last executing test programs: 4m13.334363475s ago: executing program 32 (id=490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20049c50) 4m2.485289317s ago: executing program 33 (id=610): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR-', 0x4}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 3m59.472423503s ago: executing program 34 (id=474): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0xc}, {0x5, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x24040000) 3m49.795163608s ago: executing program 35 (id=829): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000001040)={0xa, 0x4e21, 0x2080000, @private0, 0x10}, 0x1c, 0x0, 0x0, &(0x7f0000002440)=[@hopopts={{0x18, 0x29, 0x36, {0x3a}}}], 0x18}, 0x440e0) 3m6.565314932s ago: executing program 36 (id=1927): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x82, 0x0, 0x0) 3m0.489234974s ago: executing program 37 (id=2007): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x1, 0x1aa2, 0x8}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffede}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 2m49.093333733s ago: executing program 38 (id=2120): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x2, 0x3ff, 0x47d2}) timer_create(0x2, 0x0, 0x0) 2m44.75475003s ago: executing program 39 (id=2157): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000090a010400000000000000000a00000409000200ff797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b1800128014000180090001006c6173740000000004000280080003400000013014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 2m26.223007565s ago: executing program 40 (id=2205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 2m1.378554479s ago: executing program 41 (id=2749): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @echo={0x8, 0x0, 0x0, 0x1, 0x7fff}}}}}, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1m51.952671437s ago: executing program 7 (id=2943): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xdd5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000009, 0x204031, 0xffffffffffffffff, 0x42792000) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) 1m51.043041625s ago: executing program 7 (id=2950): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x2e, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x2f, 0x0, 0x1, 0x4}]}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xff000000}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m50.778989834s ago: executing program 7 (id=2956): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @lsm=0x2b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m50.759570895s ago: executing program 7 (id=2957): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m50.741107506s ago: executing program 7 (id=2959): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r2, 0x1, 0x1) 1m50.390049806s ago: executing program 7 (id=2969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1m50.334015368s ago: executing program 42 (id=2969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 54.741390782s ago: executing program 3 (id=4112): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x80, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 54.326562756s ago: executing program 3 (id=4127): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000141000/0x3000)=nil, 0x3000, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 53.804491252s ago: executing program 3 (id=4135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) 53.781526353s ago: executing program 3 (id=4136): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 53.765390653s ago: executing program 3 (id=4137): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 53.411688345s ago: executing program 3 (id=4142): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) 53.411547305s ago: executing program 43 (id=4142): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) 50.187426786s ago: executing program 8 (id=4201): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110000, 0x0, 0x0, 0x5, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 49.247484916s ago: executing program 8 (id=4208): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x23, 0x4, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(r1, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 49.167541568s ago: executing program 8 (id=4210): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000480)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x69e, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 49.103913941s ago: executing program 4 (id=4212): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000000}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000640)={0xb0000004}) close(0x3) 49.039237953s ago: executing program 8 (id=4213): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 49.012345243s ago: executing program 4 (id=4215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) 48.946407956s ago: executing program 8 (id=4216): sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="800037", 0x3, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x11}}}], 0x18}, 0x922bac8556bdad8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 48.855486228s ago: executing program 4 (id=4218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffeb8, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 48.787639641s ago: executing program 8 (id=4219): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r2, 0xffffffffffffffff, 0x0) 48.720793203s ago: executing program 44 (id=4219): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r2, 0xffffffffffffffff, 0x0) 48.709615183s ago: executing program 4 (id=4223): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 48.595822236s ago: executing program 4 (id=4226): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) read(r0, &(0x7f0000000080)=""/135, 0x87) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}}, 0x0) 48.16370965s ago: executing program 4 (id=4237): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x140301, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x10001, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x9, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x3ff, 0x8, 0x8, 0x1, 0x1fc, 0x8000, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 48.042125674s ago: executing program 45 (id=4237): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x140301, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x10001, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x9, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x3ff, 0x8, 0x8, 0x1, 0x1fc, 0x8000, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 37.855219625s ago: executing program 2 (id=4384): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) 37.778814658s ago: executing program 2 (id=4385): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) 36.927950275s ago: executing program 2 (id=4391): unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) mkdir(0x0, 0x0) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_RMID(0x0, 0x0) 36.927514165s ago: executing program 2 (id=4392): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 36.910256605s ago: executing program 2 (id=4393): socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) sendmsg$nl_route(r0, 0x0, 0x20000000) 36.609362745s ago: executing program 2 (id=4398): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, 0x0, 0xb0d, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) io_setup(0x4, &(0x7f00000013c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002c00)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 36.588233246s ago: executing program 46 (id=4398): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, 0x0, 0xb0d, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) io_setup(0x4, &(0x7f00000013c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002c00)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 1.220036272s ago: executing program 6 (id=5148): r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x82b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x8000004e) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r0}) renameat2(r1, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000000)='./file7\x00', 0x4) 1.212197092s ago: executing program 9 (id=5149): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.195044412s ago: executing program 6 (id=5150): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40045304, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) tkill(r0, 0x7) 924.563751ms ago: executing program 6 (id=5152): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca9000000000000350901000a0000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 923.777781ms ago: executing program 9 (id=5153): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x30, 0x57}, {0x6, 0x26, 0x0, 0x5}]}, 0x10) 844.359193ms ago: executing program 9 (id=5158): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc2042, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 830.395464ms ago: executing program 0 (id=5160): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x4, 0x0, 0x6}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48011}, 0x0) 761.222506ms ago: executing program 1 (id=5161): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r1], 0x38}}, 0x0) 743.467957ms ago: executing program 1 (id=5162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x24, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) 689.078738ms ago: executing program 5 (id=5163): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x1, 0x43a1bd78, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x2000009, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40840}, 0x800) 624.86398ms ago: executing program 0 (id=5164): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 624.44717ms ago: executing program 1 (id=5165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01f10000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140004"], 0xe8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 524.264283ms ago: executing program 1 (id=5166): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x2d, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 523.749993ms ago: executing program 5 (id=5167): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x620, 0x30, 0xcac229faa96ee7df, 0x1, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}, {0x42c, 0x1, [@m_nat={0x1e8, 0xe, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0xa2fc7ad6bf251c3a, 0xffffffff}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xb, 0x2, 0x8, 0x10001}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x3, 0xe, 0x6}, @private=0xa010101, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0xffffffffffffffff, 0x8, 0x1ff}, @private=0xa010101, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x20000000, 0x683581da, 0x7}, @private=0xa010100, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7f, 0x1, 0x4, 0xe}, @multicast1, @rand_addr=0x64010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x0, 0x2, 0xb6e4, 0x3}, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x97, 0x18, 0x7, 0xd, 0x3ff}, @dev={0xac, 0x14, 0x14, 0x2d}, @local, 0xffffff00}}]}, {0x7d, 0x6, "fa7046c71ff7370cb40e874ff63489dcbc7f3b16092361025b10be19fa1b70becd85613c97b0d4586d3a0cf37a9de84fdf3677b8204203f5f3dca9ca82dc016012e2f18ad3f1970174f97f005bd08ac8540b6dbd78299182954c77be5a1c7d0b0362acf99fcec39f304e232e666f0fe23d3fc1ad47083d5441"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xe0, 0x1c, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x10, 0x9, 0x80}, {0xfff7, 0x1, 0x3, 0x6}, {0xd, 0x3, 0x36}, {0x5, 0x41, 0xff, 0x80}, {0xd7d, 0x2, 0x2, 0x80000000}, {0x100, 0xa5, 0xa, 0xa22}, {0x8, 0x8, 0x4, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x696d, 0x0, 0x7, 0x0, 0xe5f0}}]}, {0x51, 0x6, "55aa8129c724e6cbc821008c0c8ba23b26b5d4f38d99f12e4c0915f50cad3be57d75ce0eec313216b544b40e25fae0bbe594d2ae9248a57b07d7758c77522135434bc3d90ac901235d642eb2da"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x160, 0x11, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}, @TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x3, 0x20000000, 0x5}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0xa}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0xcd, 0x6, "74849f35f4cf116bef1b1a653f551a941fe40a12f0ab4706823fe8a3cd15f2a7d85b1bde559d739030a15bbe96da29b676db1d06df50fb3961379b0cfcb9bbe740c1a000e8dc166a8f3122916bb62a74c39880d44f292a46e9df22c8aebbf4d2470467e275950ac2f924567ff69b86f9bdf33c1b2ec1036ec6807e393ab66bd39567b2cb9ce107266434c786447234ee14ee96f9109b2b5d93e04ebeab274772ca14f488f117b920de9eeee9524028b83dc6214ea98a8df9979c90c974392f617210470c5d76eeea33"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, {0x74, 0x1, [@m_vlan={0x70, 0x12, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x31, 0x6, "7a8ef08d1398ba7babe194367dc92457ff4444d10222ac9c452e71fdd2b02a8e127b8985d96779c8d09cc1e8e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, {0x13c, 0x1, [@m_skbedit={0x78, 0x13, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xd, 0xffffffffffffffff, 0x100, 0xf}}]}, {0x31, 0x6, "8fb35399a1cac0d0445a769a92755c8dc5a1c321c4c9b2f53d00bc38b6406b3b0d7872a940f2e5d5bdf83fecfb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xc0, 0x1e, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x21, 0x6, "50c394b151fd48f2f4786c5f02cbf01629048701abea2e802aa3728344"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x620}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 493.699394ms ago: executing program 5 (id=5168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@initr0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000e19291000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 493.194405ms ago: executing program 0 (id=5169): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x5) 474.079765ms ago: executing program 1 (id=5170): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:'], 0xa) 472.346945ms ago: executing program 6 (id=5171): set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 453.973795ms ago: executing program 9 (id=5172): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x18, r1, 0x1, 0x83, 0x6, @multicast}, 0x14) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 434.034086ms ago: executing program 5 (id=5173): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 422.838497ms ago: executing program 0 (id=5174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf9}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0xb}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 390.406268ms ago: executing program 1 (id=5175): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 389.027377ms ago: executing program 6 (id=5176): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40054}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 356.507879ms ago: executing program 9 (id=5177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 355.749029ms ago: executing program 5 (id=5187): unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}]}, 0x2c}}, 0x0) 277.348231ms ago: executing program 0 (id=5178): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 152.014105ms ago: executing program 6 (id=5179): r0 = socket$inet6(0xa, 0x80003, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) unshare(0x2040400) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) poll(&(0x7f0000001580)=[{r0, 0x4a0}], 0x1, 0xffffffff) 54.237528ms ago: executing program 9 (id=5180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x24000040) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r2, {0x7, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}]}}]}, 0x44}}, 0x8002) 507.24µs ago: executing program 5 (id=5181): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=5182): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca9000000000000350901000a0000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 0][T14191] EXT4-fs: Ignoring removed orlov option [ 215.089395][T14191] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.225539][T14191] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3293: corrupted in-inode xattr: e_value size too large [ 215.259386][T14191] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.259933][T14191] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3293: couldn't read orphan inode 15 (err -117) [ 215.270505][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 215.270528][ C0] EXT4-fs (loop8): initial error at time 1780605438: ext4_iget_extra_inode:5128: inode 15 [ 215.270559][ C0] EXT4-fs (loop8): last error at time 1780605438: ext4_iget_extra_inode:5128: inode 15 [ 215.325489][ T4506] Bluetooth: hci0: command 0x1003 tx timeout [ 215.364479][ T3641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.411345][T14199] tipc: Enabling of bearer rejected, failed to enable media [ 215.429367][T14191] loop8: lost filesystem error report for type 5 error -117 [ 215.430736][T14191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.503770][ T28] audit: type=1400 audit(1780605438.797:2223): avc: denied { associate } for pid=14202 comm="syz.4.3297" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 215.592015][ T5892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.597636][ T28] audit: type=1400 audit(1780605438.807:2224): avc: denied { write } for pid=14190 comm="syz.8.3293" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.623513][ T28] audit: type=1400 audit(1780605438.807:2225): avc: denied { create } for pid=14190 comm="syz.8.3293" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 215.666016][ T28] audit: type=1400 audit(1780605438.807:2226): avc: denied { write } for pid=14190 comm="syz.8.3293" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.688196][ T28] audit: type=1400 audit(1780605438.807:2227): avc: denied { write open } for pid=14190 comm="syz.8.3293" path="/537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.758099][ T28] audit: type=1400 audit(1780605438.817:2228): avc: denied { write } for pid=14190 comm="syz.8.3293" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.819721][T14205] loop8: detected capacity change from 0 to 512 [ 215.867880][ T28] audit: type=1400 audit(1780605438.817:2229): avc: denied { create } for pid=14190 comm="syz.8.3293" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 215.914771][ T28] audit: type=1400 audit(1780605438.817:2230): avc: denied { write } for pid=14190 comm="syz.8.3293" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.003729][T14205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.178579][ T5892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.391438][T14239] netlink: 'syz.5.3315': attribute type 1 has an invalid length. [ 216.419149][T14239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.461542][T14239] bond1: (slave geneve2): making interface the new active one [ 216.485794][T14239] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 216.736709][T14272] bridge1: entered promiscuous mode [ 216.742760][T14272] bridge1: entered allmulticast mode [ 217.010476][T14287] loop8: detected capacity change from 0 to 128 [ 217.435473][T14316] SELinux: failed to load policy [ 217.625043][T14342] netlink: 'syz.8.3357': attribute type 4 has an invalid length. [ 217.648375][T14342] netlink: 'syz.8.3357': attribute type 4 has an invalid length. [ 217.868501][T14354] loop8: detected capacity change from 0 to 512 [ 217.886897][T14354] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 217.900807][T14357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.916676][T14357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.916903][T14354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 217.938178][T14354] System zones: 1-12 [ 217.942775][T14354] EXT4-fs (loop8): orphan cleanup on readonly fs [ 217.950818][T14354] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3362: bg 0: block 361: padding at end of block bitmap is not set [ 217.967936][T14354] loop8: lost filesystem error report for type 5 error -117 [ 217.969665][T14354] EXT4-fs (loop8): Remounting filesystem read-only [ 217.977913][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 217.977934][ C0] EXT4-fs (loop8): initial error at time 1780605697: ext4_validate_block_bitmap:441 [ 217.977970][ C0] EXT4-fs (loop8): last error at time 1780605697: ext4_validate_block_bitmap:441 [ 218.014615][T14357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.015004][T14354] EXT4-fs (loop8): 1 truncate cleaned up [ 218.027841][T14357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.034325][T14354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 218.082385][T14357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.095342][T14354] SELinux: failed to load policy [ 218.097869][T14357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.122535][ T5892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 218.180742][T14357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.192900][T14357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.284868][T11482] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.294135][T11482] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.320907][T11482] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.330479][T11482] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.338945][T11482] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.347339][T11482] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.360091][T11482] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.410655][T11482] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.602778][T14399] loop8: detected capacity change from 0 to 512 [ 218.636331][T14399] EXT4-fs: inline encryption not supported [ 218.685799][T14399] EXT4-fs: inline encryption not supported [ 218.716951][T14399] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.802360][T14399] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 218.835580][T14399] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3375: bg 0: block 248: padding at end of block bitmap is not set [ 218.851661][T14399] loop8: lost filesystem error report for type 5 error -117 [ 218.852104][T14399] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3375: Failed to acquire dquot type 1 [ 218.859469][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 218.859499][ C1] EXT4-fs (loop8): last error at time 1780605698: ext4_validate_block_bitmap:441 [ 218.887340][T14399] loop8: lost filesystem error report for type 5 error -28 [ 218.890297][T14399] EXT4-fs (loop8): 1 truncate cleaned up [ 218.910827][T14399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 218.985924][T14399] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 219.055257][T11482] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.101203][ T5892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 221.117811][ T3641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.117864][ T4506] Bluetooth: hci0: command 0x1003 tx timeout [ 221.681623][T14405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.745658][T14451] netlink: 'syz.3.3387': attribute type 4 has an invalid length. [ 221.771834][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 221.771850][ T28] audit: type=1400 audit(1780605701.081:2255): avc: denied { ioctl } for pid=14446 comm="syz.8.3396" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 221.827290][T14451] netlink: 'syz.3.3387': attribute type 4 has an invalid length. [ 221.920581][ T28] audit: type=1400 audit(1780605701.211:2256): avc: denied { getopt } for pid=14463 comm="syz.1.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.030246][ T28] audit: type=1400 audit(1780605701.341:2257): avc: denied { ioctl } for pid=14471 comm="syz.5.3399" path="socket:[39789]" dev="sockfs" ino=39789 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 222.064761][T14434] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 222.072730][ T9047] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 222.099750][ T9047] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.179055][ T28] audit: type=1400 audit(1780605701.491:2258): avc: denied { execute } for pid=14480 comm="syz.4.3403" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 222.276286][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3407'. [ 222.286063][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3407'. [ 222.324045][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3407'. [ 222.333498][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3407'. [ 222.412241][ T28] audit: type=1326 audit(1780605701.711:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14495 comm="syz.5.3409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6adfece59 code=0x0 [ 222.672184][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3414'. [ 222.691170][ T28] audit: type=1326 audit(1780605702.001:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.8.3415" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acb1ce59 code=0x7ffc0000 [ 222.723237][ T28] audit: type=1326 audit(1780605702.001:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.8.3415" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acb1ce59 code=0x7ffc0000 [ 222.752654][ T28] audit: type=1326 audit(1780605702.001:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.8.3415" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acb1ce59 code=0x7ffc0000 [ 222.781662][ T28] audit: type=1326 audit(1780605702.001:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.8.3415" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acb1ce59 code=0x7ffc0000 [ 222.818801][ T28] audit: type=1326 audit(1780605702.001:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14509 comm="syz.8.3415" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47acb1ce59 code=0x7ffc0000 [ 222.866000][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3419'. [ 222.875644][T14517] bridge1: entered promiscuous mode [ 222.882086][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3419'. [ 222.891175][T14517] bridge1: entered allmulticast mode [ 222.902156][T14519] geneve2: entered promiscuous mode [ 222.907846][T14519] geneve2: entered allmulticast mode [ 223.639553][T14557] netlink: 'syz.4.3435': attribute type 4 has an invalid length. [ 223.679464][T14560] netlink: 'syz.8.3438': attribute type 18 has an invalid length. [ 223.687371][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3438'. [ 223.696654][T14560] netlink: 'syz.8.3438': attribute type 18 has an invalid length. [ 223.704752][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3438'. [ 224.631625][T14580] sctp: [Deprecated]: syz.4.3445 (pid 14580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.631625][T14580] Use struct sctp_sack_info instead [ 224.735265][T11477] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.750696][T14592] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.715268][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3480'. [ 225.730899][T14662] team1: entered promiscuous mode [ 225.736150][T14662] team1: entered allmulticast mode [ 225.742997][T14662] 8021q: adding VLAN 0 to HW filter on device team1 [ 226.696881][T14704] sg_write: data in/out 3171656/14 bytes for SCSI command 0x0-- guessing data in; [ 226.696881][T14704] program syz.5.3497 not setting count and/or reply_len properly [ 226.802883][ T3641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.804796][ T4506] Bluetooth: hci0: command 0x1003 tx timeout [ 226.958303][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 226.958334][ T28] audit: type=1400 audit(1780605706.261:2311): avc: denied { write } for pid=9499 comm="kworker/1:10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40312 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.108831][ T28] audit: type=1400 audit(1780605706.411:2312): avc: denied { listen } for pid=14726 comm="syz.5.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.156113][ T28] audit: type=1400 audit(1780605706.411:2313): avc: denied { accept } for pid=14726 comm="syz.5.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.603015][ T28] audit: type=1400 audit(1780605706.911:2314): avc: denied { remount } for pid=14759 comm="syz.1.3519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 228.244380][T14783] netlink: 'syz.1.3528': attribute type 10 has an invalid length. [ 228.283526][T14783] syz_tun: entered promiscuous mode [ 228.290398][T14783] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 228.933866][ T28] audit: type=1400 audit(1780605708.241:2315): avc: denied { mounton } for pid=14809 comm="syz.8.3538" path="/603/file0" dev="tmpfs" ino=3141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 229.097494][T14816] __nla_validate_parse: 2 callbacks suppressed [ 229.097514][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 229.134249][T14816] netlink: 'syz.1.3541': attribute type 26 has an invalid length. [ 229.144002][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 229.154185][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 229.163550][T14816] netlink: 'syz.1.3541': attribute type 26 has an invalid length. [ 229.171935][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 229.348931][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3549'. [ 229.810990][T14841] loop8: detected capacity change from 0 to 512 [ 229.885743][T14841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.911159][T14841] ext4 filesystem being mounted at /604/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.930974][T14846] blktrace: Concurrent blktraces are not allowed on loop6 [ 229.946037][ T28] audit: type=1400 audit(1780605709.251:2316): avc: denied { write } for pid=14840 comm="syz.8.3553" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.990675][ T5892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.992667][ T28] audit: type=1400 audit(1780605709.251:2317): avc: denied { create } for pid=14840 comm="syz.8.3553" name=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 230.020812][ T28] audit: type=1400 audit(1780605709.261:2318): avc: denied { setattr } for pid=14840 comm="syz.8.3553" name=18 dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 230.091103][ T28] audit: type=1400 audit(1780605709.401:2319): avc: denied { ioctl } for pid=14849 comm="syz.8.3555" path="socket:[40551]" dev="sockfs" ino=40551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.257723][T14857] syz_tun: left promiscuous mode [ 230.300352][T14857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.344536][T14857] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.375133][T14857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.480610][T14857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.504973][T14857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.525884][T14857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.538226][T14857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.586192][T14857] veth1_vlan: left promiscuous mode [ 230.605133][T14857] veth0_vlan: left promiscuous mode [ 230.613258][T14857] veth0_vlan: entered promiscuous mode [ 230.636289][T14857] veth1_vlan: entered promiscuous mode [ 230.650702][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3569'. [ 230.661518][T14857] veth1_macvtap: left promiscuous mode [ 230.667719][T14857] veth0_macvtap: left promiscuous mode [ 230.673833][T14857] veth0_macvtap: entered promiscuous mode [ 230.682828][T14857] veth1_macvtap: entered promiscuous mode [ 230.692673][T14857] ip6gre1: left promiscuous mode [ 230.702373][T14857] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.710552][T14857] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 230.722059][T14857] bridge0: port 3(batadv1) entered blocking state [ 230.728524][T14857] bridge0: port 3(batadv1) entered listening state [ 230.738579][T14857] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 230.750459][T14857] 8021q: adding VLAN 0 to HW filter on device eth0 [ 230.758749][T14857] 8021q: adding VLAN 0 to HW filter on device eth1 [ 230.773527][T14857] 8021q: adding VLAN 0 to HW filter on device eth2 [ 230.784077][T14857] 8021q: adding VLAN 0 to HW filter on device eth3 [ 230.792856][T14857] bridge1: left promiscuous mode [ 230.799299][ T9503] team_slave_0: entered promiscuous mode [ 230.805287][ T9503] team_slave_1: entered promiscuous mode [ 230.825568][T11482] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.832856][T11482] bridge0: port 1(bridge_slave_0) entered listening state [ 230.849302][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.856420][T11482] bridge0: port 2(bridge_slave_1) entered listening state [ 230.908823][T11486] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.917179][T11486] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.925458][T11486] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.933825][T11486] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.977848][T11486] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.995158][T11486] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.005111][T11486] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.027167][T11486] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.087281][T11492] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.096294][T11492] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.100590][T14910] netlink: 'syz.4.3580': attribute type 1 has an invalid length. [ 231.107300][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3578'. [ 231.122726][ T9514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.124981][T14910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.186394][T14910] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 231.288410][T14925] loop8: detected capacity change from 0 to 2048 [ 231.335719][T14925] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.369326][ T28] audit: type=1400 audit(1780605710.681:2320): avc: denied { write } for pid=14922 comm="syz.8.3584" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.413275][ T5892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.446184][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 231.477981][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.563697][T14948] SELinux: failed to load policy [ 232.002912][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.163391][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 232.163408][ T28] audit: type=1326 audit(1780605711.471:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.3.3611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1db5d7ce59 code=0x0 [ 232.272477][T15013] netlink: 'syz.8.3617': attribute type 83 has an invalid length. [ 232.337531][ T28] audit: type=1400 audit(1780605711.641:2324): avc: denied { watch watch_reads } for pid=15020 comm="syz.1.3621" path="/proc/705/task" dev="proc" ino=40869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 232.914922][ T28] audit: type=1400 audit(1780605712.221:2325): avc: denied { connect } for pid=15037 comm="syz.5.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.950703][ T28] audit: type=1400 audit(1780605712.221:2326): avc: denied { write } for pid=15037 comm="syz.5.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.055247][ T28] audit: type=1326 audit(1780605712.361:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15044 comm="syz.3.3632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1db5d7ce59 code=0x0 [ 233.141220][ T28] audit: type=1400 audit(1780605712.451:2328): avc: denied { mount } for pid=15049 comm="syz.1.3633" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 233.212919][T15053] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 233.221001][T15053] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 233.510573][ T28] audit: type=1400 audit(1780605712.821:2329): avc: denied { bind } for pid=15071 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.759626][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'. [ 233.769473][T15096] netlink: 'syz.1.3655': attribute type 5 has an invalid length. [ 233.777303][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'. [ 233.791600][T15096] geneve2: entered promiscuous mode [ 233.796850][T15096] geneve2: entered allmulticast mode [ 233.805514][T11482] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 233.813937][T11482] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 233.827466][T11482] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 233.848767][T11482] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 233.929949][T15113] veth0: entered promiscuous mode [ 234.243487][T15127] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 234.269506][ T28] audit: type=1400 audit(1780605713.581:2330): avc: denied { setopt } for pid=15130 comm="syz.5.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.386292][T15141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 234.609139][T15151] loop8: detected capacity change from 0 to 128 [ 234.762460][ T28] audit: type=1400 audit(1780605714.061:2331): avc: denied { write } for pid=15153 comm="syz.3.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.782706][ T28] audit: type=1400 audit(1780605714.061:2332): avc: denied { ioctl } for pid=15153 comm="syz.3.3684" path="socket:[42105]" dev="sockfs" ino=42105 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.038009][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.223618][T15184] random: crng reseeded on system resumption [ 235.248033][T15184] Restarting kernel threads ... [ 235.263239][T15184] Done restarting kernel threads. [ 235.266644][T15182] __nla_validate_parse: 2 callbacks suppressed [ 235.266672][T15182] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3696'. [ 235.276955][T15184] Restarting kernel threads ... [ 235.293083][T15184] Done restarting kernel threads. [ 235.438584][T15208] ref_ctr_offset mismatch. inode: 0xe79 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 236.966600][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3740'. [ 237.113367][T15290] netlink: 'syz.5.3742': attribute type 1 has an invalid length. [ 237.175230][T15294] batadv0: entered promiscuous mode [ 237.182189][T15294] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 237.630552][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 237.650047][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3751'. [ 237.670506][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 237.689198][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3751'. [ 238.055302][T15332] veth0_to_team: entered promiscuous mode [ 238.099390][T15332] veth0_to_team: left promiscuous mode [ 238.591477][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.599181][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.951735][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 238.951814][ T28] audit: type=1400 audit(1780605718.261:2340): avc: denied { read } for pid=15382 comm="syz.4.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.004527][T15383] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 239.064596][T15389] hsr0: entered promiscuous mode [ 239.101733][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 239.323163][T15393] random: crng reseeded on system resumption [ 239.367911][T15393] Restarting kernel threads ... [ 239.409431][T15393] Done restarting kernel threads. [ 239.425667][ T28] audit: type=1400 audit(1780605718.731:2341): avc: denied { setattr } for pid=15396 comm="syz.8.3787" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.077622][ T28] audit: type=1400 audit(1780605719.381:2342): avc: denied { append } for pid=15416 comm="syz.3.3796" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 240.108123][T15417] sg_write: data in/out 479232/136 bytes for SCSI command 0x0-- guessing data in; [ 240.108123][T15417] program syz.3.3796 not setting count and/or reply_len properly [ 240.151480][T15419] vlan2: entered allmulticast mode [ 240.164872][T15419] bond_slave_1: entered allmulticast mode [ 240.204992][T15422] vlan2: entered allmulticast mode [ 240.572680][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3810'. [ 240.574414][ T28] audit: type=1400 audit(1780605719.881:2343): avc: denied { nlmsg_read } for pid=15451 comm="syz.8.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.672189][T15460] loop8: detected capacity change from 0 to 512 [ 240.730804][T15460] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 240.756261][T15462] sctp: [Deprecated]: syz.3.3815 (pid 15462) Use of int in max_burst socket option deprecated. [ 240.756261][T15462] Use struct sctp_assoc_value instead [ 240.786588][T15460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.801630][T15460] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.820899][ T28] audit: type=1400 audit(1780605720.131:2344): avc: denied { write } for pid=15459 comm="syz.8.3814" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.847196][ T28] audit: type=1326 audit(1780605720.151:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.4.3816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184f29ce59 code=0x7ffc0000 [ 240.876616][ T28] audit: type=1326 audit(1780605720.151:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.4.3816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184f29ce59 code=0x7ffc0000 [ 240.878159][ T5892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.905533][ T28] audit: type=1326 audit(1780605720.151:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.4.3816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184f29ce59 code=0x7ffc0000 [ 240.966805][ T28] audit: type=1326 audit(1780605720.161:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.4.3816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f184f29ce59 code=0x7ffc0000 [ 241.020118][ T28] audit: type=1326 audit(1780605720.161:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.4.3816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184f29ce59 code=0x7ffc0000 [ 241.130020][T15483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15483 comm=syz.8.3824 [ 241.408538][T15489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.417669][T15489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.116973][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3848'. [ 242.406458][T15555] tipc: Started in network mode [ 242.412838][T15555] tipc: Node identity 000000002d00003a0040ffffe0000001, cluster identity 4711 [ 242.449084][T15555] tipc: Enabling of bearer rejected, failed to enable media [ 242.658663][T15566] loop8: detected capacity change from 0 to 512 [ 242.665785][T15566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.712799][T15566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 242.727898][T15566] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.755606][T15566] EXT4-fs error (device loop8): ext4_init_orphan_info:583: comm syz.8.3861: inode #0: comm syz.8.3861: iget: illegal inode # [ 242.770815][T15566] loop8: lost filesystem error report for type 5 error -117 [ 242.771026][T15566] EXT4-fs (loop8): Remounting filesystem read-only [ 242.786582][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 242.786600][ C0] EXT4-fs (loop8): initial error at time 1780605722: ext4_init_orphan_info:583 [ 242.786625][ C0] EXT4-fs (loop8): last error at time 1780605722: ext4_init_orphan_info:583 [ 242.813591][T15566] EXT4-fs (loop8): get orphan inode failed [ 242.821755][T15566] EXT4-fs (loop8): mount failed [ 243.530500][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3890'. [ 243.539770][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3890'. [ 243.776927][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 243.785942][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 243.794995][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 243.804034][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 243.861939][T15649] xt_hashlimit: size too large, truncated to 1048576 [ 244.071068][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 244.071107][ T28] audit: type=1400 audit(1780605723.381:2364): avc: denied { mount } for pid=15659 comm="syz.4.3901" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 244.173117][T15662] serio: Serial port ptm0 [ 244.195894][T15669] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3905'. [ 244.325416][T15662] serio: Serial port ptm0 [ 244.520837][T15695] netlink: 'syz.3.3917': attribute type 25 has an invalid length. [ 244.541427][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 244.577944][T15695] netlink: 'syz.3.3917': attribute type 25 has an invalid length. [ 244.579244][T11493] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.605713][T11493] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.631783][T11493] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.659973][T11493] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.693384][T15701] syzkaller0: entered promiscuous mode [ 244.714870][T15701] syzkaller0: entered allmulticast mode [ 245.174249][ T28] audit: type=1400 audit(1780605724.481:2365): avc: denied { connect } for pid=15734 comm="syz.3.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.222107][ T28] audit: type=1400 audit(1780605724.521:2366): avc: denied { write } for pid=15737 comm="syz.3.3928" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.318158][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 246.325718][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 246.333097][ C0] bridge0: port 3(batadv1) entered learning state [ 247.136759][ T28] audit: type=1400 audit(1780605726.441:2367): avc: denied { bind } for pid=15831 comm="syz.8.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 247.161957][T15832] __nla_validate_parse: 1 callbacks suppressed [ 247.161985][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3965'. [ 247.212806][ T28] audit: type=1400 audit(1780605726.521:2368): avc: denied { connect } for pid=15831 comm="syz.8.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 247.549632][T15849] syzkaller0: entered promiscuous mode [ 247.573934][T15849] syzkaller0: entered allmulticast mode [ 248.478935][ T28] audit: type=1400 audit(1780605727.791:2369): avc: denied { create } for pid=15896 comm="syz.8.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 248.484017][T11482] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 248.907568][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4003'. [ 249.332512][T15941] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.347633][T15941] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 249.376169][ T28] audit: type=1400 audit(1780605728.681:2370): avc: denied { mounton } for pid=15944 comm="syz.3.4013" path="/proc/562/cgroup" dev="nsfs" ino=4026532365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 249.485053][ T28] audit: type=1400 audit(1780605728.791:2371): avc: denied { write } for pid=15950 comm="syz.1.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.543765][T15951] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 249.962230][ T28] audit: type=1400 audit(1780605729.271:2372): avc: denied { write } for pid=15983 comm="syz.4.4029" path="socket:[44839]" dev="sockfs" ino=44839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.027022][ T28] audit: type=1400 audit(1780605729.331:2373): avc: denied { getopt } for pid=15983 comm="syz.4.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.532061][ T28] audit: type=1326 audit(1780605729.841:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.5.4037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6adfece59 code=0x0 [ 250.653046][T16011] sock: sock_set_timeout: `syz.3.4038' (pid 16011) tries to set negative timeout [ 251.462199][ T28] audit: type=1326 audit(1780605730.761:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.5.4054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6adfece59 code=0x7ffc0000 [ 251.514509][ T28] audit: type=1326 audit(1780605730.811:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.5.4054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6adfece59 code=0x7ffc0000 [ 251.579366][ T28] audit: type=1326 audit(1780605730.811:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.5.4054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6adfece59 code=0x7ffc0000 [ 251.620606][ T28] audit: type=1326 audit(1780605730.811:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.5.4054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6adfece59 code=0x7ffc0000 [ 251.659172][ T28] audit: type=1326 audit(1780605730.811:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.5.4054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fe6adfece59 code=0x7ffc0000 [ 251.701114][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4060'. [ 252.649962][T16117] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 252.781530][T16057] kexec: Could not allocate control_code_buffer [ 253.899599][T16194] netlink: 'syz.8.4122': attribute type 39 has an invalid length. [ 253.971183][T16198] loop6: detected capacity change from 0 to 8 [ 254.233181][T16198] loop6: detected capacity change from 8 to 7 [ 254.238894][T16218] netlink: 67 bytes leftover after parsing attributes in process `syz.8.4130'. [ 254.287956][T16208] loop6: detected capacity change from 7 to 0 [ 254.290441][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.305189][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.313180][T16198] loop6: unable to read partition table [ 254.320929][T16198] loop6: partition table beyond EOD, truncated [ 254.327286][T16198] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 254.327286][T16198] 咁 0x0000000000004139 [ 308.573454][T20156] [ 308.575787][T20156] Reported by Kernel Concurrency Sanitizer on: [ 308.582012][T20156] CPU: 0 UID: 0 PID: 20156 Comm: syz.1.5175 Not tainted syzkaller #0 PREEMPT(lazy) [ 308.591485][T20156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.601641][T20156] ==================================================================