last executing test programs: 1m29.007965417s ago: executing program 4 (id=5): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r1 = open(0x0, 0x0, 0x33) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c004) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2b8c}, 0x0, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000b90000000100010009000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x8e6000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000007c0)='./file0\x00', r3}, 0x18) socket(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000880)='scalable', 0x8) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) unshare(0x2c040480) fdatasync(r7) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f00000000c0)=""/176, 0xb0}], 0x3, &(0x7f00000001c0)=""/166, 0xa6}, 0x40) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, 0x0, 0x1000f) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x608240, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x1}, {0xffffffff7ffffffb}, 0x1, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000dc0)="b3c3c840428712940a7a71cc0a9ade7e81c3153946f2ada2943cf54ec1fb05b5d966cb21b71ce7408bfe95d6e74aea5d5119dfdb85ebc452f32eec801926815b2ac52bbcf4f38d042712fd07c9d36b74b14b6aafe51e3a40768f14c57b5cde2d1b31e3a741b411734a9abd60e1d0e358f995485250fcc332dffe707eb7c217a972901f927bbc02a662e981939428c0d71b3d8768898f2f802efdcb956a645a12907009ce9454c0b3ff818ec28434e5cd62aa49353ae4c2ce814226a3ab4fe994e290025fdc5eb8f421b2dadb66df40a485b2effeb4dc24561700f97d52849012f0825f12ec58115623d7f98ab883e41c", 0xf0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x216}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) 1m26.588863003s ago: executing program 4 (id=24): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0x1, 0x3c2, &(0x7f0000000a80)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)=""/88, 0x58}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) recvmmsg(r1, &(0x7f0000006d40)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x4, &(0x7f0000001ec0)=""/4096, 0x1000}, 0x6ed1}, {{&(0x7f0000002ec0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/15, 0xf}], 0x1, &(0x7f0000002fc0)=""/122, 0x7a}, 0x4}, {{&(0x7f0000003040)=@xdp, 0x80, &(0x7f0000004340)=[{&(0x7f00000030c0)=""/90, 0x5a}, {&(0x7f0000003140)=""/145, 0x91}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/184, 0xb8}, {&(0x7f00000042c0)=""/58, 0x3a}, {&(0x7f0000004300)=""/40, 0x28}], 0x6}, 0x5}, {{&(0x7f00000043c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/14, 0xe}, {&(0x7f0000005480)=""/9, 0x9}, {&(0x7f00000054c0)=""/91, 0x5b}, {&(0x7f0000005540)=""/104, 0x68}], 0x5, &(0x7f0000005640)=""/110, 0x6e}, 0xe536}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f00000056c0)=""/243, 0xf3}, {&(0x7f00000057c0)=""/152, 0x98}, {&(0x7f0000005880)=""/94, 0x5e}, {&(0x7f0000005900)=""/149, 0x95}, {&(0x7f00000059c0)=""/145, 0x91}, {&(0x7f0000005a80)=""/91, 0x5b}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/158, 0x9e}], 0x8, &(0x7f0000006c40)=""/235, 0xeb}, 0x80}], 0x5, 0x2, &(0x7f0000006e80)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000080)={0x11, @multicast1, 0x4e24, 0x0, 'fo\x00', 0x6, 0x0, 0x7d}, 0x2c) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x141401, 0x6e) ftruncate(r5, 0x4006000000) 1m26.290244906s ago: executing program 4 (id=34): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x31, 0x61, 0x33, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x6, 0x800, 0x3) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r4) syslog(0x3, &(0x7f0000000000)=""/23, 0x17) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4a21, @rand_addr=0x64010102}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000474000/0x4000)=nil, 0x4000, 0x6800006, 0x92, r5, 0x205fc000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") (async) r6 = inotify_init1(0x80400) inotify_add_watch(r6, &(0x7f00000024c0)='.\x00', 0x400000c) 1m25.94533506s ago: executing program 4 (id=40): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1]}, 0xfffffffffffffffe, 0x8) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="000000000005000000000000", 0xc, 0xffffffffffffffff) 1m25.94373292s ago: executing program 32 (id=40): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1]}, 0xfffffffffffffffe, 0x8) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="000000000005000000000000", 0xc, 0xffffffffffffffff) 34.264979896s ago: executing program 3 (id=401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000}, {0x4, 0x7ffffffffffffffd, 0x407ffffffffffe, 0x2}, 0x3, 0x1, 0x1, 0x1, 0x2, 0x1}}, 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x84884) ftruncate(r1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt(r5, 0x81, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x67, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xd, 0x8}, 0x220f, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000680)={&(0x7f0000000080)="08fb48335c2da5e1a20d", &(0x7f00000003c0)=""/217, &(0x7f00000004c0)="24b0e8ffc379537d81c2432775d9174418aaa5d506430bed2f83267dbf02c829e8c0f9776cf287f5d7d670657d0869a3cd4afafce7b552e1c0f9327ac30e12939354cb2aed", &(0x7f0000000540)="14979a4dfd86d08c1fdbc83a83e89ce31447e9fb98878a98be39aa203dbe1c0af3d3a07a2a2502388ddb4bc985c790b85cf6f8b386d030fc2b560561660311cf22e8c07780612b8015fe8bd08277d220dc5b785778dc2f3d0988a70db7ca8852548898b01304b0f1ed9ea9c177b489da7e7a0e089c347feb8ed813b63a38272f8e60b25f1b9d65d30ae105bbd10313b351fab5ab692ecf521cb132eda0a139d082f6f7c28272a111b0753fa5cbcdcc857a242cef6761bf9a8a5f914cdc0b35695671e2a1a350d970ac30b0d916c62385c50eb9d699b86e73d5a15b", 0x1}, 0x38) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7000fbdbdf25050000000c00080003000000000000000c00040000000080000000000c00050001000000000000000c00050020010000000000000c00060003000000000000000c000800faa6900d0000000008000100000eb14c815b000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c810}, 0x95) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000140013"], 0x30}}, 0x0) 33.965337408s ago: executing program 3 (id=405): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x1900a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000540000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffff7fc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) chroot(&(0x7f0000000080)='./file0/../file0/../file0\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x138}}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 32.93327512s ago: executing program 3 (id=410): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f0000000100)='redir\x00', 0x80, 0x4, &(0x7f0000000140)={0x7fff, 0x54c, 0x80000000, 0x5}) mq_timedreceive(r1, &(0x7f00000004c0)=""/246, 0xf6, 0x5, &(0x7f00000005c0)={0x77359400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYBLOB="06ed6f43"], 0xfdef) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14}}, 0xc4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018e58, &(0x7f0000000380)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@acl}], [{@flag='dirsync'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'data_err=ignore'}}, {@smackfshat={'smackfshat', 0x3d, 'barrier'}}, {@flag='nolazytime'}]}, 0x4, 0x643, &(0x7f0000001780)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b619957aa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e14060002800000129400"/46, 0x2e}], 0x1}, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7fffffff, 0x5, 0x0, 0x13, 0x1c, 0xb, "bb0975cdd3fec72eaff827f8c3dda1007886cf6041c6331bed475b4a55f2de28e1597245f4ae86e9f9b9cd72220d60a1be7f33c532b1ca4f712b17f4f934347d", "b7e2b6232bb8e411edb235a52c66d9238e504814868efa17faff2ab1ffc9a774ea73f21152be1796a4135f3108199d12b5b47e15edc012cebaa5f5f2926317d9", "f60c0cbfb7aae3d2567f7d29d3828832a930ca00e4965c9a08c13369f884b501", [0xef0, 0x8]}) 32.06737166s ago: executing program 3 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES32=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000efffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c200000fbbbbbbbbbbbb86dd60dd69bf004c2b00fc000000000000000000000000000000fe8000000000000000000000000000aa0000000000000000042081000000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000ab19c068655800000000"], 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000a0000000000000004000b00"], 0x1c}}, 0x0) sched_rr_get_interval(r4, &(0x7f0000000280)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000340)={r7, 0x7, 0x6, 0x9}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002502001000000400060000002008001e000100"/36], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket(0x10, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r11 = socket$kcm(0x29, 0x4, 0x0) sendmsg$kcm(r11, &(0x7f0000000ec0)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)="d79efd536389f9925471713418d2e9be89cfd6de710b029fecc84a7c6cfbf6740bb02a48590fc541e39795fa8125e67d8339405ed9fdec99c2901348d4588a43831bb899d9da55dbcd9d0aa0828f9de0c746656311b62ef8ed889a7e625c7dd7fc972ec329b5b2df381b5ce2418a4e01c2d547759cb80a0d4d5d5a96064e928d5438eb9a2badfcc0913efca10a4f696467bed93d23777a45b0ac12171f86c53ddbd303d2a0f8acb976f20200017be0cbcf10e14cb9e6a3eb3aa4789cf711eb8dcb7031ef214bf31b19dc3ac57401e7cf0c2a2b9926", 0xd5}, {&(0x7f0000000180)="38d2870463d49e41891057c4434a049e0b7d475db6b483183112db261695f459a7f2fc", 0x23}, {&(0x7f0000000540)="9faaa9cd3b75c1828e0ab4e6407854d5d9a92418b6edf1a99e7beef20d68dfbab204e2823234f27ce988d6743244a212bf5da73e841b404e171e528a1a567d19dbca2f53972bae9d591eb869d245b54cf65dcc7ac1b56ba7821a5e314cf35f7f8f64e3f375f69c20dc6fd57558a5925e2d9ed06f53e443783bf7d9748bbc091a67355712de2f4fcbd0dcca448053bc94e0d47f11048d6d7beaecaf2840e3f8e884aad9c15e59fc811b0a65b8b7febfae8384016a00fd49aae89fd4f046439e6a1e2e7433786a8e7c715f7afd1e8eff44911ee35b95aa17df62d6672ab097d9fb6f8d7f3fd9324ad873afeb1cd16b943a6ec09a7e0dfa3f", 0xf7}], 0x3, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r3], 0x488}, 0x4000884) 31.11332218s ago: executing program 3 (id=421): socket(0x29, 0x1, 0x7) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) syz_clone(0x29080, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 29.447262148s ago: executing program 3 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000740)={[{@grpquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7f}}, {@dax_never}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e5, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000940)='./bus\x00', 0x800000, &(0x7f0000000980), 0x1, 0x51d, &(0x7f0000000200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) unshare(0x4000400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x2062) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x6, 0x9, 0x2, 0x8, 0x4, 0x4346, 0x6}) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000a9b000/0x2000)=nil) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f00000001c0)="c9dea8880f719ed9eb761caeedeac3cdfd94ab836aa1ed42b8980721a49f2c928ab5482cdc9f4ad5e184bcfb307fb0817a15ebafe89f2f26d6f14655ae762c5080e5ba89846a436d111d9711ee65bfda8a9181e21fe8c34df55ede236cd95af639d0e50824cdceccbd0abd25856fc0db4ccba4abfcd1c2b241376d731bc356a4419fd1d86bebe71dc587a922e76846827a8eb0fdad57958454fe97d3203cebd36bded135c28532620e6fdbd009c38822da7115a1b0b6b1c7896f19776315249fb7f7adbc88d897de852fe757") ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c850}, 0x8000002) 28.817198785s ago: executing program 0 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0x894c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r5, @ANYBLOB="00000000000000060c001a8008"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), 0x0}, 0x20) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x40009}, 0x1c) listen(r1, 0x204) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), 0x2) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r7 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmmsg$inet(r7, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000300)) sendmsg$nl_route(r0, 0x0, 0x4044000) 28.545053828s ago: executing program 0 (id=436): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f00000006c0)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa000000, 0xb}, 0x50) 28.229281701s ago: executing program 0 (id=437): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffff7ffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x28, r2, 0x62c21a4ade68aba1, 0xf0bd23, 0xfffffffd, {{0x32}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x76}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x20040810) prctl$PR_GET_KEEPCAPS(0x7) 27.973085014s ago: executing program 0 (id=441): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="8d070000000000000018110000cd408431682df9c6dae1dbb83405343a80575b346e4f8c44728492a6612161d4c0fe920d48e15a24488d1655982224728e0c9a6ce0a65cf5b798111f6ebecaba9ead8e179bfca388442df62cb2434302000000dac2a635294fdf53f15d732405e354f0a4e3bf4e8488aa809384da7b831f8b30d23d5b65687bf7f9f507769f915e07bd03ad7f00"/171, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000030000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x40, 0xfffffffe, 0x40, {{0xb, 0x4, 0x1, 0x24, 0x2c, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0x61, [@local]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "af3edb503f654a03ee"}]}]}}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x400}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x24040070) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="700000006d0000012dbd7000fedbdf2500000000", @ANYBLOB="0045040000010000080025000200000008002800f8ffffff08001f000100000008000ac261fb30643b8400", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaaaa000008001d004002000008002c00020000001400140076657468315f746f5f62617461647600"], 0x70}}, 0x20000001) (async) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="700000006d0000012dbd7000fedbdf2500000000", @ANYBLOB="0045040000010000080025000200000008002800f8ffffff08001f000100000008000ac261fb30643b8400", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaaaa000008001d004002000008002c00020000001400140076657468315f746f5f62617461647600"], 0x70}}, 0x20000001) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r2) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7400b04974af2188935775f587b18e226ce581fb891d405769ee6a23ce0496840200a1f5721596da45b92dc5516a6a691f55649a1c52f7e62eeb7fc1a1e371516510dc19cae0e6ae0c8a0ad43310d665e29343dfcdb80c7f91a9a0aa008ca0add6e08e1bb2ea8939c496791787b8094045b064805d8c8112b6abd9b8958f43518b71761b6115ee62fc3d1eec527dc187430bbc668a4347e2b0dc3d86fb05ac0c9cb03acaee913296432481ae96597dc5cf3867bb5764b6879c145e0a5b9b840a5a589fbfcb15904b10", @ANYRES16=r11, @ANYBLOB="000128bd7000fcdbdf25060000001c0003800800010004000000080001000300000008000200000000800c0007800800020008000000380001802400028008000200df0c00000800010017000000080001001f00000008000400000000000d0001007564703a73797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x24000010}, 0xc0) (async) sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7400b04974af2188935775f587b18e226ce581fb891d405769ee6a23ce0496840200a1f5721596da45b92dc5516a6a691f55649a1c52f7e62eeb7fc1a1e371516510dc19cae0e6ae0c8a0ad43310d665e29343dfcdb80c7f91a9a0aa008ca0add6e08e1bb2ea8939c496791787b8094045b064805d8c8112b6abd9b8958f43518b71761b6115ee62fc3d1eec527dc187430bbc668a4347e2b0dc3d86fb05ac0c9cb03acaee913296432481ae96597dc5cf3867bb5764b6879c145e0a5b9b840a5a589fbfcb15904b10", @ANYRES16=r11, @ANYBLOB="000128bd7000fcdbdf25060000001c0003800800010004000000080001000300000008000200000000800c0007800800020008000000380001802400028008000200df0c00000800010017000000080001001f00000008000400000000000d0001007564703a73797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x24000010}, 0xc0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba000000f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b00"], 0x28}}, 0x800) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 27.46381518s ago: executing program 0 (id=443): socket(0x29, 0x1, 0x7) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) syz_clone(0x29080, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 25.942261057s ago: executing program 0 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650003180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 13.992448458s ago: executing program 33 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000740)={[{@grpquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7f}}, {@dax_never}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e5, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000940)='./bus\x00', 0x800000, &(0x7f0000000980), 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) unshare(0x4000400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x2062) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x6, 0x9, 0x2, 0x8, 0x4, 0x4346, 0x6}) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000a9b000/0x2000)=nil) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f00000001c0)="c9dea8880f719ed9eb761caeedeac3cdfd94ab836aa1ed42b8980721a49f2c928ab5482cdc9f4ad5e184bcfb307fb0817a15ebafe89f2f26d6f14655ae762c5080e5ba89846a436d111d9711ee65bfda8a9181e21fe8c34df55ede236cd95af639d0e50824cdceccbd0abd25856fc0db4ccba4abfcd1c2b241376d731bc356a4419fd1d86bebe71dc587a922e76846827a8eb0fdad57958454fe97d3203cebd36bded135c28532620e6fdbd009c38822da7115a1b0b6b1c7896f19776315249fb7f7adbc88d897de852fe757") ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c850}, 0x8000002) 10.897093041s ago: executing program 34 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650003180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 9.875654852s ago: executing program 5 (id=502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) 4.153301465s ago: executing program 5 (id=521): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = syz_io_uring_setup(0xc46, &(0x7f0000000280)={0x0, 0x38fa, 0x1, 0x0, 0x361}, 0x0, &(0x7f0000000340), 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x200001, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000400)={0x1ff, r2, 0x2, {0x40000000002, 0x258}, 0x1f}, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f00000001c0)=r4}, 0x20) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xff) socket$inet_udp(0x2, 0x2, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r7, r7, 0x0, 0x80000000) setresgid(0xee00, 0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000270007f6ffffff003fe9f5f8047c0000292b25b1e51a8f1e081d52995d117502d0"], 0x14}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000) 3.956462217s ago: executing program 5 (id=522): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x201, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000001cb0000000000000000000000ff000000020000fe8000000000000000000000000000aa"], 0x0) 3.899885218s ago: executing program 5 (id=523): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11002, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x7372, &(0x7f00000000c0)={0x0, 0x4692, 0x400, 0x3, 0xf0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x117, &(0x7f0000000500)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe1, 0x3a, 0xff, @private0, @local, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x2, 0x7, "5e25a7a776aa26105174e2bab99f8c638c720ecfe46bab313cc625cbed7972fe31e69810d172200f8b1114e050a8a9b9d14ca4466dcb7573f2"}, {0xe, 0x13, "883b2c50066b653091b656a3064c288e716eaa72daaacae5ae3324a95da3cc0f133f7b6c64b31b92f2acfe55516277b581260df478af227bff364b46124f5f0feabca4429a6f8f1fc219b73b4479f532cabb45e4244ea52a0ca42e0f5c9cf95e139d2293e56015daea37998d908f80dc96cbf325fa4248e6ced5fe122553d4526ee2012f254d5629cff710f7ad50d2b5eb608972108918df3f8a32ba"}]}}}}}}, 0x0) cachestat(r0, &(0x7f0000000040)={0x7, 0x7}, 0x0, 0xee) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) io_setup(0x2, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, 0x0, 0x0) eventfd(0x1) eventfd2(0x1, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r1 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') lseek(r2, 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f3, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 3.672487411s ago: executing program 2 (id=524): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x191, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x5}, 0x106a00, 0x1000, 0x0, 0x0, 0xa, 0x3, 0xb, 0x0, 0x0, 0x0, 0x800000000a6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x100000000000000) 2.954427799s ago: executing program 2 (id=527): recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000300)=""/223, 0xdf, 0x10003, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x5e50, 0x2}, 0x80) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x48001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) unshare(0x0) (async) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1fc, &(0x7f0000000d80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) r4 = dup3(r2, r3, 0x80000) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4a22, 0xffffffff, @private1, 0x3}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYRES32=r7, @ANYBLOB="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", @ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x24040880}, 0x11) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) creat(&(0x7f0000000080)='./file2\x00', 0x143) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.864129879s ago: executing program 6 (id=529): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f000000c4c0), 0xa8000, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x392, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 2.850660669s ago: executing program 5 (id=530): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000020000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x571f68543cec8180) 2.677395441s ago: executing program 2 (id=531): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x201, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000001cb0000000000000000000000ff000000020000fe8000000000000000000000000000aa"], 0x0) 2.677087611s ago: executing program 6 (id=532): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x9c}, 0x1, 0x1300000000000000}, 0x0) 2.661192651s ago: executing program 5 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r4, 0x89ee, &(0x7f0000000380)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20000150) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r8 = socket(0x2, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xe}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{&(0x7f00000003c0)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000007c0)="9d7d7275a119a6d677b2a202bb90632b45e5482d9653122142986062afc225a6661f109002d30cf100fdf90413a212354f3a611d961663ca377a9883f5a2c3fc382dfbc78cd853a0bb5e1ff7011a10780ae29e78ef1fed3042ca6e41c9ff3ba5bab757b6619c0c4d31fd3c35ba7aa020fb2684c71649d7130b3ee25aace89c", 0x7f}, {&(0x7f0000000840)="1db038ae2f5ba717d6f70efb3b4df2f372d89fb75181c6783696add7c07ca1bfa9578c5d50d3a937064073b7a5fbf5ad", 0x30}, {&(0x7f0000000880)="a2b78092c32f2f14efdd3a96c6db84b81dcd041949ca1fc699af499413e2b520d84ebb1d959425c8079fb6bbe43db2d0d6243ee4e93dd38eee1dd50b3161c64fcdc3b9a9df3ae91309a81bbb317a3a8ffe48d1d57c815e80883908a595b325778f85dc37bd9b623bf20fa4dc2c6a1a41f85b252b901a", 0x76}, {&(0x7f0000000900)="2aad6278d079662c18cdb4662956213cdbbe493a1e0b8fd3", 0x18}, {&(0x7f0000000940)="b283c31335eaa16e9d1aee2cbd03c1edca886dc7760590f9053699ccf4defe8a1b463b15249c1870b4559074aef9aefea28a0db6db88f3568ac6d23d69bfb45d582ea8934234fe8bac69121564fbd749eee28dd202b06a3e23881174f46a2afeb2fcd5ac905bd6128f774d16d5998438cbd6e3a6949c61e385560c5acfcb9eac3718086c8fa927b9c84b34f0002a375eeec1c2a37a71ab264c52469a44323ec4cceccab4de5b74d86e90041c4204f1e9416a53c5c13fe869d7175f87474c0a64515b2f4e388a4b858584e028ae5b12a1fd33ac9588bc80721f14e8c87d3600c9f0f20b5246b8300055de71da4bf3129a68dee7", 0xf3}, {&(0x7f0000000a40)="226b3aff3abe4a1dffa08672439d43cd4dc5a8ded32f58", 0x17}, {&(0x7f0000000a80)="f179b1d28db5871ee113bb07d3937b7390cc43fe2aa24a754133ccecde162097ea7ef6fd3bca023781445763819ff9abf7a79dafc810d72db7a75ce8a133f72ef5db244a573e6d2b8673f6eb6805b63668e6e3a8e37bbb4cdc9c77306225adf56df3c6d5e735168d6946d9e92223cb817501905d47b49888684d6d5532e2d6dc8f92c4f008eb0458d77883e3205cd14e34e5cfbddec8649f9925f1feecc6f9b7fb639aa1755afc3382c51c626c15ad28ef81de0b6abc3596", 0xb8}, {&(0x7f0000000b40)="023fc8dece93806f1e2b73211160093cfef6b3755b6b1cf94644d1519355d435c0173954955d15bb12f1fc74143e08af48fe8ad7fcd83b6cd566452354cd004f078104c6dedb6f864c465f897e40e26ed2772abc1f3a50fa3a0c955a1dd2068a4b8cafca380ff208360dcf7e77e05c74c4480441b0b2fa300e28e92c7b08faaa837b4e5360d54ec9da8a8759114c", 0x8e}, {&(0x7f0000000c00)="2a1d27aab1b8ef5934f8ac0b4674a0b3ef2af280bed5ad59ad7374c18375686c0f61afc83ba809ea71ffa6cae2f9ba87", 0x30}], 0x9, &(0x7f0000000d00)=[{0xa0, 0x107, 0x20, "d614e6402e0b372607250676b1c1ea8de8def7a5c030c2b8d26e49068727aa99e66817c4abb3d00f2afc4b6d8cabcfdcf1fbf04e78fed32872a7cca0bbed720c5dcdde7516e79becffc7532de95c95fa3d282d12631d2dc074b8f0f89de59b6e79f255fd208127ca996e65d5e2a44224f24cef7419672b002d154faefb6c2c8897548c6817390abdbed7"}], 0xa0}}, {{&(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @private=0xa010100}, 0x0, 0x4}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="e271266b924fc2a8107131ca1d9453e401ebdd6db64a79f5894d29e46ada00df764387059d92e3db529daa815c080f56b0adb8fc567f74e450032e880a7fd34c2ba9fc1b777d0eb3085ac751d52e612819836c16056467bfbcaf1e48da6114f98c3871ccd764ae617e6e1742592c2af8562486ea8eb58a768fae0c1250e181763af67cf30b2efceb44f4", 0x8a}], 0x2, &(0x7f0000002780)=[{0x20, 0x118, 0xffffffff, "10424f12aa3e237fba3568a987"}, {0x30, 0x198, 0x9, "56891a4de647f1960798cce235d2f74d9ea12f4d143268ed7e"}, {0x108, 0x116, 0x14000000, "f23172987afb3df34373324c11c61e6b343604250c54c95e3dbb65f709d963730d98fadbfd6778278dee5c298e060bfc47974fd56c5897f77db9e28e15d9d024583dd468e79417668cf634343a1536f35ed3412a1add6799ebbea2506bd4d355b3b9b7c82ea6361065d82bcb849c4b67b1e5a9353a49f9485c213a07fd2e9df0e6c4832c0d251b1c5e9b86d8755ad598b80ba9de6172aee0a82e69cd5b1e5105532b0f3826b0658a2b0c22e07e4df0906ca191dce8a32989c1559b3b88932a7bb2a9f6f7057d522f3bc765f40d05f5bcd99545a0c42ba1c64c68981d8506b8f560e6500dc0541d9991ed2abcbabb79e2f05776"}, {0xb0, 0x10b, 0x2fdc3168, "0170bb8062eadbcc81d629bded2783f61f07eda66683f2f89633ab05e17fd9b97e2b87015762558e9d12d0835c84489a8d2f6e596a4a59034e392dab953095ea3b2210428c43d70190a0fa3887fb67cb008e87922c682d727bf37f787d0601e17e80fc13e5f8289490dded1a089977acc10dfd7a8ea69bb68a08596a1e96c626997366c01dbb20b4ee71fdaf0d9fcfba0358d7100f11f88a14e600ceff"}], 0x208}}, {{&(0x7f00000029c0)=@isdn={0x22, 0x6, 0xd, 0xf7}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)="96c4cf501e1976206528144d26a439d3aaef90edf2cc87d857201e01bf45402cccb4cab41305b4f75a9a5164139224cc467f0375cf38b9137a051778a4841fa3b432496985f44038f7b0fe5b5d4d29b14a8a59f8a1ad5b571d9917f0961e16ca2237ce2f7695a15e2a6d609ceb9b8037131873ab9ff6671be815bfc6f04ba8f39cead043cb3a3094c83b3b", 0x8b}], 0x1, &(0x7f0000002b40)=[{0xb0, 0x102, 0x6144, "38cba30d5fd4077aed983e980982d01faba0a5c7054697e93b38e6a38c50dc4436e4fa87e6c77d7ca610a79d0a65f3b6348912b39760761ade5d756fdfbe581439d9967c87d78032f80d8f6c3f6b28769deebf49201505f306d2be4c00872571a1f488962c217b026fb53e7961c5c5e7c4f6b24c10330f360204c2ac5baf225ca948df40d0d88c80d4b750b3e67d3b3b5f5acc19a2278a626c1faf9258cd48"}, {0xb8, 0x17, 0x1ff, "b0a6ff220222d9d527861c219bda871db2e96539ddb5d4ab4ba3535d9beb472b5d830ad8272c8b090cdb4123560f26e853349ebc1ad0690b864674dc3c335958dd7664ad5764b33323b06a572d1b96bda09ff001ddad2846656e933975a5396bb9a1cdcb4cfc8a700da02c3f7006c21842d450cde6c570a2b9636da5e4b332d2d3f7ca0b424bc616344016f675af4dba82c2405f2c910c05197f85b16c013015ca7991"}], 0x168}}], 0x3, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/566, @ANYRES8=r0, @ANYBLOB="0384ec000010000f200012760800010000000500090040000000"], 0x40}, 0x1, 0x0, 0x0, 0x20048850}, 0x4008040) 2.630635332s ago: executing program 2 (id=534): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000002080)=""/4080, 0xff0}], 0x1, 0x806, 0x3) 2.533055653s ago: executing program 6 (id=535): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [0xffffff00, 0xff000000], [0xffffffff, 0x0, 0x4c00], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e22, 0x4e20, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e24, 0x4e22, 0x4e24, 0x4e24], [0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x16}, [0xffffffff], 0x4e22, 0x4e23, 0x4e24, 0x4e21, 0x7, 0x7f, 0x0, 0x7, 0x4}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xffffff00], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x3}, 0x0, 0x1d0, 0x238, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000003, 0x0, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x29, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x7f, 0x5, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) 2.369700105s ago: executing program 6 (id=537): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0xa00000000000000, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") 2.189297227s ago: executing program 6 (id=538): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80), 0x3, 0x439, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) r1 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg(r4, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x5, 0x77, 0x3, 0xb63}, {0x3, 0xff, 0x1, 0xfffffbff}, {0x7f, 0x0, 0x7, 0x8}]}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.618082523s ago: executing program 1 (id=539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) 1.518932814s ago: executing program 1 (id=540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe0, 0x1f8, 0xe8, 0xe8, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xff03, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.413344605s ago: executing program 1 (id=541): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008fd0000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) 1.293608606s ago: executing program 1 (id=542): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x2004c0c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prlimit64(r1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r5, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r6, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x1, 0x2, 0x4, 0x5}]}) r7 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r7, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0xd00) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 589.619264ms ago: executing program 2 (id=543): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x201, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000001cb0000000000000000000000ff000000020000fe8000000000000000000000000000aa"], 0x0) 287.101428ms ago: executing program 2 (id=544): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0x1, {0x2}, 0x1}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0, 0x1, {0x2}, 0x1}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0}, 0x18) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@remote, 0x68, r0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) (async) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1158000, &(0x7f00000003c0)={[{@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@inlinecrypt}]}, 0x3, 0x4f6, &(0x7f0000000b80)="$eJzs3M9vVNUeAPDvnc70Bzze60NAQZQCGhsTWygomLjBxMSFJkZcyLJpK0EGMLQLIURLYtiTuDQxLlwYd/oH6NK48g/AhTtDQgwbwNWYO3NvO53Oz7a0lvl8kumcc+fce+6Zc8+dc8/pvQH0rbH0TxLxn4i4ExH/q0VXJhirvT28f2Pm0f0bM7FYqZz9K6mme5DGM/l6O7PIeCGi8EXSsMGa+WvXL06Xy3NXs/jkwqVPJuevXX/lwqXp83Pn5y5PnT598sTxU69Nvdp7oZrkl5brwYHPrhzc//a52+/OFPPlw9l7fTlaKva2G2NtPnuxt0396+2qCyc9fk9sneHssC6l7f9G+ci5rd4hYNNUKpXKUOuPFyuNbq5aAmxbSWz1HgBbI/+hT69/81d3PYfSRnQ/tty9M7ULoLTcD7NX7ZNiFLI0pYbr2400FhEfLv79dfqKduMQfzymHQAA+s7PZ/KeYGP/rxD76tL9N5tDGY2I/0fE7oh4KiL2RMTeiGrapyPimcYMkohKm/z3NMSX8/8xm0Uo3F13IdtI+39vZHNbK/t/ee8vRgey2K6IvMM8dyz7TsajNPTRhfLc8RbbH+yQf33/L32l+ed9wWw/7hYbBuhmpxem11ba1e7djDhQbCx/UkwrLp/GSSJif0Qc6GG7o3XhCy9/d3Apkl82fFV7G4vBDuWvqjSZ0ut5Pq6ZyjcRL9XqfzHq6z9ZzjFpPz85ORzluWOT6VFwrGkev/52671W+bev/yMjTVZ569RPZ9dd7lxa/zvqjv/I52+XJ1FHk4hkab52PqIy0Fset35vvcJaj//B5INqOG9fn04vLFw9HjGYvLN6+dTyunk8T5+Wf/xo8/a/O1sn/SaejYj0IH4uIp6PiEPZvh9OaykijrYp/y9vvvDx2sv/eKXln216/ltR/8vz9V0G8pXTJQMXD9951OLk0V39n6yGxrMlzc9/yYpTRLd7ur5vDwAAALaHQlT/978wsRQuFCYmamNAe2JHoXxlfuFQRFyerd0jMBqlQj7SVRsPLiX5+OdoXXyqIX4iGzf+cmCkGp+YuVKe3erCQ5/bWW3zyar2n/qzx3FeYBtyvxb0r07tf9/tTdoRYNN1+fvf5j5BYLuqa/+LLZIs+k8ZeDKt9fpfhwC2v2bt//P4vuW9C8PGDOGJUNGWoa9p/9C/ivH+Urh623PTu22BJ5Hff+hLvd7X300gnxa4frEytDrNt3NX54cjXfL6yicGDHeVxUiv+zMSG17AtQXSntUGbrAUEZ0T750ul0fWkkXeBWz9hIdCbxscimogf/5L9aOBaLdW0sNzHPJAuvmOic/v6/bgz5tJx9zzZ6Js9GHzw3I7LdXVRbFT7aw/sBlnHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMfvnwAAAP//QIbFug==") r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) pwritev2(r1, 0x0, 0x0, 0xa10, 0x3, 0x1d) epoll_create(0x3ff) (async) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x0) unshare(0x20000400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000480)=@ethtool_wolinfo={0x5, 0xffc, 0x7, "f3c7e18e7e91"}}) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000440)={0x2000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000440)={0x2000000}) r5 = syz_open_dev$sg(0x0, 0x0, 0x800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x4c, 0x0, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r6, @ANYRES8, @ANYRESHEX=r5], 0x1, 0x1234, &(0x7f0000004800)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x881bfd) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000037c0)=""/4096, &(0x7f00000047c0)=0x1000) 111.051739ms ago: executing program 6 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x2000000, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 37.17443ms ago: executing program 1 (id=546): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008000000020000000600000000000000", @ANYRES32, @ANYBLOB="000000e824"], 0x50) 0s ago: executing program 1 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000007fff00000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) kernel console output (not intermixed with test programs): 43.528300][ T3584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.555774][ T3584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.557879][ T2980] loop2: p3 p4 < > [ 43.577826][ T2980] loop2: p3 start 11362048 is beyond EOD, truncated [ 43.585846][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.604675][ T3584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.631828][ T4012] syz.0.96 (4012) used greatest stack depth: 10112 bytes left [ 43.650020][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 43.730543][ T4059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 43.774868][ T4058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.833558][ T4066] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.107'. [ 43.946886][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.957764][ T4076] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.976498][ T4076] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.017693][ T4082] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 44.164893][ T4082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.207348][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.239297][ T4102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.113'. [ 44.429711][ T4106] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.554017][ T4106] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 44.649365][ T4106] EXT4-fs (loop5): 1 truncate cleaned up [ 44.698051][ T4106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.137451][ T4111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.152062][ T4111] block device autoloading is deprecated and will be removed. [ 45.848333][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.873339][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 45.873351][ T28] audit: type=1400 audit(1778388670.056:433): avc: denied { cpu } for pid=4110 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.969646][ T4114] netlink: 'syz.5.115': attribute type 15 has an invalid length. [ 45.978047][ T4114] netlink: 'syz.5.115': attribute type 15 has an invalid length. [ 46.003987][ T4119] syz.5.115 (4119) used greatest stack depth: 9864 bytes left [ 46.015164][ T28] audit: type=1400 audit(1778388670.166:434): avc: denied { write } for pid=4119 comm="syz.5.115" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.064139][ T4111] rdma_op ffff88811a552980 conn xmit_rdma 0000000000000000 [ 46.082511][ T4125] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.091271][ T28] audit: type=1400 audit(1778388670.256:435): avc: denied { write } for pid=4117 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.209834][ T4125] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 46.216418][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.226185][ T4124] set_capacity_and_notify: 5 callbacks suppressed [ 46.226198][ T4124] loop0: detected capacity change from 0 to 512 [ 46.250453][ T28] audit: type=1400 audit(1778388670.426:436): avc: denied { bind } for pid=4126 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.275659][ T4124] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.310140][ T4124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.345211][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 46.364204][ T4127] team0: Port device team_slave_0 removed [ 46.453527][ T4124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.466284][ T4124] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.479411][ T28] audit: type=1400 audit(1778388670.666:437): avc: denied { write } for pid=4123 comm="syz.0.121" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.504156][ T28] audit: type=1400 audit(1778388670.686:438): avc: denied { write } for pid=4123 comm="syz.0.121" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.529532][ T28] audit: type=1400 audit(1778388670.716:439): avc: denied { append } for pid=4123 comm="syz.0.121" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.560012][ T28] audit: type=1400 audit(1778388670.716:440): avc: denied { ioctl } for pid=4123 comm="syz.0.121" path="/24/bus/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.587888][ T28] audit: type=1400 audit(1778388670.736:441): avc: denied { listen } for pid=4126 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.670522][ T4137] loop3: detected capacity change from 0 to 256 [ 46.695447][ T4137] FAT-fs (loop3): bogus number of reserved sectors [ 46.703655][ T4137] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 46.713197][ T4137] FAT-fs (loop3): Can't find a valid FAT filesystem [ 46.795336][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.280867][ T28] audit: type=1400 audit(1778388671.456:442): avc: denied { wake_alarm } for pid=4145 comm="syz.1.128" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.586146][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.644679][ T4151] bridge_slave_0: left allmulticast mode [ 47.651403][ T4151] bridge_slave_0: left promiscuous mode [ 47.672755][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.700085][ T4151] bridge_slave_1: left promiscuous mode [ 47.706242][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.740517][ T4151] bond0: (slave bond_slave_0): Releasing backup interface [ 47.763266][ T4151] bond0: (slave bond_slave_1): Releasing backup interface [ 47.794444][ T4151] team0: Port device team_slave_1 removed [ 47.820443][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.852201][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.878801][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.907594][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.977474][ T3589] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.986462][ T3589] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.014064][ T3589] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.040337][ T3589] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.397385][ T4160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.470039][ T4170] loop2: detected capacity change from 0 to 512 [ 48.577258][ T4170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.589835][ T4176] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 48.623067][ T4170] EXT4-fs (loop2): 1 truncate cleaned up [ 48.630882][ T4170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.384989][ T4184] netlink: 'syz.2.133': attribute type 15 has an invalid length. [ 49.393432][ T4184] netlink: 'syz.2.133': attribute type 15 has an invalid length. [ 49.437511][ T4185] syz.2.133 (4185) used greatest stack depth: 9792 bytes left [ 49.555163][ T4186] loop0: detected capacity change from 0 to 1764 [ 49.615000][ T4186] iso9660: Unknown parameter '' [ 49.681325][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.700041][ T4194] loop3: detected capacity change from 0 to 512 [ 49.732172][ T4194] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.138: invalid indirect mapped block 256 (level 2) [ 49.779483][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 49.866581][ T4194] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.870264][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.885918][ C0] EXT4-fs (loop3): initial error at time 1778388674: ext4_free_branches:1023: inode 11 [ 49.895609][ C0] EXT4-fs (loop3): last error at time 1778388674: ext4_free_branches:1023: inode 11 [ 49.927139][ T4194] EXT4-fs (loop3): 2 truncates cleaned up [ 49.973245][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.720384][ T4179] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 50.830542][ T4216] loop2: detected capacity change from 0 to 256 [ 50.839528][ T4216] FAT-fs (loop2): bogus number of reserved sectors [ 50.846122][ T4216] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 50.855345][ T4216] FAT-fs (loop2): Can't find a valid FAT filesystem [ 50.938372][ T4218] loop0: detected capacity change from 0 to 128 [ 51.270869][ T4218] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.283323][ T4218] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.261810][ T4222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.146'. [ 52.406139][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.457322][ T4229] loop2: detected capacity change from 0 to 128 [ 52.556683][ T4233] loop0: detected capacity change from 0 to 1764 [ 52.564286][ T4233] iso9660: Unknown parameter 'fowner<00000000000000000000)e' [ 52.670876][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 52.670973][ T28] audit: type=1400 audit(1778388676.786:452): avc: denied { firmware_load } for pid=4225 comm="syz.0.145" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 53.184826][ T4233] syz.0.145 (4233) used greatest stack depth: 8696 bytes left [ 53.561902][ T28] audit: type=1400 audit(1778388677.636:453): avc: denied { remount } for pid=4244 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.968465][ T28] audit: type=1400 audit(1778388678.146:454): avc: denied { write } for pid=4248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.083352][ T28] audit: type=1400 audit(1778388678.266:455): avc: denied { write } for pid=4259 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.275174][ T4263] loop3: detected capacity change from 0 to 512 [ 54.345623][ T4263] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 54.426625][ T4263] EXT4-fs (loop3): 1 truncate cleaned up [ 54.485235][ T28] audit: type=1400 audit(1778388678.666:456): avc: denied { write } for pid=4264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.522635][ T4286] loop0: detected capacity change from 0 to 256 [ 54.538933][ T4263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.627074][ T4286] FAT-fs (loop0): bogus number of reserved sectors [ 54.634636][ T4286] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 54.644665][ T4286] FAT-fs (loop0): Can't find a valid FAT filesystem [ 54.746150][ T4263] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 54.782612][ T4283] capability: warning: `syz.1.159' uses deprecated v2 capabilities in a way that may be insecure [ 54.863683][ T28] audit: type=1400 audit(1778388678.996:457): avc: denied { setattr } for pid=4262 comm="syz.3.155" path="/34/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.904300][ T4290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.911578][ T4290] IPv6: NLM_F_CREATE should be set when creating new route [ 55.121280][ T28] audit: type=1400 audit(1778388679.106:458): avc: denied { write } for pid=4289 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.454712][ T28] audit: type=1400 audit(1778388679.636:459): avc: denied { write } for pid=4297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.504727][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.563533][ T28] audit: type=1400 audit(1778388679.686:460): avc: denied { write } for pid=4309 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.313954][ T4330] loop3: detected capacity change from 0 to 512 [ 56.324832][ T28] audit: type=1400 audit(1778388680.476:461): avc: denied { ioctl } for pid=4317 comm="syz.2.163" path="socket:[6898]" dev="sockfs" ino=6898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.366911][ T4330] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 56.390482][ T4330] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.415010][ T4330] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.166: Block bitmap for bg 0 marked uninitialized [ 56.428682][ T4330] loop3: lost filesystem error report for type 5 error -117 [ 56.440228][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.454010][ C1] EXT4-fs (loop3): initial error at time 1778388680: ext4_read_block_bitmap_nowait:517 [ 56.463706][ C1] EXT4-fs (loop3): last error at time 1778388680: ext4_read_block_bitmap_nowait:517 [ 56.500919][ T4337] loop1: detected capacity change from 0 to 1764 [ 56.508486][ T4337] iso9660: Unknown parameter 'fowner<00000000000000000000)e' [ 56.569430][ T4320] loop2: detected capacity change from 0 to 512 [ 56.674149][ T4330] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 56.685649][ T4320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.742605][ T4330] loop3: lost filesystem error report for type 5 error -117 [ 56.743954][ T4330] EXT4-fs (loop3): 1 orphan inode deleted [ 56.896994][ T4320] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.163: invalid indirect mapped block 4294967295 (level 0) [ 56.912628][ T4320] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.925025][ T4320] EXT4-fs (loop2): Remounting filesystem read-only [ 56.941190][ T4320] EXT4-fs (loop2): 1 orphan inode deleted [ 56.947041][ T4320] EXT4-fs (loop2): 1 truncate cleaned up [ 56.954298][ T4320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.007383][ T4330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.025755][ T4344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.170'. [ 57.213730][ T4346] loop5: detected capacity change from 0 to 512 [ 57.390921][ T4330] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 57.401645][ T4330] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 57.429700][ T4330] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.166: Block bitmap for bg 0 marked uninitialized [ 57.450695][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.557328][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.332435][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 58.332451][ T28] audit: type=1400 audit(1778388682.516:516): avc: denied { read } for pid=4366 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.511539][ T4372] loop1: detected capacity change from 0 to 256 [ 58.529841][ T4372] FAT-fs (loop1): bogus number of reserved sectors [ 58.537367][ T4372] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 58.547576][ T4372] FAT-fs (loop1): Can't find a valid FAT filesystem [ 58.744596][ T4363] loop0: detected capacity change from 0 to 512 [ 58.890596][ T4363] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.176: inode has both inline data and extents flags [ 58.968392][ T4378] loop3: detected capacity change from 0 to 512 [ 58.985206][ T4363] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.985804][ T4363] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.176: couldn't read orphan inode 15 (err -117) [ 58.995118][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.995141][ C1] EXT4-fs (loop0): initial error at time 1778388683: ext4_orphan_get:1397: inode 15 [ 58.995176][ C1] EXT4-fs (loop0): last error at time 1778388683: ext4_orphan_get:1397: inode 15 [ 59.053607][ T4378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.077470][ T4363] loop0: lost filesystem error report for type 5 error -117 [ 59.078653][ T4363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.171824][ T4378] EXT4-fs (loop3): 1 truncate cleaned up [ 59.177942][ T4378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.760462][ T4382] netlink: 'syz.3.180': attribute type 15 has an invalid length. [ 59.768817][ T4382] netlink: 'syz.3.180': attribute type 15 has an invalid length. [ 60.055257][ T28] audit: type=1400 audit(1778388683.326:517): avc: denied { write } for pid=4362 comm="syz.0.176" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.076935][ T28] audit: type=1400 audit(1778388683.456:518): avc: denied { write } for pid=4375 comm="syz.3.180" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.098485][ T28] audit: type=1400 audit(1778388683.956:519): avc: denied { write } for pid=4386 comm="syz.3.180" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.153769][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 60.167174][ T4391] netlink: 'syz.1.182': attribute type 9 has an invalid length. [ 60.175289][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 60.184400][ T4389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.183'. [ 60.224060][ T28] audit: type=1400 audit(1778388684.406:520): avc: denied { ioctl } for pid=4392 comm="syz.1.184" path="socket:[6962]" dev="sockfs" ino=6962 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.266318][ T28] audit: type=1400 audit(1778388684.446:521): avc: denied { create } for pid=4392 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 60.363789][ T28] audit: type=1400 audit(1778388684.546:522): avc: denied { setopt } for pid=4399 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.512934][ T4403] x_tables: duplicate underflow at hook 3 [ 60.625879][ T4408] Cannot find set identified by id 0 to match [ 60.890971][ T4413] loop2: detected capacity change from 0 to 512 [ 60.913447][ T4413] EXT4-fs: Ignoring removed oldalloc option [ 60.935726][ T4413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.022018][ T4413] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.191: iget: bad i_size value: 38620345925642 [ 61.050340][ T4413] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.057425][ T4413] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.191: couldn't read orphan inode 15 (err -117) [ 61.066624][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 61.066644][ C1] EXT4-fs (loop2): initial error at time 1778388685: ext4_orphan_get:1397: inode 15 [ 61.066674][ C1] EXT4-fs (loop2): last error at time 1778388685: ext4_orphan_get:1397: inode 15 [ 61.111594][ T4413] loop2: lost filesystem error report for type 5 error -117 [ 61.112221][ T4413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.141689][ T28] audit: type=1400 audit(1778388685.326:523): avc: denied { write } for pid=4412 comm="syz.2.191" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.163493][ T28] audit: type=1400 audit(1778388685.326:524): avc: denied { name_bind } for pid=4412 comm="syz.2.191" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 61.185578][ T28] audit: type=1400 audit(1778388685.326:525): avc: denied { node_bind } for pid=4412 comm="syz.2.191" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 61.214797][ T4363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.304936][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.319656][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.386659][ T4417] loop1: detected capacity change from 0 to 2048 [ 61.499869][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.514449][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 61.551417][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 61.616341][ T4426] loop2: detected capacity change from 0 to 256 [ 61.624392][ T4426] FAT-fs (loop2): bogus number of reserved sectors [ 61.631100][ T4426] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 61.640276][ T4426] FAT-fs (loop2): Can't find a valid FAT filesystem [ 62.093938][ T4432] loop1: detected capacity change from 0 to 512 [ 62.124229][ T4432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.245361][ T4432] EXT4-fs (loop1): 1 truncate cleaned up [ 62.255218][ T4432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.758742][ T4434] netlink: 'syz.1.197': attribute type 15 has an invalid length. [ 62.766995][ T4434] netlink: 'syz.1.197': attribute type 15 has an invalid length. [ 62.995661][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.059869][ T4439] xt_l2tp: invalid flags combination: 8 [ 63.206322][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 63.232916][ T4454] loop3: detected capacity change from 0 to 1764 [ 63.241182][ T4450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 63.250104][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 63.264181][ T4454] ISOFS: Unable to identify CD-ROM format. [ 63.275499][ T4457] loop0: detected capacity change from 0 to 512 [ 63.296349][ T4457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.317201][ T4457] EXT4-fs (loop0): 1 truncate cleaned up [ 63.335692][ T4457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.381346][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 63.381360][ T28] audit: type=1400 audit(1778388687.566:529): avc: denied { write } for pid=4455 comm="syz.0.203" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.488338][ T4473] loop3: detected capacity change from 0 to 512 [ 63.498633][ T4472] ext4: Unknown parameter 'fsname' [ 63.505965][ T4473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.544102][ T4473] EXT4-fs (loop3): 1 truncate cleaned up [ 63.564010][ T4473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.578175][ T28] audit: type=1400 audit(1778388687.756:530): avc: denied { write } for pid=4471 comm="syz.3.208" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.705560][ T4478] netlink: 'syz.0.203': attribute type 15 has an invalid length. [ 63.714649][ T4478] netlink: 'syz.0.203': attribute type 15 has an invalid length. [ 63.940479][ T4481] netlink: 'syz.3.208': attribute type 15 has an invalid length. [ 63.949294][ T4481] netlink: 'syz.3.208': attribute type 15 has an invalid length. [ 64.135865][ T28] audit: type=1400 audit(1778388687.906:531): avc: denied { write } for pid=4480 comm="syz.0.203" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.171464][ T28] audit: type=1400 audit(1778388688.146:532): avc: denied { write } for pid=4482 comm="syz.3.208" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.191449][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.206062][ T28] audit: type=1400 audit(1778388688.226:533): avc: denied { read write } for pid=4486 comm="syz.5.210" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.256925][ T28] audit: type=1400 audit(1778388688.226:534): avc: denied { open } for pid=4486 comm="syz.5.210" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.396616][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.498223][ T4505] set_capacity_and_notify: 1 callbacks suppressed [ 64.498257][ T4505] loop0: detected capacity change from 0 to 256 [ 64.562444][ T4505] FAT-fs (loop0): bogus number of reserved sectors [ 64.569052][ T4505] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 64.578229][ T4505] FAT-fs (loop0): Can't find a valid FAT filesystem [ 64.721991][ T4511] tipc: Enabling of bearer rejected, failed to enable media [ 64.763577][ T4503] batadv_slave_0: entered promiscuous mode [ 64.791795][ T28] audit: type=1326 audit(1778388688.966:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9a9cdd9 code=0x7ffc0000 [ 64.920840][ T28] audit: type=1326 audit(1778388688.996:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9a9cdd9 code=0x7ffc0000 [ 64.994638][ T28] audit: type=1326 audit(1778388688.966:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9a9cdd9 code=0x7ffc0000 [ 65.049188][ T28] audit: type=1326 audit(1778388688.996:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed9a9cdd9 code=0x7ffc0000 [ 65.240573][ T4514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.216'. [ 65.265807][ T4514] loop2: detected capacity change from 0 to 512 [ 65.315632][ T4518] smc: net device bond0 applied user defined pnetid SYZ2 [ 65.489742][ T4514] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.216: corrupted xattr block 95: invalid header [ 65.503427][ T4514] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.503673][ T4514] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.216: bg 0: block 7: invalid block bitmap [ 65.525067][ T4514] loop2: lost filesystem error report for type 5 error -117 [ 65.525305][ T4514] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 65.541321][ T4514] loop2: lost filesystem error report for type 5 error -117 [ 65.541578][ T4514] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.216: corrupted xattr block 95: invalid header [ 65.562416][ T4514] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.562634][ T4514] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 65.580911][ T4514] EXT4-fs (loop2): 1 orphan inode deleted [ 65.587218][ T4514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.657796][ T4514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.681280][ T4527] netlink: 736 bytes leftover after parsing attributes in process `syz.1.220'. [ 65.693301][ T4527] netlink: 104 bytes leftover after parsing attributes in process `syz.1.220'. [ 66.066838][ T3377] IPVS: starting estimator thread 0... [ 66.071047][ T4531] loop2: detected capacity change from 0 to 512 [ 66.130485][ T4502] batadv_slave_0: left promiscuous mode [ 66.161091][ T4531] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.184976][ T4533] 9pnet_fd: p9_fd_create_tcp (4533): problem connecting socket to 127.0.0.1 [ 66.201905][ T4516] IPVS: using max 1824 ests per chain, 91200 per kthread [ 66.231864][ T4531] EXT4-fs (loop2): 1 truncate cleaned up [ 66.266614][ T4531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.415712][ T4536] loop3: detected capacity change from 0 to 1024 [ 66.424705][ T4540] loop1: detected capacity change from 0 to 1764 [ 66.479209][ T4536] EXT4-fs: test_dummy_encryption option not supported [ 66.512351][ T4545] netlink: 'syz.2.221': attribute type 15 has an invalid length. [ 66.521082][ T4545] netlink: 'syz.2.221': attribute type 15 has an invalid length. [ 66.779617][ T4544] loop5: detected capacity change from 0 to 128 [ 66.937064][ T4550] loop1: detected capacity change from 0 to 4096 [ 66.963552][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.982213][ T4550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.014429][ T4544] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.030267][ T4544] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.315475][ T3765] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.479423][ T4579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.235'. [ 68.148758][ T4588] loop3: detected capacity change from 0 to 512 [ 68.175158][ T4588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.217553][ T4594] loop0: detected capacity change from 0 to 1024 [ 68.232450][ T4588] EXT4-fs (loop3): 1 truncate cleaned up [ 68.243036][ T4588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.245648][ T4594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.264207][ T4594] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 68.474108][ T4605] netlink: 'syz.3.237': attribute type 15 has an invalid length. [ 68.483233][ T4605] netlink: 'syz.3.237': attribute type 15 has an invalid length. [ 68.647113][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 68.647265][ T28] audit: type=1400 audit(1778388692.596:607): avc: denied { bind } for pid=4591 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.698067][ T4594] loop0: detected capacity change from 0 to 512 [ 68.750768][ T28] audit: type=1400 audit(1778388692.616:608): avc: denied { node_bind } for pid=4591 comm="syz.0.239" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.793214][ T28] audit: type=1400 audit(1778388692.636:609): avc: denied { name_bind } for pid=4591 comm="syz.0.239" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 68.852365][ T28] audit: type=1400 audit(1778388692.676:610): avc: denied { write } for pid=4606 comm="syz.3.237" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.896268][ T4610] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.019550][ T4594] vfat: Unknown parameter '0x00000000000000000xffffffffffffffff' [ 69.059405][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.154211][ T4636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'. [ 69.175132][ T4636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'. [ 69.187423][ T4636] gretap0: entered promiscuous mode [ 69.209199][ T4636] gretap0: left promiscuous mode [ 69.227763][ T4642] Symlink component flag not implemented [ 69.252330][ T4642] Symlink component flag not implemented (15) [ 69.338533][ T4648] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.355342][ T4648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.382754][ T4648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.423435][ T4648] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.453016][ T28] audit: type=1400 audit(1778388693.636:611): avc: denied { write } for pid=4647 comm="syz.2.247" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.498978][ T28] audit: type=1400 audit(1778388693.666:612): avc: denied { write } for pid=4647 comm="syz.2.247" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.550812][ T28] audit: type=1400 audit(1778388693.726:613): avc: denied { read } for pid=4641 comm="syz.0.246" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.573892][ T28] audit: type=1400 audit(1778388693.726:614): avc: denied { open } for pid=4641 comm="syz.0.246" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.627869][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.714754][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.812227][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 69.984630][ T28] audit: type=1400 audit(1778388694.166:615): avc: denied { write } for pid=4663 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.437820][ T4679] set_capacity_and_notify: 3 callbacks suppressed [ 70.437845][ T4679] loop2: detected capacity change from 0 to 512 [ 70.486276][ T4679] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.510996][ T4679] EXT4-fs (loop2): 1 truncate cleaned up [ 70.521136][ T4679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.541218][ T4685] loop0: detected capacity change from 0 to 512 [ 70.548887][ T28] audit: type=1400 audit(1778388694.726:616): avc: denied { write } for pid=4678 comm="syz.2.254" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.577088][ T4685] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 70.590686][ T4685] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 70.598652][ T4685] EXT4-fs (loop0): failed to initialize system zone (-117) [ 70.606370][ T4685] EXT4-fs (loop0): mount failed [ 70.775266][ T4693] loop5: detected capacity change from 0 to 512 [ 70.793062][ T4694] netlink: 'syz.2.254': attribute type 15 has an invalid length. [ 70.801903][ T4694] netlink: 'syz.2.254': attribute type 15 has an invalid length. [ 70.893923][ T4693] EXT4-fs: Ignoring removed oldalloc option [ 70.957202][ T4693] EXT4-fs: Ignoring removed nobh option [ 71.001135][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.258: iget: bad extra_isize 90 (inode size 256) [ 71.090474][ T4693] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.091416][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.258: error while reading EA inode 11 err=-117 [ 71.100721][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 71.100740][ C0] EXT4-fs (loop5): initial error at time 1778388695: ext4_xattr_inode_iget:441: inode 11 [ 71.100773][ C0] EXT4-fs (loop5): last error at time 1778388695: ext4_xattr_inode_iget:441: inode 11 [ 71.197515][ T4693] loop5: lost filesystem error report for type 5 error -117 [ 71.198019][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.258: iget: bad extra_isize 90 (inode size 256) [ 71.219184][ T4693] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.219484][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.258: error while reading EA inode 11 err=-117 [ 71.242083][ T4693] loop5: lost filesystem error report for type 5 error -117 [ 71.242722][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.258: iget: bad extra_isize 90 (inode size 256) [ 71.300255][ T4693] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 71.300477][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.258: error while reading EA inode 18 err=-117 [ 71.322874][ T4693] loop5: lost filesystem error report for type 5 error -117 [ 71.326691][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.258: iget: bad extra_isize 90 (inode size 256) [ 71.347782][ T4693] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 71.348576][ T4693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.258: error while reading EA inode 18 err=-117 [ 71.370280][ T4693] loop5: lost filesystem error report for type 5 error -117 [ 71.371251][ T4693] EXT4-fs (loop5): 1 orphan inode deleted [ 71.385289][ T4693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.417301][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.432753][ T4691] loop1: detected capacity change from 0 to 1024 [ 71.467699][ T4691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 71.476017][ T4691] System zones: 0-1, 3-36 [ 71.487491][ T4691] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.256: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 71.506370][ T4691] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 71.506754][ T4691] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.256: Bad quota inode: 4, type: 1 [ 71.516112][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 71.516194][ C0] EXT4-fs (loop1): initial error at time 1778388695: ext4_ext_check_inode:521: inode 4 [ 71.516493][ C0] EXT4-fs (loop1): last error at time 1778388695: ext4_ext_check_inode:521: inode 4 [ 71.558282][ T4691] loop1: lost filesystem error report for type 5 error -117 [ 71.561170][ T4691] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.599789][ T4691] EXT4-fs (loop1): mount failed [ 72.096341][ T4630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.162399][ T4715] loop3: detected capacity change from 0 to 512 [ 72.187611][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.211519][ T4715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.233399][ T4715] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.245464][ T4715] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.263: corrupted inode contents [ 72.278551][ T4715] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.263: mark_inode_dirty error [ 72.294732][ T4715] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.263: corrupted inode contents [ 72.308315][ T4715] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.263: mark_inode_dirty error [ 72.325843][ T4725] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.263: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 72.325843][ T4725] [ 72.366992][ T4728] netlink: 'syz.0.268': attribute type 21 has an invalid length. [ 72.377243][ T4728] netlink: 128 bytes leftover after parsing attributes in process `syz.0.268'. [ 72.387116][ T4725] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.263: corrupted inode contents [ 72.398987][ T4728] netlink: 'syz.0.268': attribute type 4 has an invalid length. [ 72.407405][ T4725] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.263: mark_inode_dirty error [ 72.418969][ T4728] netlink: 3 bytes leftover after parsing attributes in process `syz.0.268'. [ 72.428636][ T4725] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 72.451408][ T4715] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.263: corrupted inode contents [ 72.477686][ T4738] loop1: detected capacity change from 0 to 512 [ 72.498125][ T4734] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 72.516547][ T4734] netlink: 14 bytes leftover after parsing attributes in process `syz.5.269'. [ 72.537837][ T4734] smc: removing net device bond0 with user defined pnetid SYZ2 [ 72.547793][ T4738] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.562200][ T4715] EXT4-fs error (device loop3): add_dirent_to_buf:2151: inode #2: comm syz.3.263: mark_inode_dirty error [ 72.573908][ T4734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.584480][ T4734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.596315][ T4738] EXT4-fs (loop1): 1 truncate cleaned up [ 72.602425][ T4738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.614882][ T4734] bond0 (unregistering): Released all slaves [ 72.629358][ T4741] loop5: detected capacity change from 0 to 512 [ 72.659168][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.684420][ T4736] usb usb7: usbfs: process 4736 (syz.0.271) did not claim interface 0 before use [ 72.721317][ T4736] loop0: detected capacity change from 0 to 512 [ 72.731290][ T4736] EXT4-fs: Ignoring removed bh option [ 72.743281][ T4736] EXT4-fs: journaled quota format not specified [ 72.768343][ T4741] ------------[ cut here ]------------ [ 72.773881][ T4741] EA inode 11 i_nlink=2 [ 72.773902][ T4741] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.5.269/4741 [ 72.788855][ T4741] Modules linked in: [ 72.792797][ T4741] CPU: 0 UID: 0 PID: 4741 Comm: syz.5.269 Not tainted syzkaller #0 PREEMPT(full) [ 72.802102][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.812327][ T4741] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 72.818995][ T4741] Code: 34 5e 98 ff 4c 8d 2d ad 6b 5c 05 49 8d 7e 40 e8 84 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f d4 d7 03 66 66 66 66 66 66 2e [ 72.838789][ T4741] RSP: 0018:ffffc90002f4b778 EFLAGS: 00010246 [ 72.844968][ T4741] RAX: ffff888103c7e000 RBX: ffff888100712ab8 RCX: ffffffff81c0d2f8 [ 72.853088][ T4741] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3e90 [ 72.861169][ T4741] RBP: 000000000000000b R08: 0001888100712a6b R09: 0000000000000000 [ 72.869180][ T4741] R10: ffffc90002f4b6a8 R11: 0001c90002f4b6a8 R12: ffff888100712a68 [ 72.877305][ T4741] R13: ffffffff871d3e90 R14: ffff888100712a20 R15: 0000000000000001 [ 72.885320][ T4741] FS: 00007f36953ce6c0(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000 [ 72.894326][ T4741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.900958][ T4741] CR2: 00007f71d0f17000 CR3: 000000011c9ac000 CR4: 00000000003506f0 [ 72.908981][ T4741] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.917017][ T4741] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 72.925170][ T4741] Call Trace: [ 72.928523][ T4741] [ 72.931516][ T4741] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 72.937478][ T4741] ? errseq_check+0x2c/0x50 [ 72.942171][ T4741] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 72.947669][ T4741] ? ext4_truncate+0x89f/0xa10 [ 72.952497][ T4741] ext4_evict_inode+0xb16/0xe30 [ 72.957387][ T4741] ? __pfx_ext4_evict_inode+0x10/0x10 [ 72.962863][ T4741] evict+0x2af/0x510 [ 72.966884][ T4741] ? _raw_spin_lock+0x52/0xa0 [ 72.971638][ T4741] iput+0x41a/0x580 [ 72.975489][ T4741] ext4_process_orphan+0x1a9/0x1c0 [ 72.980679][ T4741] ext4_orphan_cleanup+0x69c/0x9f0 [ 72.985855][ T4741] ext4_fill_super+0x3408/0x37c0 [ 72.990898][ T4741] ? set_blocksize+0x14c/0x270 [ 72.995715][ T4741] ? setup_bdev_super+0x30e/0x370 [ 73.000845][ T4741] ? __pfx_ext4_fill_super+0x10/0x10 [ 73.006195][ T4741] get_tree_bdev_flags+0x291/0x300 [ 73.011390][ T4741] ? __pfx_ext4_fill_super+0x10/0x10 [ 73.016743][ T4741] get_tree_bdev+0x1f/0x30 [ 73.021251][ T4741] ext4_get_tree+0x1c/0x30 [ 73.025682][ T4741] vfs_get_tree+0x57/0x1d0 [ 73.030336][ T4741] do_new_mount+0x288/0x8d0 [ 73.034890][ T4741] path_mount+0x4d0/0xbc0 [ 73.039352][ T4741] __se_sys_mount+0x28c/0x2e0 [ 73.044124][ T4741] ? __se_sys_mkdirat+0xa2/0xf0 [ 73.049059][ T4741] ? kmem_cache_free+0xca/0x380 [ 73.054040][ T4741] __x64_sys_mount+0x67/0x80 [ 73.058667][ T4741] x64_sys_call+0x2d61/0x3020 [ 73.063409][ T4741] do_syscall_64+0x12c/0x3b0 [ 73.068039][ T4741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.074020][ T4741] RIP: 0033:0x7f369699e04a [ 73.078516][ T4741] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.098188][ T4741] RSP: 002b:00007f36953cde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.106687][ T4741] RAX: ffffffffffffffda RBX: 00007f36953cdee0 RCX: 00007f369699e04a [ 73.114719][ T4741] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f36953cdea0 [ 73.122865][ T4741] RBP: 00002000000009c0 R08: 00007f36953cdee0 R09: 0000000000800718 [ 73.130898][ T4741] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 73.138898][ T4741] R13: 00007f36953cdea0 R14: 000000000000048d R15: 0000200000000200 [ 73.147054][ T4741] [ 73.150088][ T4741] ---[ end trace 0000000000000000 ]--- [ 73.162995][ T4741] EXT4-fs (loop5): 1 orphan inode deleted [ 73.172381][ T4741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.197103][ T4750] loop0: detected capacity change from 0 to 512 [ 73.207329][ T4748] loop2: detected capacity change from 0 to 512 [ 73.265032][ T4755] netlink: 'syz.1.270': attribute type 15 has an invalid length. [ 73.273575][ T4755] netlink: 'syz.1.270': attribute type 15 has an invalid length. [ 73.388303][ T4760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.276'. [ 73.495983][ T4748] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.274: iget: special inode unallocated [ 73.512885][ T4750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.541019][ T4748] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 73.541323][ T4748] EXT4-fs (loop2): get root inode failed [ 73.556244][ T4748] EXT4-fs (loop2): mount failed [ 73.617583][ T4750] EXT4-fs (loop0): 1 truncate cleaned up [ 73.623669][ T4750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.681673][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 73.681739][ T28] audit: type=1400 audit(1778388697.866:689): avc: denied { write } for pid=4749 comm="syz.0.275" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.778213][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.927113][ T4770] netlink: 'syz.0.275': attribute type 15 has an invalid length. [ 73.935989][ T4770] netlink: 'syz.0.275': attribute type 15 has an invalid length. [ 74.015190][ T28] audit: type=1400 audit(1778388698.136:690): avc: denied { write } for pid=4771 comm="syz.0.275" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.216400][ T4782] netlink: 'syz.3.279': attribute type 21 has an invalid length. [ 74.225024][ T4782] netlink: 128 bytes leftover after parsing attributes in process `syz.3.279'. [ 74.237372][ T4782] netlink: 'syz.3.279': attribute type 5 has an invalid length. [ 74.249900][ T4782] netlink: 'syz.3.279': attribute type 6 has an invalid length. [ 74.258082][ T4782] netlink: 3 bytes leftover after parsing attributes in process `syz.3.279'. [ 74.334838][ T4784] batadv0: entered promiscuous mode [ 74.344515][ T4784] macvlan2: entered allmulticast mode [ 74.363617][ T4784] batadv0: entered allmulticast mode [ 74.375435][ T4784] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.383370][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.384744][ T4784] batadv0: left allmulticast mode [ 74.397554][ T4784] batadv0: left promiscuous mode [ 74.426087][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.461964][ T4788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.504508][ T4788] EXT4-fs (loop0): 1 truncate cleaned up [ 74.511011][ T4788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.533818][ T28] audit: type=1400 audit(1778388698.716:691): avc: denied { write } for pid=4787 comm="syz.0.283" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.612472][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'. [ 74.670965][ T4788] netlink: 'syz.0.283': attribute type 15 has an invalid length. [ 74.711628][ T28] audit: type=1400 audit(1778388698.866:692): avc: denied { write } for pid=4796 comm="syz.0.283" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.737117][ T4792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.749783][ T4792] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.762698][ T28] audit: type=1400 audit(1778388698.946:693): avc: denied { write } for pid=4789 comm="syz.5.282" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.862880][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.937777][ T4809] syzkaller1: entered promiscuous mode [ 74.946183][ T4809] syzkaller1: entered allmulticast mode [ 74.987332][ T4812] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.998228][ T4812] EXT4-fs (loop0): 1 truncate cleaned up [ 75.005245][ T4812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.018898][ T28] audit: type=1400 audit(1778388699.196:694): avc: denied { write } for pid=4811 comm="syz.0.287" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.057184][ T4810] FAULT_INJECTION: forcing a failure. [ 75.057184][ T4810] name failslab, interval 1, probability 0, space 0, times 0 [ 75.069827][ T4810] CPU: 1 UID: 0 PID: 4810 Comm: syz.1.286 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.070013][ T4810] Tainted: [W]=WARN [ 75.070020][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.070032][ T4810] Call Trace: [ 75.070038][ T4810] [ 75.070046][ T4810] __dump_stack+0x1d/0x30 [ 75.070073][ T4810] dump_stack_lvl+0x95/0xd0 [ 75.070100][ T4810] dump_stack+0x15/0x1b [ 75.070148][ T4810] should_fail_ex+0x263/0x280 [ 75.070235][ T4810] should_failslab+0x8c/0xb0 [ 75.070269][ T4810] __kmalloc_noprof+0xb8/0x4d0 [ 75.070384][ T4810] ? alloc_pipe_info+0x1c8/0x340 [ 75.070422][ T4810] alloc_pipe_info+0x1c8/0x340 [ 75.070460][ T4810] splice_direct_to_actor+0x591/0x670 [ 75.070587][ T4810] ? kstrtouint_from_user+0xa8/0xf0 [ 75.070618][ T4810] ? __pfx_direct_splice_actor+0x10/0x10 [ 75.070661][ T4810] ? __rcu_read_unlock+0x4e/0x70 [ 75.070731][ T4810] ? get_pid_task+0x96/0xd0 [ 75.070834][ T4810] ? avc_policy_seqno+0x15/0x30 [ 75.070864][ T4810] ? selinux_file_permission+0x1e1/0x320 [ 75.070894][ T4810] do_splice_direct+0x119/0x1a0 [ 75.071004][ T4810] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 75.071028][ T4810] do_sendfile+0x382/0x650 [ 75.071057][ T4810] __x64_sys_sendfile64+0x105/0x150 [ 75.071112][ T4810] x64_sys_call+0x2dc4/0x3020 [ 75.071144][ T4810] do_syscall_64+0x12c/0x3b0 [ 75.071185][ T4810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.071244][ T4810] RIP: 0033:0x7fc4b4e0cdd9 [ 75.071279][ T4810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.071299][ T4810] RSP: 002b:00007fc4b3846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 75.071318][ T4810] RAX: ffffffffffffffda RBX: 00007fc4b5086090 RCX: 00007fc4b4e0cdd9 [ 75.071332][ T4810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 75.071345][ T4810] RBP: 00007fc4b3846090 R08: 0000000000000000 R09: 0000000000000000 [ 75.071366][ T4810] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 75.071382][ T4810] R13: 00007fc4b5086128 R14: 00007fc4b5086090 R15: 00007fff385d4888 [ 75.071429][ T4810] [ 75.334558][ T4818] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.352903][ T4818] EXT4-fs (loop3): 1 truncate cleaned up [ 75.366956][ T4818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.381744][ T28] audit: type=1400 audit(1778388699.566:695): avc: denied { write } for pid=4817 comm="syz.3.291" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.952959][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.958072][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.970322][ T28] audit: type=1400 audit(1778388699.696:696): avc: denied { write } for pid=4823 comm="syz.0.287" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.995069][ T28] audit: type=1400 audit(1778388699.956:697): avc: denied { write } for pid=4826 comm="syz.3.291" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.028077][ T4832] set_capacity_and_notify: 5 callbacks suppressed [ 76.028091][ T4832] loop1: detected capacity change from 0 to 512 [ 76.046786][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 76.090384][ T4832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.104257][ T28] audit: type=1400 audit(1778388700.286:698): avc: denied { mounton } for pid=4837 comm="syz.2.296" path="/proc/227/task" dev="proc" ino=8166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 76.139250][ T4832] EXT4-fs (loop1): 1 truncate cleaned up [ 76.156765][ T4832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.318180][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.479473][ T4861] loop5: detected capacity change from 0 to 1024 [ 76.576575][ T4861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.929535][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.963502][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.983364][ T4875] loop5: detected capacity change from 0 to 512 [ 76.997268][ T4875] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.998350][ T4877] 9pnet_fd: Insufficient options for proto=fd [ 77.054154][ T4877] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.072460][ T4875] EXT4-fs (loop5): 1 truncate cleaned up [ 77.094634][ T4875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.110058][ T4887] loop3: detected capacity change from 0 to 256 [ 77.249789][ T4881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.306'. [ 77.323535][ T4896] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.736431][ T4897] validate_nla: 9 callbacks suppressed [ 77.736445][ T4897] netlink: 'syz.5.305': attribute type 15 has an invalid length. [ 77.751145][ T4897] netlink: 'syz.5.305': attribute type 15 has an invalid length. [ 77.844541][ T4896] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 78.051074][ T4896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=4896 comm=syz.3.313 [ 78.083221][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.114271][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 78.157495][ T4906] loop1: detected capacity change from 0 to 512 [ 78.180727][ T4906] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.207742][ T4906] EXT4-fs (loop1): 1 truncate cleaned up [ 78.348774][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.366535][ T4915] loop5: detected capacity change from 0 to 512 [ 78.388737][ T4915] EXT4-fs: Ignoring removed oldalloc option [ 78.420349][ T4915] EXT4-fs: Ignoring removed nobh option [ 78.456626][ T4915] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 78.485730][ T4915] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.518064][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.315: iget: bad extra_isize 90 (inode size 256) [ 78.575618][ T4915] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.575821][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.315: error while reading EA inode 11 err=-117 [ 78.585006][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 78.585020][ C0] EXT4-fs (loop5): initial error at time 1778388702: ext4_xattr_inode_iget:441: inode 11 [ 78.585049][ C0] EXT4-fs (loop5): last error at time 1778388702: ext4_xattr_inode_iget:441: inode 11 [ 78.772535][ T4915] loop5: lost filesystem error report for type 5 error -117 [ 78.773194][ T4915] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.862479][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.315: iget: bad extra_isize 90 (inode size 256) [ 78.934082][ T4915] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.934419][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.315: error while reading EA inode 11 err=-117 [ 79.001010][ T4915] loop5: lost filesystem error report for type 5 error -117 [ 79.010629][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.315: iget: bad extra_isize 90 (inode size 256) [ 79.062815][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 79.062831][ T28] audit: type=1400 audit(1778388703.246:708): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 79.101789][ T4915] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 79.103922][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.122692][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.315: error while reading EA inode 18 err=-117 [ 79.140349][ T4890] loop0: detected capacity change from 0 to 1024 [ 79.164960][ T4915] loop5: lost filesystem error report for type 5 error -117 [ 79.165326][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.315: iget: bad extra_isize 90 (inode size 256) [ 79.266575][ T4915] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 79.266775][ T4915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.315: error while reading EA inode 18 err=-117 [ 79.330690][ T4915] loop5: lost filesystem error report for type 5 error -117 [ 79.330957][ T4915] EXT4-fs (loop5): 1 orphan inode deleted [ 79.370926][ T4890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 79.373983][ T4915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.402970][ T4890] System zones: 0-1, 3-36 [ 79.430142][ T4927] loop1: detected capacity change from 0 to 512 [ 79.441158][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.475141][ T4890] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 79.491037][ T4930] loop2: detected capacity change from 0 to 512 [ 79.499761][ T4927] ext2: Unknown parameter 'fowner<00000000004294967295' [ 79.519159][ T4890] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 79.523015][ T4890] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.308: Bad quota inode: 4, type: 1 [ 79.526882][ T4930] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 79.532148][ T4890] loop0: lost filesystem error report for type 5 error -117 [ 79.554734][ T4890] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.597685][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 79.602156][ T4930] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 79.604186][ C1] EXT4-fs (loop0): initial error at time 1778388703: ext4_ext_check_inode:521: inode 4 [ 79.612350][ T4930] EXT4-fs (loop2): failed to initialize system zone (-117) [ 79.621790][ C1] EXT4-fs (loop0): last error at time 1778388703: ext4_quota_enable:7228 [ 79.629440][ T4930] EXT4-fs (loop2): mount failed [ 79.690737][ T4890] EXT4-fs (loop0): mount failed [ 79.781692][ T4945] netlink: 104 bytes leftover after parsing attributes in process `syz.2.326'. [ 79.809311][ T4949] loop1: detected capacity change from 0 to 512 [ 79.820373][ T4949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.854782][ T4949] EXT4-fs (loop1): 1 truncate cleaned up [ 79.865370][ T4949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.885660][ T28] audit: type=1400 audit(1778388704.066:709): avc: denied { write } for pid=4948 comm="syz.1.328" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.915732][ T4949] netlink: 'syz.1.328': attribute type 15 has an invalid length. [ 79.923997][ T4949] netlink: 'syz.1.328': attribute type 15 has an invalid length. [ 79.985937][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.008343][ T28] audit: type=1400 audit(1778388704.116:710): avc: denied { write } for pid=4953 comm="syz.1.328" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.133652][ T4960] netlink: 56 bytes leftover after parsing attributes in process `syz.1.331'. [ 80.569809][ T4965] netlink: 32 bytes leftover after parsing attributes in process `syz.5.333'. [ 80.627119][ T4968] vhci_hcd vhci_hcd.3: invalid port number 9 [ 80.648806][ T4968] vhci_hcd vhci_hcd.3: invalid port number 9 [ 80.890141][ T4974] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.992381][ T4974] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.335: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 81.026933][ T4974] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.027570][ T4974] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.335: couldn't read orphan inode 11 (err -117) [ 81.036839][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 81.036859][ C1] EXT4-fs (loop1): initial error at time 1778388705: ext4_ext_check_inode:521: inode 11 [ 81.036904][ C1] EXT4-fs (loop1): last error at time 1778388705: ext4_ext_check_inode:521: inode 11 [ 81.152359][ T4974] loop1: lost filesystem error report for type 5 error -117 [ 81.152965][ T4974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.269627][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.445784][ T4996] set_capacity_and_notify: 1 callbacks suppressed [ 81.445799][ T4996] loop5: detected capacity change from 0 to 512 [ 81.459168][ T4996] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.585621][ T4996] EXT4-fs (loop5): 1 truncate cleaned up [ 81.591969][ T4996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.661297][ T4996] netlink: 'syz.5.342': attribute type 15 has an invalid length. [ 81.669500][ T4996] netlink: 'syz.5.342': attribute type 15 has an invalid length. [ 81.702662][ T28] audit: type=1400 audit(1778388705.836:711): avc: denied { write } for pid=4992 comm="syz.5.342" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.769038][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.822534][ T28] audit: type=1400 audit(1778388705.856:712): avc: denied { write } for pid=5003 comm="syz.5.342" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.939245][ T5009] netlink: 68 bytes leftover after parsing attributes in process `syz.5.345'. [ 82.031483][ T28] audit: type=1400 audit(1778388706.206:713): avc: denied { append } for pid=5008 comm="syz.2.346" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.090396][ T5018] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 82.103312][ T28] audit: type=1400 audit(1778388706.276:714): avc: denied { mac_admin } for pid=5017 comm="syz.5.349" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.145680][ T28] audit: type=1400 audit(1778388706.286:715): avc: denied { relabelto } for pid=5017 comm="syz.5.349" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 82.276779][ T28] audit: type=1400 audit(1778388706.286:716): avc: denied { associate } for pid=5017 comm="syz.5.349" name="cgroup.procs" dev="cgroup" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 82.295593][ T5020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.350'. [ 83.017916][ T5034] netlink: 'syz.0.354': attribute type 1 has an invalid length. [ 83.060342][ T28] audit: type=1400 audit(1778388707.236:717): avc: denied { ioctl } for pid=5033 comm="syz.0.354" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.116490][ T5039] gre0 speed is unknown, defaulting to 1000 [ 83.134410][ T5039] gre0 speed is unknown, defaulting to 1000 [ 83.159138][ T5039] gre0 speed is unknown, defaulting to 1000 [ 83.493385][ T5039] infiniband syz1: set active [ 83.498250][ T5039] infiniband syz1: added gre0 [ 84.157994][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.357'. [ 84.225791][ T5039] RDS/IB: syz1: added [ 84.269496][ T5039] smc: adding ib device syz1 with port count 1 [ 84.304708][ T5040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.326315][ T5039] smc: ib device syz1 port 1 has no pnetid [ 84.460264][ T3391] gre0 speed is unknown, defaulting to 1000 [ 84.466300][ T10] gre0 speed is unknown, defaulting to 1000 [ 84.475158][ T5039] gre0 speed is unknown, defaulting to 1000 [ 84.611119][ T5039] gre0 speed is unknown, defaulting to 1000 [ 84.723695][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 84.723712][ T28] audit: type=1400 audit(1778388708.906:719): avc: denied { setopt } for pid=5053 comm="syz.5.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.753406][ T5039] gre0 speed is unknown, defaulting to 1000 [ 84.860703][ T5058] loop5: detected capacity change from 0 to 128 [ 84.871108][ T5039] gre0 speed is unknown, defaulting to 1000 [ 84.893626][ T5058] vfat: Unknown parameter '184467440737095516150x0000000000000000' [ 85.016122][ T5039] gre0 speed is unknown, defaulting to 1000 [ 85.102452][ T5060] netlink: 56 bytes leftover after parsing attributes in process `syz.0.360'. [ 85.557875][ T5078] loop3: detected capacity change from 0 to 512 [ 85.645669][ T5078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.803713][ T5078] EXT4-fs (loop3): 1 truncate cleaned up [ 85.872485][ T5078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.938050][ T5091] loop0: detected capacity change from 0 to 512 [ 85.950666][ T28] audit: type=1400 audit(1778388710.126:720): avc: denied { write } for pid=5076 comm="syz.3.365" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.981122][ T5091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.004422][ T5091] EXT4-fs (loop0): 1 truncate cleaned up [ 86.011113][ T5091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.031326][ T5080] loop2: detected capacity change from 0 to 4096 [ 86.050469][ T5080] EXT4-fs (loop2): unsupported descriptor size 127 [ 86.071746][ T28] audit: type=1400 audit(1778388710.256:721): avc: denied { write } for pid=5090 comm="syz.0.370" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.150471][ T5095] netlink: 'syz.3.365': attribute type 15 has an invalid length. [ 86.158726][ T5095] netlink: 'syz.3.365': attribute type 15 has an invalid length. [ 86.183941][ T28] audit: type=1400 audit(1778388710.356:722): avc: denied { write } for pid=5096 comm="syz.3.365" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.247389][ T5080] gre0 speed is unknown, defaulting to 1000 [ 86.339346][ T5104] netlink: 'syz.0.370': attribute type 15 has an invalid length. [ 86.349006][ T5104] netlink: 'syz.0.370': attribute type 15 has an invalid length. [ 86.460797][ T28] audit: type=1400 audit(1778388710.646:723): avc: denied { write } for pid=5105 comm="syz.0.370" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.549539][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.853499][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.021982][ T5113] loop0: detected capacity change from 0 to 512 [ 87.037592][ T5113] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 87.070282][ T5113] EXT4-fs (loop0): 1 truncate cleaned up [ 87.076437][ T5113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.169998][ T28] audit: type=1400 audit(1778388711.346:724): avc: denied { setopt } for pid=5110 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.207303][ T5113] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 87.245030][ T5113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.252562][ T5113] IPv6: NLM_F_CREATE should be set when creating new route [ 87.406618][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.605452][ T5128] netlink: 128 bytes leftover after parsing attributes in process `syz.2.378'. [ 87.954643][ T5131] loop2: detected capacity change from 0 to 512 [ 87.980748][ T5131] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.024019][ T5131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.064551][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.079483][ T5136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.099152][ T5136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.117828][ T5131] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.148773][ T5136] loop3: detected capacity change from 0 to 2048 [ 88.172148][ T5136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.194942][ T5136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.248885][ T28] audit: type=1400 audit(1778388712.326:725): avc: denied { write } for pid=5129 comm="syz.2.380" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.302194][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.320672][ T5142] loop0: detected capacity change from 0 to 512 [ 88.334070][ T28] audit: type=1400 audit(1778388712.326:726): avc: denied { write } for pid=5129 comm="syz.2.380" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.374688][ T5142] ext4: Unknown parameter 'smackfstransmute' [ 88.401448][ T5144] loop2: detected capacity change from 0 to 512 [ 88.456324][ T28] audit: type=1400 audit(1778388712.596:727): avc: denied { read } for pid=5141 comm="syz.0.377" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.498936][ T5144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.528129][ T5142] gre0 speed is unknown, defaulting to 1000 [ 88.554208][ T5144] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.584658][ T28] audit: type=1400 audit(1778388712.766:728): avc: denied { write } for pid=5143 comm="syz.2.383" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.751861][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.852254][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.002008][ T5153] loop3: detected capacity change from 0 to 1024 [ 89.043514][ T5153] EXT4-fs: test_dummy_encryption option not supported [ 89.113536][ T5163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.387'. [ 89.289656][ T5178] loop2: detected capacity change from 0 to 512 [ 89.313360][ T5178] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.340371][ T5178] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.476280][ T5178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.491490][ T5187] loop3: detected capacity change from 0 to 2048 [ 89.498401][ T5178] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.304869][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 90.304885][ T28] audit: type=1400 audit(1778388714.486:738): avc: denied { ioctl } for pid=5192 comm="syz.1.398" path="socket:[9576]" dev="sockfs" ino=9576 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.397436][ T5203] netlink: 'syz.3.401': attribute type 2 has an invalid length. [ 90.413862][ T5203] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 90.430091][ T5203] netlink: 152 bytes leftover after parsing attributes in process `syz.3.401'. [ 90.487337][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.505529][ T28] audit: type=1400 audit(1778388714.686:739): avc: denied { setopt } for pid=5202 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.653096][ T5210] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 90.742217][ T5214] loop1: detected capacity change from 0 to 1764 [ 91.266684][ T5222] loop1: detected capacity change from 0 to 4096 [ 91.323674][ T5222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.515236][ T28] audit: type=1400 audit(1778388715.516:740): avc: denied { write } for pid=5213 comm="syz.1.406" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.589535][ T5220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 91.661512][ T5220] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 91.684340][ T5220] SELinux: failed to load policy [ 91.801943][ T5220] bridge0: entered allmulticast mode [ 91.900521][ T5234] Cannot find del_set index 29 as target [ 92.116171][ T5232] loop3: detected capacity change from 0 to 1024 [ 92.161846][ T5232] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 92.268612][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 92.359137][ T5232] netlink: 10 bytes leftover after parsing attributes in process `syz.3.410'. [ 92.504377][ T5239] loop2: detected capacity change from 0 to 512 [ 92.523948][ T5239] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.566525][ T5239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.605956][ T5239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.630414][ T5239] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.641845][ T28] audit: type=1400 audit(1778388716.826:741): avc: denied { write } for pid=5238 comm="syz.2.412" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.664420][ T5255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5255 comm=syz.3.416 [ 92.679976][ T28] audit: type=1400 audit(1778388716.856:742): avc: denied { write } for pid=5238 comm="syz.2.412" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.697205][ T5255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=549 sclass=netlink_route_socket pid=5255 comm=syz.3.416 [ 92.743525][ T28] audit: type=1400 audit(1778388716.926:743): avc: denied { create } for pid=5246 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.819119][ T5245] loop0: detected capacity change from 0 to 512 [ 92.849730][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.921900][ T28] audit: type=1400 audit(1778388718.106:744): avc: denied { mounton } for pid=5269 comm="syz.3.421" path="/86/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 94.641914][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.654715][ T3359] IPVS: starting estimator thread 0... [ 94.681989][ T5274] loop5: detected capacity change from 0 to 4096 [ 94.693303][ T5274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.701662][ T5274] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 94.714538][ T5274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.750288][ T5281] IPVS: using max 2352 ests per chain, 117600 per kthread [ 94.768949][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.819559][ T5291] loop5: detected capacity change from 0 to 512 [ 94.829103][ T5291] EXT4-fs: Ignoring removed bh option [ 94.835344][ T5291] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.850233][ T5291] EXT4-fs (loop5): bad geometry: first data block 0 is beyond end of filesystem (0) [ 95.069651][ T5302] loop5: detected capacity change from 0 to 512 [ 95.095680][ T5302] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.103055][ T5302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.124048][ T5302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.136953][ T5302] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.148476][ T28] audit: type=1400 audit(1778388719.326:745): avc: denied { write } for pid=5301 comm="syz.5.430" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.177746][ T28] audit: type=1400 audit(1778388719.356:746): avc: denied { write } for pid=5301 comm="syz.5.430" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.200157][ T28] audit: type=1400 audit(1778388719.376:747): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.343813][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.564679][ T5245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.213415][ T5316] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 96.649978][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 96.687811][ T5327] xt_policy: output policy not valid in PREROUTING and INPUT [ 96.781826][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.789037][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.848852][ T5331] loop1: detected capacity change from 0 to 512 [ 96.892993][ T5331] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.939315][ T5331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.958332][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.990140][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.041222][ T5331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.088364][ T5331] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.132092][ T28] audit: type=1400 audit(1778388721.306:748): avc: denied { write } for pid=5330 comm="syz.1.442" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.242376][ T28] audit: type=1400 audit(1778388721.346:749): avc: denied { write } for pid=5330 comm="syz.1.442" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.355481][ T3589] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.382745][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.397080][ T5338] loop5: detected capacity change from 0 to 512 [ 97.405031][ T3589] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.441202][ T3589] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.472652][ T3589] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.020943][ T5353] gre0 speed is unknown, defaulting to 1000 [ 98.058817][ T5354] loop5: detected capacity change from 0 to 1024 [ 98.083804][ T5354] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.097679][ T5354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.120369][ T5354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.160355][ T28] audit: type=1400 audit(1778388722.346:750): avc: denied { write } for pid=5352 comm="syz.5.448" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.294440][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.590273][ T5365] loop1: detected capacity change from 0 to 256 [ 98.600728][ T5365] FAT-fs (loop1): bogus number of reserved sectors [ 98.607318][ T5365] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 98.616620][ T5365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 100.336104][ T5377] loop5: detected capacity change from 0 to 512 [ 100.364421][ T5377] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.405419][ T5377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.441897][ T5377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.477846][ T5377] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.511381][ T28] audit: type=1400 audit(1778388724.696:751): avc: denied { write } for pid=5376 comm="syz.5.455" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.583919][ T28] audit: type=1400 audit(1778388724.726:752): avc: denied { write } for pid=5376 comm="syz.5.455" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.869761][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.965516][ T5387] loop1: detected capacity change from 0 to 512 [ 100.994476][ T5387] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.058460][ T5387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.103220][ T5387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.155659][ T5387] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.201196][ T28] audit: type=1400 audit(1778388725.386:753): avc: denied { write } for pid=5386 comm="syz.1.467" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.320634][ T28] audit: type=1400 audit(1778388725.416:754): avc: denied { write } for pid=5386 comm="syz.1.467" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.365411][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.576102][ T5407] loop2: detected capacity change from 0 to 512 [ 101.585556][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 101.595404][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 101.597075][ T5407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.664729][ T5407] EXT4-fs (loop2): 1 truncate cleaned up [ 101.692137][ T5407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.747404][ T28] audit: type=1400 audit(1778388725.926:755): avc: denied { write } for pid=5406 comm="syz.2.464" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.981441][ T5416] netlink: 'syz.2.464': attribute type 15 has an invalid length. [ 101.990108][ T5416] netlink: 'syz.2.464': attribute type 15 has an invalid length. [ 102.100240][ T28] audit: type=1400 audit(1778388726.186:756): avc: denied { write } for pid=5417 comm="syz.2.464" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.613639][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.908134][ T5426] loop2: detected capacity change from 0 to 256 [ 103.005697][ T5426] FAT-fs (loop2): bogus number of reserved sectors [ 103.013766][ T5426] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 103.023724][ T5426] FAT-fs (loop2): Can't find a valid FAT filesystem [ 104.740257][ T28] audit: type=1400 audit(1778388728.896:757): avc: denied { create } for pid=5432 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.958789][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.473'. [ 104.996905][ T5442] loop5: detected capacity change from 0 to 512 [ 105.020604][ T5442] msdos: Bad value for 'check' [ 106.454595][ T5447] loop2: detected capacity change from 0 to 1024 [ 106.487328][ T5447] EXT4-fs: Ignoring removed nobh option [ 106.531409][ T5447] ext4: Unknown parameter 'debug_want_e' [ 106.578571][ T5445] loop2: detected capacity change from 0 to 512 [ 106.597494][ T5445] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.474: corrupted inode contents [ 106.609452][ T5445] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.609596][ T5445] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #3: comm syz.2.474: mark_inode_dirty error [ 106.618705][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 106.618729][ C1] EXT4-fs (loop2): initial error at time 1778388730: ext4_do_update_inode:5690: inode 3 [ 106.618763][ C1] EXT4-fs (loop2): last error at time 1778388730: ext4_do_update_inode:5690: inode 3 [ 106.655871][ T5445] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.691887][ T5445] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.474: corrupted inode contents [ 106.785712][ T5445] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.785936][ T5445] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.474: mark_inode_dirty error [ 106.840291][ T5445] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.840504][ T5445] Quota error (device loop2): write_blk: dquota write failed [ 106.862488][ T5445] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 106.872652][ T5445] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.474: Failed to acquire dquot type 0 [ 106.883973][ T5445] loop2: lost filesystem error report for type 5 error -117 [ 106.888409][ T5445] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.474: corrupted inode contents [ 106.907778][ T5445] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 106.909217][ T5445] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.474: mark_inode_dirty error [ 106.950314][ T5445] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.010398][ T5445] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.474: corrupted inode contents [ 107.079753][ T5445] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.079905][ T5445] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.474: mark_inode_dirty error [ 107.110290][ T5445] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.271537][ T5445] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.474: corrupted inode contents [ 107.411383][ T5445] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.411661][ T5445] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 107.561514][ T5445] loop2: lost filesystem error report for type 5 error -117 [ 107.562950][ T5445] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.474: corrupted inode contents [ 107.720582][ T5445] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.721369][ T5445] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.474: mark_inode_dirty error [ 107.847411][ T5445] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 107.883902][ T5445] loop2: lost filesystem error report for type 5 error -117 [ 107.884303][ T5445] EXT4-fs (loop2): 1 truncate cleaned up [ 107.938459][ T5445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.987099][ T5445] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.088880][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.821791][ T5463] loop1: detected capacity change from 0 to 256 [ 108.830984][ T5463] FAT-fs (loop1): bogus number of reserved sectors [ 108.837857][ T5463] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 108.847083][ T5463] FAT-fs (loop1): Can't find a valid FAT filesystem [ 109.103796][ T5466] FAULT_INJECTION: forcing a failure. [ 109.103796][ T5466] name failslab, interval 1, probability 0, space 0, times 0 [ 109.116790][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: syz.5.479 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.116823][ T5466] Tainted: [W]=WARN [ 109.116831][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.116845][ T5466] Call Trace: [ 109.116852][ T5466] [ 109.116860][ T5466] __dump_stack+0x1d/0x30 [ 109.116891][ T5466] dump_stack_lvl+0x95/0xd0 [ 109.116912][ T5466] dump_stack+0x15/0x1b [ 109.116929][ T5466] should_fail_ex+0x263/0x280 [ 109.116954][ T5466] should_failslab+0x8c/0xb0 [ 109.117113][ T5466] __kmalloc_noprof+0xb8/0x4d0 [ 109.117142][ T5466] ? copy_splice_read+0xc2/0x6c0 [ 109.117171][ T5466] copy_splice_read+0xc2/0x6c0 [ 109.117219][ T5466] ? __pfx_copy_splice_read+0x10/0x10 [ 109.117251][ T5466] splice_direct_to_actor+0x26e/0x670 [ 109.117306][ T5466] ? __pfx_direct_splice_actor+0x10/0x10 [ 109.117411][ T5466] do_splice_direct+0x119/0x1a0 [ 109.117454][ T5466] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 109.117521][ T5466] do_sendfile+0x382/0x650 [ 109.117543][ T5466] __x64_sys_sendfile64+0x105/0x150 [ 109.117589][ T5466] x64_sys_call+0x2dc4/0x3020 [ 109.117620][ T5466] do_syscall_64+0x12c/0x3b0 [ 109.117664][ T5466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.117686][ T5466] RIP: 0033:0x7f369699cdd9 [ 109.117746][ T5466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.117764][ T5466] RSP: 002b:00007f36953ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 109.117786][ T5466] RAX: ffffffffffffffda RBX: 00007f3696c16090 RCX: 00007f369699cdd9 [ 109.117800][ T5466] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 109.117814][ T5466] RBP: 00007f36953ce090 R08: 0000000000000000 R09: 0000000000000000 [ 109.117830][ T5466] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 109.117899][ T5466] R13: 00007f3696c16128 R14: 00007f3696c16090 R15: 00007fffbcd03508 [ 109.117921][ T5466] [ 111.151957][ T5485] netlink: 64 bytes leftover after parsing attributes in process `syz.5.484'. [ 111.222253][ T5491] loop5: detected capacity change from 0 to 1024 [ 111.245020][ T5491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.257893][ T5479] gre0 speed is unknown, defaulting to 1000 [ 111.285410][ T28] audit: type=1400 audit(1778388735.466:758): avc: denied { write } for pid=5490 comm="syz.5.485" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.332455][ T3608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.369030][ T28] audit: type=1400 audit(1778388735.546:759): avc: denied { write } for pid=5490 comm="syz.5.485" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.369046][ T5491] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.485: deleted inode referenced: 12 [ 111.373033][ T5491] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.485: deleted inode referenced: 12 [ 111.417866][ T3608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.429892][ T5491] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.485: deleted inode referenced: 12 [ 111.442907][ T5491] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.485: deleted inode referenced: 12 [ 111.458951][ T5491] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.485: deleted inode referenced: 12 [ 111.474033][ T5502] loop2: detected capacity change from 0 to 4096 [ 111.494451][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.531688][ T28] audit: type=1400 audit(1778388735.716:760): avc: denied { write } for pid=5499 comm="syz.2.486" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.540402][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.567010][ T3608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.612291][ T5507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.488'. [ 111.624527][ T5507] veth1_to_team: entered promiscuous mode [ 111.631670][ T5507] gretap0: entered promiscuous mode [ 111.638183][ T5507] hsr1: entered promiscuous mode [ 111.651240][ T3608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.793798][ T3608] bridge_slave_1: left allmulticast mode [ 111.799712][ T3608] bridge_slave_1: left promiscuous mode [ 111.816788][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.825979][ T3608] bridge_slave_0: left allmulticast mode [ 111.844213][ T3608] bridge_slave_0: left promiscuous mode [ 111.863242][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.132035][ T5521] loop1: detected capacity change from 0 to 512 [ 112.194845][ T5521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.243376][ T5521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.278577][ T5521] ext4 filesystem being mounted at /108/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.539042][ T5526] netlink: 5728 bytes leftover after parsing attributes in process `syz.1.490'. [ 112.809386][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.843453][ T28] audit: type=1400 audit(1778388737.026:761): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.964354][ T5536] loop2: detected capacity change from 0 to 512 [ 112.983638][ T5536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.001414][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.024205][ T5536] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #16: comm syz.2.491: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 113.048782][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.068592][ T3608] bond0 (unregistering): Released all slaves [ 113.080248][ T5536] fserror_report: 1 callbacks suppressed [ 113.080303][ T5536] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.106148][ T5536] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.491: couldn't read orphan inode 16 (err -117) [ 113.115580][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 113.115595][ C0] EXT4-fs (loop2): initial error at time 1778388737: ext4_ext_check_inode:521: inode 16 [ 113.115628][ C0] EXT4-fs (loop2): last error at time 1778388737: ext4_ext_check_inode:521: inode 16 [ 113.176690][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.247103][ T5536] loop2: lost filesystem error report for type 5 error -117 [ 113.247377][ T5536] EXT4-fs (loop2): 1 orphan inode deleted [ 113.288555][ T5536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.312702][ T3608] hsr_slave_0: left promiscuous mode [ 113.321483][ T3608] hsr_slave_1: left promiscuous mode [ 113.330967][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.348593][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.367823][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.378914][ T28] audit: type=1400 audit(1778388737.566:762): avc: denied { write } for pid=5535 comm="syz.2.491" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.412664][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.427366][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.445771][ T3608] veth1_macvtap: left promiscuous mode [ 113.460775][ T3608] veth0_macvtap: left promiscuous mode [ 113.473052][ T3608] veth1_vlan: left promiscuous mode [ 113.489674][ T3608] veth0_vlan: left promiscuous mode [ 113.666863][ T28] audit: type=1400 audit(1778388737.846:763): avc: denied { write } for pid=5534 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.713113][ T5545] netlink: 104 bytes leftover after parsing attributes in process `syz.5.494'. [ 113.945324][ T5557] loop1: detected capacity change from 0 to 256 [ 113.992266][ T5557] FAT-fs (loop1): bogus number of reserved sectors [ 113.998867][ T5557] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 114.008118][ T5557] FAT-fs (loop1): Can't find a valid FAT filesystem [ 114.089824][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 114.128524][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 114.300466][ T5479] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.308038][ T5479] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.323419][ T5479] bridge_slave_0: entered allmulticast mode [ 114.355225][ T5479] bridge_slave_0: entered promiscuous mode [ 114.381941][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 114.413568][ T5560] netlink: 20 bytes leftover after parsing attributes in process `syz.5.498'. [ 114.448030][ T5479] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.480810][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.539083][ T5479] bridge_slave_1: entered allmulticast mode [ 114.608994][ T5479] bridge_slave_1: entered promiscuous mode [ 114.627963][ T5566] dummy0: entered allmulticast mode [ 114.706968][ T5479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.753440][ T5479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.805930][ T28] audit: type=1400 audit(1778388738.986:764): avc: denied { connect } for pid=5581 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.862401][ T5479] team0: Port device team_slave_0 added [ 114.910186][ T5479] team0: Port device team_slave_1 added [ 114.919449][ T28] audit: type=1400 audit(1778388738.986:765): avc: denied { read } for pid=5581 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.991498][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.000111][ T28] audit: type=1400 audit(1778388739.036:766): avc: denied { write } for pid=5581 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.026181][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.080725][ T5479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.102476][ T5554] gre0 speed is unknown, defaulting to 1000 [ 115.109117][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.128223][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.209321][ T5479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.284855][ T5479] hsr_slave_0: entered promiscuous mode [ 115.297708][ T5479] hsr_slave_1: entered promiscuous mode [ 115.309948][ T5479] debugfs: 'hsr0' already exists in 'hsr' [ 115.321993][ T5479] Cannot create hsr debugfs directory [ 115.895873][ T28] audit: type=1400 audit(1778388740.076:767): avc: denied { write } for pid=5575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.013982][ T3608] bridge_slave_1: left allmulticast mode [ 116.019739][ T3608] bridge_slave_1: left promiscuous mode [ 116.067437][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.114500][ T3608] bridge_slave_0: left allmulticast mode [ 116.140974][ T3608] bridge_slave_0: left promiscuous mode [ 116.178060][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.342403][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.352675][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.370792][ T3608] bond0 (unregistering): Released all slaves [ 116.462125][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.479408][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.491258][ T5554] bridge_slave_0: entered allmulticast mode [ 116.507977][ T5554] bridge_slave_0: entered promiscuous mode [ 116.530629][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.552412][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.574899][ T5554] bridge_slave_1: entered allmulticast mode [ 116.591266][ T5554] bridge_slave_1: entered promiscuous mode [ 116.609693][ T5479] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 116.623941][ T5479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.648525][ T3608] hsr_slave_0: left promiscuous mode [ 116.655982][ T3608] hsr_slave_1: left promiscuous mode [ 116.664233][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.680593][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.753281][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 116.774060][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 116.863012][ T5479] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 116.883757][ T28] audit: type=1400 audit(1778388741.056:768): avc: denied { write } for pid=5617 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.921400][ T5479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.932625][ T5620] loop1: detected capacity change from 0 to 1024 [ 116.950836][ T5479] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 116.962459][ T5620] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.994097][ T5479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.008804][ T5620] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 117.028490][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 117.039630][ T5479] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.050447][ T5620] EXT4-fs error (device loop1): __ext4_iget:5481: inode #2: block 131071: comm syz.1.509: invalid block [ 117.073809][ T5479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.084015][ T5620] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 117.084190][ T5620] EXT4-fs (loop1): no journal found [ 117.093266][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 117.093281][ C1] EXT4-fs (loop1): initial error at time 1778388741: __ext4_iget:5481: inode 2: block 131071 [ 117.093330][ C1] EXT4-fs (loop1): last error at time 1778388741: __ext4_iget:5481: inode 2: block 131071 [ 117.147831][ T5554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.168577][ T5554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.209778][ T5620] EXT4-fs (loop1): can't get journal size [ 117.235331][ T5620] EXT4-fs error (device loop1): __ext4_iget:5481: inode #2: block 131071: comm syz.1.509: invalid block [ 117.259956][ T5554] team0: Port device team_slave_0 added [ 117.282551][ T5554] team0: Port device team_slave_1 added [ 117.291079][ T5620] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 117.291390][ T5620] EXT4-fs (loop1): get root inode failed [ 117.364356][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.373178][ T5620] EXT4-fs (loop1): mount failed [ 117.388647][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.456778][ T5554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.546403][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.560597][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.586948][ T5554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.626374][ T5554] hsr_slave_0: entered promiscuous mode [ 117.632621][ T5554] hsr_slave_1: entered promiscuous mode [ 117.638541][ T5554] debugfs: 'hsr0' already exists in 'hsr' [ 117.660237][ T5554] Cannot create hsr debugfs directory [ 117.697982][ T28] audit: type=1400 audit(1778388741.876:769): avc: denied { write } for pid=5629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.786640][ T5649] loop1: detected capacity change from 0 to 256 [ 117.900884][ T28] audit: type=1400 audit(1778388742.076:770): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.682327][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 118.688904][ T5649] FAT-fs (loop1): bogus number of reserved sectors [ 118.695486][ T5649] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 118.704724][ T5649] FAT-fs (loop1): Can't find a valid FAT filesystem [ 118.788384][ T5479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.913967][ T5479] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.920962][ T5656] loop2: detected capacity change from 0 to 512 [ 118.940846][ T5656] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.949825][ T5656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.132457][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.139643][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.158236][ T5656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.192805][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.199918][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.211484][ T5656] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.252721][ T28] audit: type=1400 audit(1778388743.426:771): avc: denied { write } for pid=5655 comm="syz.2.514" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.323606][ T5554] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 119.349410][ T5554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.361720][ T28] audit: type=1400 audit(1778388743.466:772): avc: denied { write } for pid=5655 comm="syz.2.514" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.396393][ T5554] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 119.418007][ T5554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.458012][ T5554] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 119.476102][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.506892][ T5554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.542514][ T5554] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 119.578442][ T5554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.624164][ T28] audit: type=1400 audit(1778388743.806:773): avc: denied { write } for pid=5663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.713466][ T28] audit: type=1400 audit(1778388743.886:774): avc: denied { write } for pid=5684 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.789097][ T5554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.823972][ T5554] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.856623][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 119.871890][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.878994][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.215480][ T5479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.553237][ T5718] loop5: detected capacity change from 0 to 512 [ 120.794693][ T5479] veth0_vlan: entered promiscuous mode [ 120.815887][ T5479] veth1_vlan: entered promiscuous mode [ 120.842924][ T5479] veth0_macvtap: entered promiscuous mode [ 120.864518][ T5730] loop5: detected capacity change from 0 to 512 [ 120.882035][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.888182][ T5730] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.889186][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.950210][ T28] audit: type=1400 audit(1778388745.106:775): avc: denied { write } for pid=5726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.983022][ T5730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.010387][ T28] audit: type=1400 audit(1778388745.176:776): avc: denied { write } for pid=5742 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.040608][ T5730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.055924][ T5479] veth1_macvtap: entered promiscuous mode [ 121.069103][ T5730] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.082515][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.093110][ T28] audit: type=1400 audit(1778388745.276:777): avc: denied { write } for pid=5729 comm="syz.5.523" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.117123][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.609498][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 121.620560][ T5754] xt_l2tp: invalid flags combination: 8 [ 121.641564][ T3580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.654748][ T3580] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.674272][ T5756] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 121.678236][ T3580] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.696472][ T5759] loop2: detected capacity change from 0 to 128 [ 121.723849][ T5759] FAT-fs (loop2): invalid media value (0x00) [ 121.744853][ T5759] FAT-fs (loop2): Can't find a valid FAT filesystem [ 121.758215][ T5756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.797084][ T5756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.526'. [ 121.806251][ T3580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.820636][ T3765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.872952][ T5770] netlink: 128 bytes leftover after parsing attributes in process `syz.5.530'. [ 121.945912][ T5762] xt_hashlimit: max too large, truncated to 1048576 [ 122.035256][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 122.035272][ T28] audit: type=1400 audit(1778388746.216:782): avc: denied { write } for pid=5772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.120339][ T28] audit: type=1400 audit(1778388746.296:783): avc: denied { write } for pid=5807 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.160492][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 122.235814][ T5554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.312270][ T5826] loop6: detected capacity change from 0 to 512 [ 122.513119][ T5830] loop6: detected capacity change from 0 to 512 [ 122.577108][ T5830] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 122.792424][ T5830] EXT4-fs (loop6): 1 truncate cleaned up [ 122.846729][ T5830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.961005][ T28] audit: type=1400 audit(1778388747.136:784): avc: denied { write } for pid=5817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.993730][ T5794] ipip0: entered promiscuous mode [ 123.081915][ T28] audit: type=1400 audit(1778388747.186:785): avc: denied { write } for pid=5829 comm="syz.6.538" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.203744][ T28] audit: type=1400 audit(1778388747.266:786): avc: denied { write } for pid=5840 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.246129][ T5847] mmap: syz.1.541 (5847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.280689][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 124.179744][ T5864] netlink: 'syz.6.538': attribute type 15 has an invalid length. [ 124.188138][ T5864] netlink: 'syz.6.538': attribute type 15 has an invalid length. [ 124.295295][ T28] audit: type=1400 audit(1778388748.386:787): avc: denied { write } for pid=5865 comm="syz.6.538" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.378883][ T5870] loop2: detected capacity change from 0 to 512 [ 124.403156][ T28] audit: type=1400 audit(1778388748.586:788): avc: denied { block_suspend } for pid=5869 comm="syz.2.544" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.452693][ T5794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=5794 comm=syz.5.533 [ 124.534884][ T5872] loop2: detected capacity change from 0 to 8192 [ 124.572171][ T5872] vfat: Unknown parameter '000000000000000000000150xffffffffffffffff' [ 124.577380][ T5479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.607235][ T5554] veth0_vlan: entered promiscuous mode [ 124.657836][ T5554] veth1_vlan: entered promiscuous mode [ 124.677759][ T3288] ================================================================== [ 124.685889][ T3288] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 124.692893][ T3288] [ 124.695243][ T3288] write to 0xffff8881016be12c of 4 bytes by task 3787 on cpu 0: [ 124.702906][ T3288] shmem_mknod+0x143/0x170 [ 124.707374][ T3288] shmem_create+0x34/0x50 [ 124.711746][ T3288] path_openat+0xd75/0x2050 [ 124.716285][ T3288] do_file_open+0x16c/0x290 [ 124.720824][ T3288] do_sys_openat2+0x94/0x130 [ 124.725448][ T3288] __x64_sys_openat+0xf2/0x120 [ 124.730251][ T3288] x64_sys_call+0x1e39/0x3020 [ 124.734962][ T3288] do_syscall_64+0x12c/0x3b0 [ 124.739589][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.745513][ T3288] [ 124.747862][ T3288] read to 0xffff8881016be12c of 4 bytes by task 3288 on cpu 1: [ 124.755433][ T3288] fill_mg_cmtime+0x5b/0x240 [ 124.760076][ T3288] generic_fillattr+0x24a/0x340 [ 124.764968][ T3288] shmem_getattr+0x181/0x200 [ 124.769597][ T3288] vfs_getattr_nosec+0x146/0x1e0 [ 124.773694][ T5554] veth0_macvtap: entered promiscuous mode [ 124.774648][ T3288] vfs_getattr+0x48/0x60 [ 124.774673][ T3288] vfs_statx_path+0x28/0x140 [ 124.789234][ T3288] vfs_statx+0xc4/0x170 [ 124.793416][ T3288] vfs_fstatat+0x118/0x170 [ 124.797862][ T3288] __se_sys_newfstatat+0x55/0x3e0 [ 124.802930][ T3288] __x64_sys_newfstatat+0x55/0x70 [ 124.807986][ T3288] x64_sys_call+0x2c64/0x3020 [ 124.812704][ T3288] do_syscall_64+0x12c/0x3b0 [ 124.815324][ T5554] veth1_macvtap: entered promiscuous mode [ 124.817325][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.828959][ T3288] [ 124.831314][ T3288] value changed: 0x33ef223d -> 0x33f5a0c0 [ 124.837044][ T3288] [ 124.839377][ T3288] Reported by Kernel Concurrency Sanitizer on: [ 124.845558][ T3288] CPU: 1 UID: 0 PID: 3288 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 124.855993][ T3288] Tainted: [W]=WARN [ 124.859819][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.869905][ T3288] ================================================================== [ 124.892630][ T5888] netlink: 44 bytes leftover after parsing attributes in process `syz.6.549'. [ 124.899604][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.916670][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.930049][ T3608] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.935277][ T28] audit: type=1400 audit(1778388749.096:789): avc: denied { write } for pid=3283 comm="syz-executor" path="pipe:[2736]" dev="pipefs" ino=2736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 124.939809][ T3608] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.053905][ T28] audit: type=1400 audit(1778388749.236:790): avc: denied { write } for pid=5860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.152402][ T28] audit: type=1400 audit(1778388749.336:791): avc: denied { write } for pid=5898 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.193507][ T3608] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.226180][ T3608] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.241690][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 125.254207][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.393737][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.433613][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.543942][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.601226][ T30] bridge_slave_1: left allmulticast mode [ 125.606987][ T30] bridge_slave_1: left promiscuous mode [ 125.612918][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.621072][ T30] bridge_slave_0: left allmulticast mode [ 125.626800][ T30] bridge_slave_0: left promiscuous mode [ 125.632743][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.703157][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.713021][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.722577][ T30] bond0 (unregistering): Released all slaves [ 125.776831][ T30] hsr_slave_0: left promiscuous mode [ 125.783949][ T30] hsr_slave_1: left promiscuous mode [ 125.789643][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.798932][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.808025][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.816443][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.829465][ T30] veth1_macvtap: left promiscuous mode [ 125.835044][ T30] veth0_macvtap: left promiscuous mode [ 125.840699][ T30] veth1_vlan: left promiscuous mode [ 125.845969][ T30] veth0_vlan: left promiscuous mode [ 125.920692][ T30] team0 (unregistering): Port device team_slave_1 removed [ 125.930617][ T30] team0 (unregistering): Port device team_slave_0 removed [ 125.966294][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 126.072316][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 126.179660][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 126.235207][ T30] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.305071][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 126.373201][ T30] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.433789][ T30] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.503201][ T30] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.586877][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.633313][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.684098][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.713334][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 126.723551][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.802845][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.844111][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.866912][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 126.887051][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.933604][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.993388][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 127.018051][ T30] bridge_slave_1: left allmulticast mode [ 127.023757][ T30] bridge_slave_1: left promiscuous mode [ 127.029419][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.037718][ T30] bridge_slave_0: left allmulticast mode [ 127.043607][ T30] bridge_slave_0: left promiscuous mode [ 127.049279][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.057651][ T30] bridge_slave_1: left allmulticast mode [ 127.063415][ T30] bridge_slave_1: left promiscuous mode [ 127.069131][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.077044][ T30] bridge_slave_0: left allmulticast mode [ 127.082755][ T30] bridge_slave_0: left promiscuous mode [ 127.088423][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.097538][ T30] bridge_slave_1: left allmulticast mode [ 127.103273][ T30] bridge_slave_1: left promiscuous mode [ 127.109062][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.116775][ T30] bridge_slave_0: left allmulticast mode [ 127.122670][ T30] bridge_slave_0: left promiscuous mode [ 127.128346][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.262736][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.272865][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.282404][ T30] bond0 (unregistering): Released all slaves [ 127.301284][ T30] gretap0 (unregistering): left promiscuous mode [ 127.356904][ T3582] smc: removing ib device syz1 [ 127.372356][ T30] bridge0 (unregistering): left allmulticast mode [ 127.424440][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.434758][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.444447][ T30] bond0 (unregistering): Released all slaves [ 127.460197][ T30] bond1 (unregistering): Released all slaves [ 127.472355][ T9] gre0 speed is unknown, defaulting to 1000 [ 127.483715][ T9] syz1: Port: 1 Link DOWN [ 127.555447][ T30] hsr_slave_0: left promiscuous mode [ 127.561235][ T30] hsr_slave_1: left promiscuous mode [ 127.566656][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 127.566669][ T28] audit: type=1400 audit(1778388751.746:806): avc: denied { write } for pid=6021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.596701][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.604765][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.612477][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.619892][ T28] audit: type=1400 audit(1778388751.796:807): avc: denied { write } for pid=6032 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.642134][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.649879][ T30] veth1_to_team: left promiscuous mode [ 127.657777][ T30] hsr_slave_0: left promiscuous mode [ 127.663774][ T30] hsr_slave_1: left promiscuous mode [ 127.669531][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.677074][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.684636][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.692099][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.701550][ T30] hsr_slave_0: left promiscuous mode [ 127.707291][ T30] hsr_slave_1: left promiscuous mode [ 127.713074][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.720547][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.728111][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.735614][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.749081][ T30] veth1_macvtap: left promiscuous mode [ 127.754789][ T30] veth0_macvtap: left promiscuous mode [ 127.760348][ T30] veth1_vlan: left promiscuous mode [ 127.765588][ T30] veth0_vlan: left promiscuous mode [ 127.771360][ T30] veth1_macvtap: left promiscuous mode [ 127.776842][ T30] veth0_macvtap: left promiscuous mode [ 127.782432][ T30] veth1_vlan: left promiscuous mode [ 127.787808][ T30] veth0_vlan: left promiscuous mode [ 127.793674][ T30] veth1_macvtap: left promiscuous mode [ 127.799195][ T30] veth0_macvtap: left promiscuous mode [ 127.804859][ T30] veth1_vlan: left promiscuous mode [ 127.810071][ T30] veth0_vlan: left promiscuous mode [ 127.941528][ T30] team0 (unregistering): Port device team_slave_1 removed [ 127.952436][ T30] team0 (unregistering): Port device team_slave_0 removed [ 128.014080][ T30] team0 (unregistering): Port device team_slave_1 removed [ 128.024011][ T30] team0 (unregistering): Port device team_slave_0 removed [ 128.086343][ T30] team0 (unregistering): Port device team_slave_1 removed [ 128.097239][ T30] team0 (unregistering): Port device team_slave_0 removed [ 128.131086][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 128.226995][ T28] audit: type=1400 audit(1778388752.406:808): avc: denied { write } for pid=6039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.260436][ T28] audit: type=1400 audit(1778388752.446:809): avc: denied { write } for pid=6050 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.295229][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 128.376170][ T28] audit: type=1400 audit(1778388752.556:810): avc: denied { write } for pid=6053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.408923][ T28] audit: type=1400 audit(1778388752.586:811): avc: denied { write } for pid=6064 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.442168][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 128.534807][ T28] audit: type=1400 audit(1778388752.716:812): avc: denied { write } for pid=6068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.567738][ T28] audit: type=1400 audit(1778388752.746:813): avc: denied { write } for pid=6079 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.600827][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 128.677530][ T28] audit: type=1400 audit(1778388752.856:814): avc: denied { write } for pid=6082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.709452][ T28] audit: type=1400 audit(1778388752.886:815): avc: denied { write } for pid=6093 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.742652][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 128.796421][ T30] IPVS: stop unused estimator thread 0... [ 128.802464][ T30] IPVS: stop unused estimator thread 0... [ 128.868907][ T3019] 8021q: adding VLAN 0 to HW filter on device eth25 [ 128.973324][ T3019] 8021q: adding VLAN 0 to HW filter on device eth26 [ 129.075927][ T3019] 8021q: adding VLAN 0 to HW filter on device eth27 [ 129.177334][ T3019] 8021q: adding VLAN 0 to HW filter on device eth28