audit(1777943358.542:2669): avc: denied { write } for pid=23143 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.186153][T23080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.193467][T23080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.202970][T23080] bridge_slave_0: entered allmulticast mode [ 1726.209626][T23080] bridge_slave_0: entered promiscuous mode [ 1726.211654][ T28] audit: type=1400 audit(1777943358.762:2670): avc: denied { write } for pid=23147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.216759][T23080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.272244][T23080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.282212][T23080] bridge_slave_1: entered allmulticast mode [ 1726.300337][T23080] bridge_slave_1: entered promiscuous mode [ 1726.316540][T23166] futex_wake_op: syz.4.3347 tries to shift op by 32; fix this program [ 1726.368310][T23080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.378206][ T28] audit: type=1400 audit(1777943358.912:2671): avc: denied { bind } for pid=23167 comm="syz.7.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1726.423798][T23080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.444359][ T28] audit: type=1400 audit(1777943358.932:2672): avc: denied { write } for pid=23169 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.478616][T23080] team0: Port device team_slave_0 added [ 1726.491497][T23080] team0: Port device team_slave_1 added [ 1726.508503][T23080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.515616][T23080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.639312][T23080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.651508][T23080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.658566][T23080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.706331][T23189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.711948][T23080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.738897][T23189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.908635][T23198] futex_wake_op: syz.7.3358 tries to shift op by 32; fix this program [ 1726.936665][T23080] hsr_slave_0: entered promiscuous mode [ 1726.942992][T23080] hsr_slave_1: entered promiscuous mode [ 1726.949619][T23080] debugfs: 'hsr0' already exists in 'hsr' [ 1726.955694][T23080] Cannot create hsr debugfs directory [ 1726.963463][T23200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3357'. [ 1727.042803][ T28] audit: type=1400 audit(1777943359.592:2673): avc: denied { write } for pid=23178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.254643][ T28] audit: type=1400 audit(1777943359.762:2674): avc: denied { bind } for pid=23215 comm="syz.4.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1727.293574][ T28] audit: type=1400 audit(1777943359.832:2675): avc: denied { write } for pid=23224 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.357634][T23232] futex_wake_op: syz.7.3369 tries to shift op by 32; fix this program [ 1728.583947][T23080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1728.594085][T23080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1728.623302][T23080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1728.651543][T23080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1728.689980][T23080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1728.806945][T23080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1728.821548][T23080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1728.831259][T23080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1728.854051][T23287] process '/newroot/30/file0' started with executable stack [ 1729.010837][T23080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.053084][T23080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.080533][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.087867][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.115085][ T28] audit: type=1400 audit(1777943361.672:2676): avc: denied { write } for pid=23302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1729.139178][T23334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.162664][T23334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.172935][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.180143][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.193626][ T28] audit: type=1400 audit(1777943361.742:2677): avc: denied { write } for pid=23337 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1729.520718][T23080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.289743][T23427] loop2: detected capacity change from 0 to 7 [ 1730.423724][T23427] loop2: [ 1730.796378][T23080] veth0_vlan: entered promiscuous mode [ 1730.866758][T23080] veth1_vlan: entered promiscuous mode [ 1731.015145][T23080] veth0_macvtap: entered promiscuous mode [ 1731.052694][T23080] veth1_macvtap: entered promiscuous mode [ 1731.069276][T23080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.105974][T23458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.119486][T23080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1731.121825][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1731.121841][ T28] audit: type=1400 audit(1777943363.672:2683): avc: denied { write } for pid=23433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.165480][T23458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.231241][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.245841][ T28] audit: type=1400 audit(1777943363.802:2684): avc: denied { write } for pid=23462 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.257694][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.358132][ T117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.406853][ T117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.489685][T23492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.516696][ T28] audit: type=1400 audit(1777943364.072:2685): avc: denied { write } for pid=23471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.518927][T23492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.568548][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3334'. [ 1731.588010][ T28] audit: type=1400 audit(1777943364.142:2686): avc: denied { write } for pid=23498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.684649][T23512] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3441'. [ 1731.696398][ T28] audit: type=1400 audit(1777943364.252:2687): avc: denied { write } for pid=23502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.745315][ T28] audit: type=1400 audit(1777943364.302:2688): avc: denied { write } for pid=23515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.866827][ T28] audit: type=1400 audit(1777943364.422:2689): avc: denied { write } for pid=23523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.895402][ T28] audit: type=1400 audit(1777943364.442:2690): avc: denied { write } for pid=23538 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.009225][ T28] audit: type=1400 audit(1777943364.562:2691): avc: denied { write } for pid=23541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.057432][ T28] audit: type=1400 audit(1777943364.612:2692): avc: denied { write } for pid=23553 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.203119][T23576] loop2: detected capacity change from 0 to 7 [ 1732.221403][T23576] loop2: [ 1732.390071][T23607] futex_wake_op: syz.6.3460 tries to shift op by 32; fix this program [ 1733.279015][T23662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.287917][T23662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.296579][T23663] futex_wake_op: syz.6.3471 tries to shift op by 32; fix this program [ 1733.409245][T23670] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1733.511952][T23678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.534267][T23678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.682471][T23722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.745773][T23722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.398160][T23770] futex_wake_op: syz.2.3495 tries to shift op by 32; fix this program [ 1735.817726][T23788] loop2: detected capacity change from 0 to 7 [ 1736.268751][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1736.268772][ T28] audit: type=1400 audit(1777943368.822:2711): avc: denied { watch_reads } for pid=23809 comm="syz.6.3505" path="/63" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1736.327904][T23814] Invalid argument reading file caps for ./file0 [ 1736.336956][ T28] audit: type=1400 audit(1777943368.882:2712): avc: denied { write } for pid=23786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1736.410254][ T28] audit: type=1400 audit(1777943368.942:2713): avc: denied { cmd } for pid=23824 comm="syz.6.3510" path="socket:[68880]" dev="sockfs" ino=68880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1736.478327][ T28] audit: type=1400 audit(1777943369.002:2714): avc: denied { write } for pid=23826 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1736.507046][ T28] audit: type=1400 audit(1777943369.012:2715): avc: denied { bind } for pid=23831 comm="syz.7.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1737.150438][T23865] Invalid argument reading file caps for ./file0 [ 1737.218476][ T28] audit: type=1400 audit(1777943369.772:2716): avc: denied { write } for pid=23843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.284856][ T28] audit: type=1400 audit(1777943369.842:2717): avc: denied { write } for pid=23875 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.477274][T23898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.495675][T23898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.545680][ T28] audit: type=1400 audit(1777943370.102:2718): avc: denied { write } for pid=23884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.605407][ T28] audit: type=1400 audit(1777943370.162:2719): avc: denied { wake_alarm } for pid=23906 comm="syz.2.3533" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1737.659078][ T28] audit: type=1400 audit(1777943370.182:2720): avc: denied { write } for pid=23908 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.683771][T23911] Invalid argument reading file caps for ./file0 [ 1738.574705][T23948] netlink: 'syz.6.3545': attribute type 1 has an invalid length. [ 1738.629338][T23948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1738.637507][T23953] Invalid argument reading file caps for ./file0 [ 1738.645510][T23954] Invalid argument reading file caps for ./file0 [ 1738.664632][T23948] vlan2: entered allmulticast mode [ 1738.690033][T23948] bond1: entered allmulticast mode [ 1738.830114][T23983] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3556'. [ 1738.897737][T23995] futex_wake_op: syz.5.3559 tries to shift op by 32; fix this program [ 1738.935991][T24000] loop2: detected capacity change from 0 to 7 [ 1739.147870][T24018] 9pnet_fd: Insufficient options for proto=fd [ 1739.899728][T24036] futex_wake_op: syz.4.3572 tries to shift op by 32; fix this program [ 1739.956545][T24039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.991581][T24039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.209672][T24064] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1740.312406][T24074] syz_tun: entered allmulticast mode [ 1741.279141][T24113] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3599'. [ 1741.330912][T24121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.338337][T24121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.362121][T24121] bridge0: entered allmulticast mode [ 1741.381096][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1741.381161][ T28] audit: type=1400 audit(1777943629.931:2727): avc: denied { write } for pid=24099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.441219][ T28] audit: type=1400 audit(1777943629.941:2728): avc: denied { getopt } for pid=24127 comm="syz.6.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1741.482750][ T28] audit: type=1400 audit(1777943629.991:2729): avc: denied { write } for pid=24133 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.510968][T24141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3607'. [ 1741.667433][ T28] audit: type=1400 audit(1777943630.221:2730): avc: denied { write } for pid=24144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.737760][ T28] audit: type=1400 audit(1777943630.291:2731): avc: denied { write } for pid=24167 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1742.048704][ T28] audit: type=1400 audit(1777943630.601:2732): avc: denied { write } for pid=24178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1742.513799][T24209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.535761][ T28] audit: type=1400 audit(1777943631.091:2733): avc: denied { write } for pid=24207 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1742.558935][T24210] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3624'. [ 1742.587310][T24209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.639832][ T3025] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1742.873664][T24229] syz.6.3623 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1743.087112][ T28] audit: type=1400 audit(1777943631.641:2734): avc: denied { write } for pid=24217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.167512][ T28] audit: type=1400 audit(1777943631.691:2735): avc: denied { write } for pid=24245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.169269][ T3025] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1743.295293][T24259] 9p: Bad value for 'rfdno' [ 1743.480021][ T28] audit: type=1400 audit(1777943632.031:2736): avc: denied { getopt } for pid=24281 comm="syz.2.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1743.678642][T24310] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1743.814910][T24323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.841294][T24323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.957428][T24345] loop2: detected capacity change from 0 to 7 [ 1744.011394][ T3025] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1744.454380][ T3025] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1746.543300][T24463] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3705'. [ 1746.612888][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1746.612907][ T28] audit: type=1400 audit(1777943635.161:2743): avc: denied { write } for pid=24461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1746.671089][ T28] audit: type=1400 audit(1777943635.221:2744): avc: denied { write } for pid=24473 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.360567][ T28] audit: type=1400 audit(1777943635.911:2745): avc: denied { ioctl } for pid=24476 comm="syz.6.3706" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1747.881088][T24513] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1748.566067][T24544] sctp: [Deprecated]: syz.6.3727 (pid 24544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1748.566067][T24544] Use struct sctp_sack_info instead [ 1748.576464][T24547] loop2: detected capacity change from 0 to 7 [ 1748.858411][ T28] audit: type=1400 audit(1777943637.411:2746): avc: denied { bind } for pid=24576 comm="syz.6.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1748.952340][ T28] audit: type=1400 audit(1777943637.501:2747): avc: denied { ioctl } for pid=24580 comm="syz.6.3745" path="socket:[70935]" dev="sockfs" ino=70935 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1749.170618][T24610] loop2: detected capacity change from 0 to 7 [ 1749.230933][T24615] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3760'. [ 1750.518559][T24675] syzkaller0: entered promiscuous mode [ 1750.561727][T24675] syzkaller0: entered allmulticast mode [ 1751.883526][T24709] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3796'. [ 1752.511943][ T28] audit: type=1400 audit(1777943641.061:2748): avc: denied { mount } for pid=24721 comm="syz.4.3802" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1752.861501][T24741] netlink: 'syz.6.3808': attribute type 1 has an invalid length. [ 1753.366779][T24744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1753.375168][T24744] bond2: (slave bond3): making interface the new active one [ 1753.383671][T24744] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1753.393515][T24763] Cannot find del_set index 0 as target [ 1753.456454][T24749] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1753.662215][T24780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3817'. [ 1754.491007][ T28] audit: type=1400 audit(1777943643.041:2749): avc: denied { unmount } for pid=21690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1754.555737][T24790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.609534][T24790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.743348][T24807] loop2: detected capacity change from 0 to 7 [ 1755.214281][ T28] audit: type=1400 audit(1777943643.771:2750): avc: denied { write } for pid=24771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.303978][ T28] audit: type=1400 audit(1777943643.861:2751): avc: denied { write } for pid=24817 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.380975][ T28] audit: type=1400 audit(1777943643.921:2752): avc: denied { read } for pid=24821 comm="syz.4.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1755.517905][ T28] audit: type=1400 audit(1777943644.071:2753): avc: denied { write } for pid=24824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.569089][ T28] audit: type=1400 audit(1777943644.121:2754): avc: denied { write } for pid=24837 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.701844][T24851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.779241][ T28] audit: type=1400 audit(1777943644.331:2755): avc: denied { setopt } for pid=24868 comm="syz.5.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1755.804587][T24862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.830445][T24862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.845814][T24851] team0: Port device netdevsim2 removed [ 1755.866573][ T28] audit: type=1400 audit(1777943644.421:2756): avc: denied { write } for pid=24852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.889170][T24851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.044659][T24851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.125979][T24851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.248017][ T1823] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.272495][ T28] audit: type=1400 audit(1777943644.501:2757): avc: denied { write } for pid=24886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.330865][ T1823] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.364440][ T1823] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.401689][ T1823] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.557373][T24920] syzkaller0: entered promiscuous mode [ 1756.570684][T24920] syzkaller0: entered allmulticast mode [ 1756.615425][T24932] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1756.679069][T24939] netlink: 'syz.4.3858': attribute type 1 has an invalid length. [ 1756.714183][T24939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1756.734016][T24939] bond1: (slave bond2): making interface the new active one [ 1756.743942][T24939] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1756.790057][T24939] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1757.609710][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1757.609750][ T28] audit: type=1400 audit(1777943646.161:2768): avc: denied { write } for pid=25024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1757.906282][T25036] 9pnet_virtio: no channels available for device syz [ 1757.946830][ T28] audit: type=1400 audit(1777943646.441:2769): avc: denied { getopt } for pid=25003 comm="syz.2.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1758.537082][ T28] audit: type=1400 audit(1777943647.091:2770): avc: denied { write } for pid=25035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.665635][ T28] audit: type=1400 audit(1777943647.221:2771): avc: denied { write } for pid=25066 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.006251][ T28] audit: type=1400 audit(1777943647.561:2772): avc: denied { write } for pid=25077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.504970][ T28] audit: type=1400 audit(1777943648.061:2773): avc: denied { write } for pid=25098 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.666475][T25110] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3902'. [ 1759.875978][T25131] loop2: detected capacity change from 0 to 7 [ 1760.188575][ T28] audit: type=1400 audit(1777943648.741:2774): avc: denied { write } for pid=25107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1760.291243][ T28] audit: type=1400 audit(1777943648.841:2775): avc: denied { write } for pid=25147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1760.795209][T25171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1760.804951][T25171] block device autoloading is deprecated and will be removed. [ 1760.875608][T25180] 9pnet_virtio: no channels available for device syz [ 1761.049264][ T28] audit: type=1400 audit(1777943649.601:2776): avc: denied { write } for pid=25155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1761.340767][ T28] audit: type=1400 audit(1777943649.891:2777): avc: denied { write } for pid=25187 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.715972][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1762.715991][ T28] audit: type=1400 audit(1777943651.271:2780): avc: denied { write } for pid=25206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.786400][T25233] netlink: 'syz.7.3936': attribute type 8 has an invalid length. [ 1762.802116][T25233] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3936'. [ 1762.814419][ T28] audit: type=1400 audit(1777943651.371:2781): avc: denied { write } for pid=25234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.174078][T25256] loop2: detected capacity change from 0 to 7 [ 1763.291855][ T28] audit: type=1400 audit(1777943651.791:2782): avc: denied { name_connect } for pid=25257 comm="syz.2.3945" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1763.359244][T25264] netlink: 'syz.7.3948': attribute type 8 has an invalid length. [ 1763.395178][T25264] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3948'. [ 1764.193920][T25297] syzkaller0: entered promiscuous mode [ 1764.226695][T25297] syzkaller0: entered allmulticast mode [ 1764.950436][T25330] syzkaller0: entered promiscuous mode [ 1764.962216][T25330] syzkaller0: entered allmulticast mode [ 1765.152210][ T28] audit: type=1400 audit(1777943653.611:2783): avc: denied { mounton } for pid=25331 comm="syz.7.3971" path="/188/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1765.591308][ T28] audit: type=1400 audit(1777943654.141:2784): avc: denied { write } for pid=25302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1765.651058][T25358] digital: digital_start_poll: Unknown protocol [ 1765.675743][ T28] audit: type=1400 audit(1777943654.231:2785): avc: denied { write } for pid=25360 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1765.698907][T25363] netlink: 'syz.4.3984': attribute type 10 has an invalid length. [ 1765.729756][T25363] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1765.750841][ T1823] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.778164][ T1823] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.868051][ T1823] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.889844][ T1823] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.918043][ T28] audit: type=1400 audit(1777943654.471:2786): avc: denied { write } for pid=25373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1765.986900][ T28] audit: type=1400 audit(1777943654.521:2787): avc: denied { write } for pid=25394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.023434][ T1823] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1766.044269][ T1823] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.059560][T25404] Invalid argument reading file caps for ./file0 [ 1766.246905][ T1823] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1766.280370][ T1823] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.344590][ T28] audit: type=1400 audit(1777943654.901:2788): avc: denied { write } for pid=25407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.401791][ T1823] bridge_slave_1: left allmulticast mode [ 1766.415759][ T1823] bridge_slave_1: left promiscuous mode [ 1766.421853][ T1823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.433000][ T1823] bridge_slave_0: left allmulticast mode [ 1766.438689][ T1823] bridge_slave_0: left promiscuous mode [ 1766.440961][T25434] 9pnet_virtio: no channels available for device syz [ 1766.444642][ T1823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.458823][ T28] audit: type=1400 audit(1777943655.001:2789): avc: denied { write } for pid=25433 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.575545][ T1823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1766.591153][ T1823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1766.606114][ T1823] bond0 (unregistering): Released all slaves [ 1766.675426][ T1823] hsr_slave_0: left promiscuous mode [ 1766.687568][ T1823] hsr_slave_1: left promiscuous mode [ 1766.710314][ T1823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1766.728024][ T1823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1766.748982][ T1823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1766.765127][ T1823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.789566][ T1823] veth1_macvtap: left promiscuous mode [ 1766.802053][ T1823] veth0_macvtap: left promiscuous mode [ 1766.810194][ T1823] veth1_vlan: left promiscuous mode [ 1766.828204][ T1823] veth0_vlan: left promiscuous mode [ 1766.983791][ T1823] team0 (unregistering): Port device team_slave_1 removed [ 1767.003903][ T1823] team0 (unregistering): Port device team_slave_0 removed [ 1767.139697][T25388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.147265][T25388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.156153][T25388] bridge_slave_0: entered allmulticast mode [ 1767.163246][T25388] bridge_slave_0: entered promiscuous mode [ 1767.170466][T25388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.189547][T25388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.197504][T25388] bridge_slave_1: entered allmulticast mode [ 1767.212928][T25388] bridge_slave_1: entered promiscuous mode [ 1767.244300][T25388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.265094][T25388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.362546][T25388] team0: Port device team_slave_0 added [ 1767.383561][T25388] team0: Port device team_slave_1 added [ 1767.461573][T25388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.479033][T25388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.532124][T25388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.555415][T25388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.572061][T25388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.623481][T25388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.645823][ T3025] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1767.702122][T25388] hsr_slave_0: entered promiscuous mode [ 1767.722523][T25388] hsr_slave_1: entered promiscuous mode [ 1767.729069][T25388] debugfs: 'hsr0' already exists in 'hsr' [ 1767.735322][T25388] Cannot create hsr debugfs directory [ 1767.754276][ T1823] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.819141][ T1823] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.869516][ T1823] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.955487][ T1823] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.004724][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1768.004743][ T28] audit: type=1400 audit(1777943656.561:2793): avc: denied { write } for pid=25492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.036465][T25428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.056216][T25428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.072134][ T28] audit: type=1400 audit(1777943656.621:2794): avc: denied { write } for pid=25507 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.079027][T25428] bridge_slave_0: entered allmulticast mode [ 1768.130130][T25428] bridge_slave_0: entered promiscuous mode [ 1768.149605][ T3025] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1768.176510][T25428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.191309][T25428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.210562][T25428] bridge_slave_1: entered allmulticast mode [ 1768.227827][T25428] bridge_slave_1: entered promiscuous mode [ 1768.265614][T25428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.298612][T25428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.431480][ T1823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.453505][ T1823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.464722][ T1823] bond0 (unregistering): Released all slaves [ 1768.476169][T25428] team0: Port device team_slave_0 added [ 1768.491552][T25428] team0: Port device team_slave_1 added [ 1768.518535][ T1823] hsr_slave_0: left promiscuous mode [ 1768.525689][ T1823] hsr_slave_1: left promiscuous mode [ 1768.542372][ T1823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1768.551446][ T1823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1768.572523][ T1823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1768.583328][ T1823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1768.605381][ T1823] veth1_macvtap: left promiscuous mode [ 1768.611433][ T1823] veth0_macvtap: left promiscuous mode [ 1768.622176][ T1823] veth1_vlan: left promiscuous mode [ 1768.631018][ T1823] veth0_vlan: left promiscuous mode [ 1768.800265][ T1823] team0 (unregistering): Port device team_slave_1 removed [ 1768.822215][ T1823] team0 (unregistering): Port device team_slave_0 removed [ 1768.907544][T25428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.922234][T25428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.968914][T25428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.004771][T25428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.022197][T25428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.061556][T25428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.066556][T25517] Invalid argument reading file caps for ./file0 [ 1769.122427][T25428] hsr_slave_0: entered promiscuous mode [ 1769.138249][T25428] hsr_slave_1: entered promiscuous mode [ 1769.152497][T25428] debugfs: 'hsr0' already exists in 'hsr' [ 1769.161754][T25428] Cannot create hsr debugfs directory [ 1769.211176][T25525] loop2: detected capacity change from 0 to 7 [ 1769.356662][ T28] audit: type=1400 audit(1777943657.911:2795): avc: denied { write } for pid=25521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.436363][ T28] audit: type=1400 audit(1777943657.991:2796): avc: denied { write } for pid=25539 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.494039][ T3025] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1769.689400][T25388] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1769.704476][ T28] audit: type=1400 audit(1777943658.261:2797): avc: denied { write } for pid=25544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.731874][T25388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1769.764227][ T28] audit: type=1400 audit(1777943658.311:2798): avc: denied { write } for pid=25555 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.793095][T25388] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1769.809702][T25388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1769.823231][ T3025] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1769.832125][T25388] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1769.842569][T25388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1769.878642][T25388] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1769.906126][T25388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1769.930675][ T28] audit: type=1326 audit(1777943658.481:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25557 comm="syz.4.4018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437732cdd9 code=0x7ffc0000 [ 1770.015691][ T28] audit: type=1326 audit(1777943658.481:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25557 comm="syz.4.4018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f437732cdd9 code=0x7ffc0000 [ 1770.046369][T25577] loop6: detected capacity change from 0 to 1764 [ 1770.055424][T25428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1770.077886][ T28] audit: type=1326 audit(1777943658.481:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25557 comm="syz.4.4018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437732cdd9 code=0x7ffc0000 [ 1770.081070][T25428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1770.126333][ T28] audit: type=1326 audit(1777943658.481:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25557 comm="syz.4.4018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437732cdd9 code=0x7ffc0000 [ 1770.210965][T25428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1770.221753][T25428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1770.229650][T25428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1770.239556][T25428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1770.258459][T25428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1770.365146][T25428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1770.476377][T25593] loop6: detected capacity change from 0 to 4096 [ 1770.488965][T25593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1770.898201][T25388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.938820][T25388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.952588][T22634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.985261][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.992662][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.039433][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.046879][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.082619][T25615] bond0: option arp_interval: invalid value (18446744073709551615) [ 1771.105615][T25615] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1771.216057][T25633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.245801][T25633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.257041][T25428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.319114][T25428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.346615][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.354025][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.377217][ T1916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.384415][ T1916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.613767][T25388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.725906][T25428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.749215][ T3025] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1772.008923][T25428] veth0_vlan: entered promiscuous mode [ 1772.040951][T25388] veth0_vlan: entered promiscuous mode [ 1772.055693][T25428] veth1_vlan: entered promiscuous mode [ 1772.096699][T25388] veth1_vlan: entered promiscuous mode [ 1772.130040][T25428] veth0_macvtap: entered promiscuous mode [ 1772.146512][T25428] veth1_macvtap: entered promiscuous mode [ 1772.154021][ T3025] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1772.163612][T25719] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4031'. [ 1772.185075][T25388] veth0_macvtap: entered promiscuous mode [ 1772.201633][T25428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1772.227960][T25388] veth1_macvtap: entered promiscuous mode [ 1772.245819][T25428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1772.321436][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.338854][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.351597][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.361745][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.400745][T25388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1772.416143][T25388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1772.433146][ T30] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.449657][ T30] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.468515][ T30] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.488097][ T30] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.748565][ T3025] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1773.033295][T25759] loop9: detected capacity change from 0 to 512 [ 1773.042803][T25759] ext2: Bad value for 'journal_dev' [ 1774.861235][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1774.861255][ T28] audit: type=1400 audit(1777943663.411:2826): avc: denied { write } for pid=25754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1774.941444][T25779] syzkaller0: entered promiscuous mode [ 1774.965597][T25779] syzkaller0: entered allmulticast mode [ 1775.002483][ T28] audit: type=1400 audit(1777943663.551:2827): avc: denied { write } for pid=25780 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1775.210190][T25792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4043'. [ 1775.324701][T25794] loop5: detected capacity change from 0 to 1764 [ 1775.771943][T25810] loop5: detected capacity change from 0 to 4096 [ 1775.916442][T25810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1775.935055][ T28] audit: type=1400 audit(1777943664.481:2828): avc: denied { write } for pid=25793 comm="syz.5.4042" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1776.224398][T25823] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4047'. [ 1776.240567][ T28] audit: type=1400 audit(1777943664.791:2829): avc: denied { write } for pid=25785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.290373][T23080] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1776.331451][ T28] audit: type=1400 audit(1777943664.881:2830): avc: denied { write } for pid=25829 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.362461][T25830] syzkaller0: entered promiscuous mode [ 1776.368204][T25830] syzkaller0: entered allmulticast mode [ 1776.509288][T25837] syzkaller0: entered promiscuous mode [ 1776.521665][T25837] syzkaller0: entered allmulticast mode [ 1776.572975][ T28] audit: type=1400 audit(1777943665.131:2831): avc: denied { write } for pid=25832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.676524][ T28] audit: type=1400 audit(1777943665.231:2832): avc: denied { open } for pid=25865 comm="syz.5.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1776.725418][ T28] audit: type=1400 audit(1777943665.231:2833): avc: denied { kernel } for pid=25865 comm="syz.5.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1776.746054][ T28] audit: type=1400 audit(1777943665.231:2834): avc: denied { write } for pid=25863 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.850030][ T28] audit: type=1400 audit(1777943665.401:2835): avc: denied { create } for pid=25877 comm="syz.4.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1776.880477][T25876] loop5: detected capacity change from 0 to 1764 [ 1777.250844][T25900] loop5: detected capacity change from 0 to 4096 [ 1777.318119][T25900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1778.016080][T25909] loop9: detected capacity change from 0 to 512 [ 1778.023389][T25909] ext2: Bad value for 'journal_dev' [ 1778.060375][T25908] syzkaller0: entered promiscuous mode [ 1778.096289][T25908] syzkaller0: entered allmulticast mode [ 1778.341010][ T3025] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1778.352844][T23080] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1778.852367][T25956] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4075'. [ 1778.978496][T25961] loop6: detected capacity change from 0 to 512 [ 1778.986204][T25961] ext2: Bad value for 'journal_dev' [ 1779.378766][T25970] 9p: Bad value for 'wfdno' [ 1779.514053][T25965] loop9: detected capacity change from 0 to 164 [ 1779.598118][T25965] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 1779.940474][T26022] loop2: detected capacity change from 0 to 7 [ 1779.954987][T26027] netlink: 'syz.1.4087': attribute type 4 has an invalid length. [ 1780.195254][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1780.195270][ T28] audit: type=1400 audit(1777943668.751:2848): avc: denied { write } for pid=26017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1780.256223][T26044] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4090'. [ 1780.783536][ T28] audit: type=1400 audit(1777943669.161:2849): avc: denied { write } for pid=26047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1780.963066][ T28] audit: type=1400 audit(1777943669.521:2850): avc: denied { write } for pid=26049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.000808][ T28] audit: type=1400 audit(1777943669.551:2851): avc: denied { write } for pid=26058 comm="syz.5.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1781.046854][ T28] audit: type=1400 audit(1777943669.591:2852): avc: denied { write } for pid=26062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.158518][ T28] audit: type=1400 audit(1777943669.711:2853): avc: denied { write } for pid=26064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.202090][ T28] audit: type=1400 audit(1777943669.731:2854): avc: denied { write } for pid=26077 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.316728][T26084] netlink: 596 bytes leftover after parsing attributes in process `syz.9.4094'. [ 1781.440887][ T28] audit: type=1400 audit(1777943669.991:2855): avc: denied { write } for pid=26080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.495064][ T28] audit: type=1400 audit(1777943670.051:2856): avc: denied { write } for pid=26094 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.589247][ T28] audit: type=1400 audit(1777943670.141:2857): avc: denied { write } for pid=26096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.707378][T26126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4099'. [ 1781.732249][T26131] loop4: detected capacity change from 0 to 256 [ 1781.775629][T26131] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.797889][T26131] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.815949][T26131] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.836898][T26131] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.848300][T26129] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.872156][T26149] loop6: detected capacity change from 0 to 512 [ 1781.883193][T26129] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.894476][T26149] EXT4-fs: inline encryption not supported [ 1781.909690][T26129] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.917847][T26149] EXT4-fs: inline encryption not supported [ 1781.923261][T26131] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.939746][T26149] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1781.960425][T26131] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1781.971310][T26131] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1782.082653][T26149] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1782.107602][T26149] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4104: bg 0: block 248: padding at end of block bitmap is not set [ 1782.144691][T26149] loop6: lost filesystem error report for type 5 error -117 [ 1782.152028][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1782.166231][ C0] EXT4-fs (loop6): last error at time 1777943670: ext4_validate_block_bitmap:441 [ 1782.204726][T26149] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4104: Failed to acquire dquot type 1 [ 1782.217485][T26149] loop6: lost filesystem error report for type 5 error -28 [ 1782.218822][T26149] EXT4-fs (loop6): 1 truncate cleaned up [ 1782.239694][T26165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1782.283679][T26149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1782.504091][T26172] loop9: detected capacity change from 0 to 512 [ 1782.512829][T26172] ext2: Bad value for 'journal_dev' [ 1782.725547][T26149] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1783.239305][T26174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.629258][T26174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.881346][T22634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1785.061086][T26200] bond3 (unregistering): Released all slaves [ 1785.191956][T26262] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4116'. [ 1785.227969][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1785.228006][ T28] audit: type=1400 audit(1777943673.781:2870): avc: denied { write } for pid=26266 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.405169][T26283] 9p: Bad value for 'rfdno' [ 1785.410900][ T28] audit: type=1400 audit(1777943673.961:2871): avc: denied { write } for pid=26268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.458878][ T28] audit: type=1400 audit(1777943674.011:2872): avc: denied { write } for pid=26289 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.620702][ T28] audit: type=1400 audit(1777943674.171:2873): avc: denied { write } for pid=26293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.649691][T26294] loop4: detected capacity change from 0 to 512 [ 1785.705400][ T28] audit: type=1400 audit(1777943674.261:2874): avc: denied { write } for pid=26307 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.766081][T26314] loop2: detected capacity change from 0 to 7 [ 1785.833259][T26317] bond1 (unregistering): Released all slaves [ 1785.931554][ T28] audit: type=1400 audit(1777943674.481:2875): avc: denied { write } for pid=26315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.995992][T26339] netlink: 'syz.6.4132': attribute type 29 has an invalid length. [ 1786.008195][T26294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1786.015697][ T28] audit: type=1400 audit(1777943674.571:2876): avc: denied { write } for pid=26340 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.063848][T26342] netlink: 'syz.6.4132': attribute type 29 has an invalid length. [ 1786.098927][T26294] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1786.247208][ T28] audit: type=1400 audit(1777943674.801:2877): avc: denied { write } for pid=26344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.394420][T26369] loop9: detected capacity change from 0 to 512 [ 1786.402117][T26369] ext2: Bad value for 'journal_dev' [ 1786.708105][T26372] bond0: option arp_interval: invalid value (18446744073709551615) [ 1786.854491][T26372] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1786.884951][ T28] audit: type=1400 audit(1777943675.441:2878): avc: denied { write } for pid=26373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.163031][T26395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1787.202621][ T28] audit: type=1400 audit(1777943675.761:2879): avc: denied { write } for pid=26263 comm="syz.4.4119" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1787.303918][T26403] bond1 (unregistering): Released all slaves [ 1787.497631][T26420] loop5: detected capacity change from 0 to 512 [ 1787.517044][T26420] EXT4-fs: inline encryption not supported [ 1787.523853][T26420] EXT4-fs: inline encryption not supported [ 1787.569618][T26420] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1787.616487][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 1787.639610][T26420] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1787.710173][T26420] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4148: bg 0: block 248: padding at end of block bitmap is not set [ 1787.756972][T26420] loop5: lost filesystem error report for type 5 error -117 [ 1787.757243][T26420] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.4148: Failed to acquire dquot type 1 [ 1787.764672][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1787.764701][ C0] EXT4-fs (loop5): last error at time 1777943676: ext4_validate_block_bitmap:441 [ 1787.796968][T26436] syzkaller0: entered promiscuous mode [ 1787.812428][T26420] loop5: lost filesystem error report for type 5 error -28 [ 1787.815499][T26436] syzkaller0: entered allmulticast mode [ 1787.833818][T26420] EXT4-fs (loop5): 1 truncate cleaned up [ 1787.842867][T26420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1787.948571][T26420] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1787.980917][T26420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.026611][T26420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.092583][T26463] netlink: 596 bytes leftover after parsing attributes in process `syz.9.4160'. [ 1788.093093][T26460] 9pnet_fd: Insufficient options for proto=fd [ 1788.387204][T26485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.407985][T26485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.423913][T26487] loop6: detected capacity change from 0 to 1024 [ 1788.444063][T26487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1788.585584][T23080] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1788.919096][T26499] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4176'. [ 1789.013803][T26501] loop2: detected capacity change from 0 to 7 [ 1789.155848][T22634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.178474][T26516] loop9: detected capacity change from 0 to 512 [ 1789.207230][T26516] EXT4-fs: inline encryption not supported [ 1789.232667][T26516] EXT4-fs: inline encryption not supported [ 1789.254786][T26516] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1789.304342][T26516] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1789.358085][T26516] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4184: bg 0: block 248: padding at end of block bitmap is not set [ 1789.376459][T26516] loop9: lost filesystem error report for type 5 error -117 [ 1789.376774][T26516] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4184: Failed to acquire dquot type 1 [ 1789.384595][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1789.384613][ C0] EXT4-fs (loop9): last error at time 1777943677: ext4_validate_block_bitmap:441 [ 1789.412856][T26516] loop9: lost filesystem error report for type 5 error -28 [ 1789.415170][T26516] EXT4-fs (loop9): 1 truncate cleaned up [ 1789.432712][T26516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1789.475821][T26516] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1789.485291][T21690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.498388][T26516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.529304][T26516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.615934][T26544] loop6: detected capacity change from 0 to 512 [ 1789.638121][T26550] loop2: detected capacity change from 0 to 7 [ 1789.645004][T26544] EXT4-fs: inline encryption not supported [ 1789.666820][T26544] EXT4-fs: inline encryption not supported [ 1789.699249][T26544] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1789.735416][T26544] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1789.759708][T26544] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4195: bg 0: block 248: padding at end of block bitmap is not set [ 1789.761428][T26564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 1789.784940][T26544] loop6: lost filesystem error report for type 5 error -117 [ 1789.789077][T26544] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4195: Failed to acquire dquot type 1 [ 1789.796717][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1789.796759][ C1] EXT4-fs (loop6): last error at time 1777943678: ext4_validate_block_bitmap:441 [ 1789.823954][T26544] loop6: lost filesystem error report for type 5 error -28 [ 1789.825110][T26544] EXT4-fs (loop6): 1 truncate cleaned up [ 1789.825977][T26544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1789.852757][T26544] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1789.915859][T26544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.927819][T26544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.096151][T26575] Cannot find del_set index 29 as target [ 1790.157312][T25388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1790.381672][T26585] bond0: option arp_interval: invalid value (18446744073709551615) [ 1790.390148][T26585] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1790.679520][T26591] loop1: detected capacity change from 0 to 1024 [ 1790.714265][T26591] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1790.727576][T26591] EXT4-fs (loop1): group descriptors corrupted! [ 1791.243058][T22634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1791.319101][T26596] syzkaller0: entered promiscuous mode [ 1791.609826][T26596] syzkaller0: entered allmulticast mode [ 1791.935822][T26591] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4207'. [ 1792.506941][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1792.506961][ T28] audit: type=1400 audit(1777943680.321:2882): avc: denied { ioctl } for pid=26577 comm="syz.1.4207" path="socket:[76175]" dev="sockfs" ino=76175 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1792.539103][ T28] audit: type=1400 audit(1777943680.361:2883): avc: denied { write } for pid=26577 comm="syz.1.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1792.677477][T26618] netlink: 'syz.5.4222': attribute type 1 has an invalid length. [ 1793.174194][T26640] loop9: detected capacity change from 0 to 512 [ 1793.201084][T26640] ext2: Bad value for 'journal_dev' [ 1793.375449][T26653] syzkaller0: entered promiscuous mode [ 1793.398961][T26653] syzkaller0: entered allmulticast mode [ 1793.797500][T26673] loop2: detected capacity change from 0 to 7 [ 1793.828988][T26673] loop2: [ 1794.656628][ C1] ================================================================== [ 1794.664959][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 1794.672396][ C1] [ 1794.674739][ C1] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 0: [ 1794.683018][ C1] can_can_gw_rcv+0x863/0x870 [ 1794.687747][ C1] can_rcv_filter+0xc3/0x480 [ 1794.692383][ C1] can_receive+0x13e/0x190 [ 1794.696914][ C1] can_rcv+0x17d/0x1f0 [ 1794.701012][ C1] process_backlog+0x363/0x670 [ 1794.705912][ C1] __napi_poll+0x61/0x300 [ 1794.710388][ C1] net_rx_action+0x452/0x930 [ 1794.715197][ C1] handle_softirqs+0xb9/0x280 [ 1794.719905][ C1] run_ksoftirqd+0x1c/0x30 [ 1794.724522][ C1] smpboot_thread_fn+0x32a/0x510 [ 1794.729497][ C1] kthread+0x22a/0x280 [ 1794.733770][ C1] ret_from_fork+0x146/0x330 [ 1794.738401][ C1] ret_from_fork_asm+0x1a/0x30 [ 1794.743456][ C1] [ 1794.745802][ C1] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 1: [ 1794.754068][ C1] can_can_gw_rcv+0x863/0x870 [ 1794.758874][ C1] can_rcv_filter+0xc3/0x480 [ 1794.763590][ C1] can_receive+0x13e/0x190 [ 1794.768208][ C1] can_rcv+0x17d/0x1f0 [ 1794.772495][ C1] process_backlog+0x363/0x670 [ 1794.777473][ C1] __napi_poll+0x61/0x300 [ 1794.782136][ C1] net_rx_action+0x452/0x930 [ 1794.786764][ C1] handle_softirqs+0xb9/0x280 [ 1794.791551][ C1] do_softirq+0x45/0x60 [ 1794.796100][ C1] __local_bh_enable_ip+0x70/0x80 [ 1794.801338][ C1] napi_threaded_poll_loop+0x4bd/0x660 [ 1794.806839][ C1] napi_threaded_poll+0x193/0x240 [ 1794.811917][ C1] kthread+0x22a/0x280 [ 1794.816379][ C1] ret_from_fork+0x146/0x330 [ 1794.821230][ C1] ret_from_fork_asm+0x1a/0x30 [ 1794.826412][ C1] [ 1794.828770][ C1] value changed: 0x0000a953 -> 0x0000a954 [ 1794.834785][ C1] [ 1794.837221][ C1] Reported by Kernel Concurrency Sanitizer on: [ 1794.843400][ C1] CPU: 1 UID: 0 PID: 25569 Comm: napi/wg1-0 Not tainted syzkaller #0 PREEMPT(full) [ 1794.853061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1794.863324][ C1] ================================================================== [ 1797.806195][ C1] ================================================================== [ 1797.814361][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 1797.821628][ C1] [ 1797.824072][ C1] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 0: [ 1797.832430][ C1] can_can_gw_rcv+0x863/0x870 [ 1797.837243][ C1] can_rcv_filter+0xc3/0x480 [ 1797.841976][ C1] can_receive+0x13e/0x190 [ 1797.846505][ C1] can_rcv+0x17d/0x1f0 [ 1797.850606][ C1] process_backlog+0x363/0x670 [ 1797.855781][ C1] __napi_poll+0x61/0x300 [ 1797.860144][ C1] net_rx_action+0x452/0x930 [ 1797.864772][ C1] handle_softirqs+0xb9/0x280 [ 1797.869714][ C1] do_softirq+0x45/0x60 [ 1797.873895][ C1] __local_bh_enable_ip+0x70/0x80 [ 1797.879308][ C1] __alloc_skb+0x658/0x690 [ 1797.884021][ C1] nsim_dev_trap_report_work+0x18a/0x640 [ 1797.889974][ C1] process_scheduled_works+0x4f0/0x9c0 [ 1797.895643][ C1] worker_thread+0x58a/0x780 [ 1797.900356][ C1] kthread+0x22a/0x280 [ 1797.904585][ C1] ret_from_fork+0x146/0x330 [ 1797.909210][ C1] ret_from_fork_asm+0x1a/0x30 [ 1797.914013][ C1] [ 1797.916357][ C1] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 1: [ 1797.924738][ C1] can_can_gw_rcv+0x863/0x870 [ 1797.929456][ C1] can_rcv_filter+0xc3/0x480 [ 1797.934288][ C1] can_receive+0x13e/0x190 [ 1797.938735][ C1] can_rcv+0x17d/0x1f0 [ 1797.942839][ C1] process_backlog+0x363/0x670 [ 1797.947720][ C1] __napi_poll+0x61/0x300 [ 1797.952075][ C1] net_rx_action+0x452/0x930 [ 1797.956695][ C1] handle_softirqs+0xb9/0x280 [ 1797.961397][ C1] do_softirq+0x45/0x60 [ 1797.965772][ C1] __local_bh_enable_ip+0x70/0x80 [ 1797.971005][ C1] update_defense_level+0x59d/0x5d0 [ 1797.976450][ C1] defense_work_handler+0x1f/0x80 [ 1797.981602][ C1] process_scheduled_works+0x4f0/0x9c0 [ 1797.987122][ C1] worker_thread+0x58a/0x780 [ 1797.991776][ C1] kthread+0x22a/0x280 [ 1797.996347][ C1] ret_from_fork+0x146/0x330 [ 1798.001161][ C1] ret_from_fork_asm+0x1a/0x30 [ 1798.005960][ C1] [ 1798.008318][ C1] value changed: 0x0005945d -> 0x0005945e [ 1798.014055][ C1] [ 1798.016393][ C1] Reported by Kernel Concurrency Sanitizer on: [ 1798.022676][ C1] CPU: 1 UID: 0 PID: 12500 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 1798.032505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1798.042588][ C1] Workqueue: events_long defense_work_handler [ 1798.048711][ C1] ================================================================== [ 1800.861663][ C0] ================================================================== [ 1800.869902][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 1800.877150][ C0] [ 1800.879498][ C0] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 1: [ 1800.887638][ C0] can_can_gw_rcv+0x863/0x870 [ 1800.892458][ C0] can_rcv_filter+0xc3/0x480 [ 1800.897970][ C0] can_receive+0x13e/0x190 [ 1800.902417][ C0] can_rcv+0x17d/0x1f0 [ 1800.906915][ C0] process_backlog+0x363/0x670 [ 1800.911875][ C0] __napi_poll+0x61/0x300 [ 1800.916449][ C0] net_rx_action+0x452/0x930 [ 1800.921071][ C0] handle_softirqs+0xb9/0x280 [ 1800.926073][ C0] do_softirq+0x45/0x60 [ 1800.930528][ C0] __local_bh_enable_ip+0x70/0x80 [ 1800.935822][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 1800.941201][ C0] nsim_dev_trap_report_work+0x53b/0x640 [ 1800.946974][ C0] process_scheduled_works+0x4f0/0x9c0 [ 1800.952833][ C0] worker_thread+0x58a/0x780 [ 1800.957645][ C0] kthread+0x22a/0x280 [ 1800.961739][ C0] ret_from_fork+0x146/0x330 [ 1800.966458][ C0] ret_from_fork_asm+0x1a/0x30 [ 1800.971360][ C0] [ 1800.973789][ C0] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 0: [ 1800.981961][ C0] can_can_gw_rcv+0x863/0x870 [ 1800.986769][ C0] can_rcv_filter+0xc3/0x480 [ 1800.991384][ C0] can_receive+0x13e/0x190 [ 1800.995830][ C0] can_rcv+0x17d/0x1f0 [ 1801.000131][ C0] process_backlog+0x363/0x670 [ 1801.005102][ C0] __napi_poll+0x61/0x300 [ 1801.009467][ C0] net_rx_action+0x452/0x930 [ 1801.014087][ C0] handle_softirqs+0xb9/0x280 [ 1801.019194][ C0] do_softirq+0x45/0x60 [ 1801.023575][ C0] __local_bh_enable_ip+0x70/0x80 [ 1801.028979][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 1801.033964][ C0] mptcp_incoming_options+0x55e/0x1670 [ 1801.039471][ C0] tcp_data_queue+0x65/0x30a0 [ 1801.044321][ C0] tcp_rcv_established+0xbf6/0x1320 [ 1801.049559][ C0] tcp_v4_do_rcv+0x3bf/0xa20 [ 1801.054620][ C0] __release_sock+0x15e/0x2f0 [ 1801.059432][ C0] release_sock+0x125/0x180 [ 1801.063967][ C0] __mptcp_push_pending+0x3dd/0x550 [ 1801.069540][ C0] mptcp_release_cb+0x49c/0x7f0 [ 1801.074513][ C0] release_sock+0x168/0x180 [ 1801.079042][ C0] mptcp_sendmsg+0xdf6/0x1100 [ 1801.083842][ C0] inet6_sendmsg+0xc5/0xd0 [ 1801.088375][ C0] ____sys_sendmsg+0x3c1/0x5b0 [ 1801.093170][ C0] ___sys_sendmsg+0x195/0x1e0 [ 1801.097874][ C0] __x64_sys_sendmsg+0xd4/0x160 [ 1801.103123][ C0] x64_sys_call+0x194c/0x3020 [ 1801.107845][ C0] do_syscall_64+0x12c/0x3b0 [ 1801.112483][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.118535][ C0] [ 1801.121147][ C0] value changed: 0x000a5185 -> 0x000a5186 [ 1801.126972][ C0] [ 1801.129410][ C0] Reported by Kernel Concurrency Sanitizer on: [ 1801.135665][ C0] CPU: 0 UID: 0 PID: 26680 Comm: syz.6.4241 Not tainted syzkaller #0 PREEMPT(full) [ 1801.145323][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1801.155509][ C0] ================================================================== [ 1801.923785][ T28] audit: type=1400 audit(1777943690.341:2884): avc: denied { write } for pid=26692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1802.519521][ T28] audit: type=1400 audit(1777943691.071:2885): avc: denied { write } for pid=26703 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1803.981279][ C1] ================================================================== [ 1803.989523][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 1803.997037][ C1] [ 1803.999387][ C1] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 0: [ 1804.008639][ C1] can_can_gw_rcv+0x863/0x870 [ 1804.013358][ C1] can_rcv_filter+0xc3/0x480 [ 1804.018135][ C1] can_receive+0x13e/0x190 [ 1804.022583][ C1] can_rcv+0x17d/0x1f0 [ 1804.026686][ C1] process_backlog+0x363/0x670 [ 1804.031479][ C1] __napi_poll+0x61/0x300 [ 1804.035928][ C1] net_rx_action+0x452/0x930 [ 1804.040561][ C1] handle_softirqs+0xb9/0x280 [ 1804.045267][ C1] do_softirq+0x45/0x60 [ 1804.049489][ C1] __local_bh_enable_ip+0x70/0x80 [ 1804.054545][ C1] __alloc_skb+0x658/0x690 [ 1804.059198][ C1] nsim_dev_trap_report_work+0x18a/0x640 [ 1804.064873][ C1] process_scheduled_works+0x4f0/0x9c0 [ 1804.070455][ C1] worker_thread+0x58a/0x780 [ 1804.075081][ C1] kthread+0x22a/0x280 [ 1804.079177][ C1] ret_from_fork+0x146/0x330 [ 1804.083810][ C1] ret_from_fork_asm+0x1a/0x30 [ 1804.088787][ C1] [ 1804.091300][ C1] read-write to 0xffff8881681d3f80 of 4 bytes by interrupt on cpu 1: [ 1804.099560][ C1] can_can_gw_rcv+0x863/0x870 [ 1804.104466][ C1] can_rcv_filter+0xc3/0x480 [ 1804.109256][ C1] can_receive+0x13e/0x190 [ 1804.113888][ C1] can_rcv+0x17d/0x1f0 [ 1804.118226][ C1] process_backlog+0x363/0x670 [ 1804.123024][ C1] __napi_poll+0x61/0x300 [ 1804.127468][ C1] net_rx_action+0x452/0x930 [ 1804.132090][ C1] handle_softirqs+0xb9/0x280 [ 1804.136808][ C1] do_softirq+0x45/0x60 [ 1804.141163][ C1] __local_bh_enable_ip+0x70/0x80 [ 1804.146311][ C1] kernel_fpu_end+0x6c/0x80 [ 1804.151093][ C1] blake2s_compress+0x67/0x1740 [ 1804.156419][ C1] blake2s_update+0xa3/0x160 [ 1804.161136][ C1] hmac+0x20c/0x400 [ 1804.165066][ C1] kdf+0xa9/0x1e0 [ 1804.168728][ C1] wg_noise_handshake_create_initiation+0x372/0x610 [ 1804.175389][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 1804.181678][ C1] process_scheduled_works+0x4f0/0x9c0 [ 1804.187171][ C1] worker_thread+0x58a/0x780 [ 1804.191795][ C1] kthread+0x22a/0x280 [ 1804.195890][ C1] ret_from_fork+0x146/0x330 [ 1804.200525][ C1] ret_from_fork_asm+0x1a/0x30 [ 1804.205320][ C1] [ 1804.207678][ C1] value changed: 0x000f0fa3 -> 0x000f0fa4 [ 1804.213780][ C1] [ 1804.216126][ C1] Reported by Kernel Concurrency Sanitizer on: [ 1804.222562][ C1] CPU: 1 UID: 0 PID: 26690 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1804.232235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1804.242583][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1804.249569][ C1] ==================================================================