last executing test programs: 21m47.235399161s ago: executing program 32 (id=292): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r0 = socket$nl_route(0x10, 0x3, 0x0) setxattr(0x0, &(0x7f0000000000)=@random={'user.', 'netdevsim'}, &(0x7f0000000280)='\xdb\xf4\xe8\xc6\xc5\x95\xa2\xe6\xa3\x7f\xd4\x1a\xa4\x1e\xc76u\xb8\xb7=8U{\xfb(\xc9\xbf\x85\x9e2X\xb5\xe6p\x03d\xec\xaez\xc0|/\xe2\xfaE\xf9\xee\xa8\xad\x89*N\xc2-9\'FN\xb3\xeb|\x93\xb9\xb0)s\x01\xc1\xec\x98\x8a\xbc\xa2\xadTc\x01EH\xe6Z\xbe\tPm\x98\xeb0\x91\xc7\x81S\x948\xee\x13g\x8b\x96[\xd7?3\xe1\x82._\x178AK\xf4x\x7fG\xb4\xf8\x8d!j\x83\x1b\xa0\xc5x\xfb\xb2s3\xa5[-\x1f\x89hX2<\x98\xbc\xde\x00\x85\xcd\x7f\x8c]\x01;b\xe79n\xfd\xb9z)<\xf6\x91x\xb5\xdc\x02\xa7\x1b\x8f\xd1WE\xa6?o\xef\xc8\xe7a\xc9\xcf\x84I\xa3\xc60\xe9\xb6\x99\xca\f\xa1\xb1\xfc?5\xc8\x1e\xbf$\xf0\xc6/\xf2\xbb\x8b\'/\x03\r\xfc\xb2r\xd39B\x13l~\x9b\xf4-3\xfa\\\x13\xfeV\xb4\xc2P@{\xc9j\xc0\x86SM\xb8\xe5aJB\xad!\x0e\xb8aEP\x86\xa7\a\x8b\t9J+Vd\xfa\x9b\xbb2\x8c\xbc\xb7\'\xcd\x01\xbb\xeew\xde\x14\xbd \x8a\xb2\xec\xfd\xed\xb7\x10\xe2f\xd6\x83l(\xbfD\xdb\x14Vq\x1a\x9a\x10\"V\xf0f\xf0\x1a\x96\x01j\xa5l@EO7\xbc\\#\x8ct`\n\xfe\x15@u\xaf\x11+7l\xc2\t:\xbe\xb6(\xd5\xf7\x9bM\xfb&\xb7\xfd*1\x94w{u\xa0-A\xab\xcf]b\xae\x8e\xe11\xf1x\xaf=\x8d\r,\x9e=\xf8\x857I\x89r\xa9U(\xe3\x8f([\xa8\xe1[\x9d\x04T\xc2>\x95\xb904\x15\xe9\xa3>C\xbb\xf8\x1c\xf4\x12\xcf\xce2\xd4hU\xb1\xc1\x8b\xe8\x88`;\xb5\x95\x8a\f\xefu\xc6\xa5^I\xa4\x91\xb0\xe9\xb7\x803\x90<\xcc}\xab\x82J*\xb63\xd1\xce\xbb\xb5\x96\xeb\xdc\xf8aO-\xd3Z\x8d\xe0\xf2Wb\x1b&\x1fm%\xc5+\xc4\x9b\x1e\'\x1f\x04J\x8a\x98\x97\x9ecqb\x9f\x01\xee\x85f\x83V\x84\x83\x06mB\xe8\xb3\x15t#wQ\xeb\xb5\xdf\xa6m\t5h\xbc\xb2\xf4\v\xb4\xa2\"g\xb6\x06h\xd7X0', 0xfffffffffffffff2, 0x2) sendmsg$nl_route(r0, 0x0, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="020000000400000004"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xc0, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x15, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20801, 0x0) io_setup(0x501, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000000000)='hy', 0x2, 0x310d, 0x0, 0x0, r3}]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, 0x0, 0x24004804) 21m43.71964648s ago: executing program 33 (id=304): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123d, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf9, 0x0, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000000000000000", 0x0, 0xfe, 0x60000000, 0x98, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", 0x0, 0x0, 0x700}, 0x50) mlockall(0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 20m0.171074093s ago: executing program 34 (id=1030): mkdir(0x0, 0x1ff) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x49, &(0x7f00000000c0)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 18m42.960541505s ago: executing program 35 (id=1569): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@sysvgroups}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") utime(0x0, &(0x7f0000000100)={0x3, 0xff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x501800, 0x1b3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x26, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0x1, 0x0, 0xa}, {0xffffffff, 0x4, 0x711, 0xa}]}) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x4, 0x40, 0x4, 0xd323, 0x400, 0x101, 0x49, 0x6}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000480)={&(0x7f0000002000)={[{&(0x7f0000000080)="ebd85e6f1f28403be0476318c00871ad09157cfb821668eedf144e02453aa3382c07bdea", 0x24}, {&(0x7f0000000400)="b97ff223860a596b69dcb3a45a822afb6f9a13b797646f38d12c685d1fe371ae4c7614c9272aa6ee93c93b06920859704a24f624f29ef67836ab8b1d7a6cdf2f422c4ba7b836f8d1338ae59ba7f09342a0d03e64333a06c7ba5c6c9f0e1b00812fe801b011c23fe3bedc", 0x6a, 0x2}]}, 0x2, 0x3, 0x2}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13m16.172821294s ago: executing program 36 (id=3586): fsopen(&(0x7f0000000040)='fusectl\x00', 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) close(0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) listen(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) 9m48.031630829s ago: executing program 37 (id=4565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) close(0x4) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) listen(r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x294) socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) 6m11.816534807s ago: executing program 38 (id=5897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m34.514286256s ago: executing program 39 (id=6183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/4118, 0x1016}, {&(0x7f00000039c0)=""/4083, 0xff3}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000001980)=""/205, 0xcd}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f0000001a80)=""/219, 0xdb}], 0x7}, 0x22) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 4m55.805452161s ago: executing program 40 (id=6546): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) 4m55.228276426s ago: executing program 41 (id=6559): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="140090e000"/18], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c) 4m54.036940095s ago: executing program 42 (id=6571): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x400, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r4, &(0x7f0000004700)={0x0, 0x0, 0x0}, 0x20048811) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x20140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x802}, 0x0, 0x5, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c00"], 0x28}], 0x1}, 0x14008010) recvmsg(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x120) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0xa, 0x0) recvmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 4m51.808922171s ago: executing program 43 (id=6584): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4008, r0}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8}, 0xc02, 0x1, 0x0, 0x9, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0xb, 0x5, 0x9, 0x40}], 0x0, 0x8d6, 0xffffffffffffffa8, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xec}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4m42.75031055s ago: executing program 5 (id=6696): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xcc}}, 0x24000840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 4m42.73651244s ago: executing program 5 (id=6697): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r2 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x20048000}, 0x4000080) 4m42.616306493s ago: executing program 5 (id=6699): socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4m42.538474015s ago: executing program 5 (id=6701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m42.448536277s ago: executing program 5 (id=6702): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffbfffffffffd, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 4m42.419554138s ago: executing program 5 (id=6704): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100000fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000025bd7000fddbdf25ff01000000000000000000000000000100000000ff000000fe8000000000000000000000000000aaac1e0001000000000000000000000000ac14143d0000000000000000000000004e2100094e2300040a00a064", @ANYRES32=0x0, @ANYRES32=0x0], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4m29.782600756s ago: executing program 44 (id=6666): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x56, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "00000003000000000900050000000010"}}}]}, 0x48}}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) socket$kcm(0xa, 0x3, 0x87) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f00000003c0)}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0x0, 0x0) 4m29.727961008s ago: executing program 2 (id=6783): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) 4m29.64539375s ago: executing program 2 (id=6784): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 4m28.81208779s ago: executing program 2 (id=6785): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x0, 0x5}, 0x20, 0x4, 0x98, 0x0, 0x2, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)}], 0x1}, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1000d, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x9, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 4m28.660338895s ago: executing program 2 (id=6786): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = gettid() sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x20048000}, 0x4000080) 4m28.636382695s ago: executing program 2 (id=6787): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbfffffffffd, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 4m28.581642986s ago: executing program 2 (id=6788): socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036a"], 0xfe33) 4m27.780219517s ago: executing program 45 (id=6690): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 4m27.736339767s ago: executing program 46 (id=6679): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000026000901d2e18548ce711ea4810000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4m27.26815928s ago: executing program 47 (id=6704): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100000fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000025bd7000fddbdf25ff01000000000000000000000000000100000000ff000000fe8000000000000000000000000000aaac1e0001000000000000000000000000ac14143d0000000000000000000000004e2100094e2300040a00a064", @ANYRES32=0x0, @ANYRES32=0x0], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4m22.383284813s ago: executing program 0 (id=6793): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) 4m22.269777776s ago: executing program 0 (id=6794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20048840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 4m21.817404257s ago: executing program 0 (id=6795): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x0, 0x5}, 0x20, 0x4, 0x98, 0x0, 0x2, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)}], 0x1}, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1000d, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x9, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 4m21.592704382s ago: executing program 0 (id=6796): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = gettid() sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x20048000}, 0x4000080) 4m21.524159304s ago: executing program 0 (id=6797): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbfffffffffd, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 4m21.432571866s ago: executing program 0 (id=6798): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x180000000000}, 0x114905, 0x30f4, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1577, 0x3}, {0x3}, {0xe, 0x14}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x80}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x40f4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8851}, 0x44080) sendmsg$nl_route_sched(r0, 0x0, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000340018800800034000010001080003400000000908000340000000070800024000000000080002400000000108000340000003db140004"], 0xac}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[], 0xfdef) 4m13.510002966s ago: executing program 48 (id=6788): socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036a"], 0xfe33) 4m6.401283685s ago: executing program 49 (id=6798): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x180000000000}, 0x114905, 0x30f4, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1577, 0x3}, {0x3}, {0xe, 0x14}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x80}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x40f4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8851}, 0x44080) sendmsg$nl_route_sched(r0, 0x0, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000340018800800034000010001080003400000000908000340000000070800024000000000080002400000000108000340000003db140004"], 0xac}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[], 0xfdef) 3m26.518956709s ago: executing program 8 (id=8013): socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x4240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x48}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 3m25.144112144s ago: executing program 8 (id=8035): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8800000000000004}, 0x0, 0x2, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0) 3m25.044858766s ago: executing program 8 (id=8039): socket$kcm(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x1}, 0x6, 0xff, 0x98, 0x0, 0x1, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x922bac8576bdadce) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000340)=r1, 0x38) 3m24.918229049s ago: executing program 8 (id=8043): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x20}, 0x200040c4) 3m24.872371611s ago: executing program 8 (id=8045): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbfffffffffd, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f"], 0xec}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 3m24.840443162s ago: executing program 8 (id=8047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) 3m9.182652606s ago: executing program 50 (id=8047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) 2m48.896660877s ago: executing program 9 (id=8726): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="e9da798eda9aa6a339ee4616000000", 0xf}, 0x1, 0x0, 0x0, 0x240440d8}, 0x24004014) 2m48.805198699s ago: executing program 9 (id=8729): write(0xffffffffffffffff, &(0x7f0000000000)="303132333a616263643a63ed7b188db386fd353596a17062fe01637654c8", 0x1e) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, &(0x7f0000000000)="040000") 2m48.688123452s ago: executing program 9 (id=8731): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x18b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f00000008c0)={[{}, {@gid}, {@gid}, {}, {}, {@gid={'gid', 0x3d, r1}}, {}, {}], [{@smackfsdef}]}) r2 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7291, 0x3ff}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@polexpire={0xe0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@local, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x9}}}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @mark={0xc, 0x15, {0x0, 0xfffffffd}}]}, 0xe0}}, 0x0) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000b40), 0x60300, 0x0) sendmsg$unix(r8, &(0x7f0000000c80)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r6, r5, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r8, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r10, r2, 0xffffffffffffffff]}}], 0xf8, 0x40}, 0x10) fstat(r10, &(0x7f0000000180)) 2m48.687772882s ago: executing program 9 (id=8733): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) 2m48.671027532s ago: executing program 9 (id=8735): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbfffffffffd, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x20a0, 0x0) 2m48.652518123s ago: executing program 9 (id=8736): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2m33.28009919s ago: executing program 51 (id=8736): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 9.707750705s ago: executing program 6 (id=10830): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000680)='1', 0x1) 8.663722011s ago: executing program 6 (id=10856): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000020000e13daa9decbc2ea000407c4919", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) 6.510905785s ago: executing program 6 (id=10868): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x20c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1d0, 0x1, [@m_tunnel_key={0x1cc, 0xf, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x149, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x54, 0x0, 0x305, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x9, 0x80000001, 0xfffffff2, 0x800]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.983746249s ago: executing program 6 (id=10870): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000020000e13daa9decbc2ea000407c4919", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) 5.014709713s ago: executing program 1 (id=10880): pipe2(&(0x7f0000001cc0), 0x800) socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r0) socket$igmp(0x2, 0x3, 0x2) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x116, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.609244233s ago: executing program 1 (id=10883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 4.139936425s ago: executing program 6 (id=10884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000600)=0xfffffff8, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 3.100243311s ago: executing program 3 (id=10888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000006780)=""/4110, 0x100e}, {&(0x7f0000004a00)=""/209, 0xd1}, {&(0x7f0000004b80)=""/165, 0xa5}, {&(0x7f0000004c40)=""/25, 0x19}, {&(0x7f0000004c80)=""/169, 0xa9}], 0x6}, 0x4}], 0x1, 0x10022, 0x0) 3.028036023s ago: executing program 1 (id=10889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair(0x10, 0x80000, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x5, 0x5, 0x4, 0x0, 0x800000000000000, 0xc21bc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8000000c, 0x1, @perf_bp={0x0, 0xa}, 0x902, 0x2, 0x6, 0x7, 0x81, 0xff, 0x103, 0x0, 0x9, 0x0, 0x40000000000d}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000000677fbacfe1416e000030a83079f03b18000440c05", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.000676454s ago: executing program 4 (id=10890): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6bd10bf24a80bed, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.475043947s ago: executing program 4 (id=10891): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) 2.408705629s ago: executing program 7 (id=10892): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x20c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1d0, 0x1, [@m_tunnel_key={0x1cc, 0xf, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x149, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x48, 0x0, 0x305, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x9, 0x80000001, 0xfffffff2, 0x800]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.379793629s ago: executing program 3 (id=10893): pipe2(&(0x7f0000001cc0), 0x800) socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r0) socket$igmp(0x2, 0x3, 0x2) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x116, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.246464783s ago: executing program 6 (id=10894): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000020000e13daa9decbc2ea000407c4919", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) 2.105063936s ago: executing program 3 (id=10895): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) 2.104699487s ago: executing program 1 (id=10896): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) 2.103946276s ago: executing program 7 (id=10897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 2.029062678s ago: executing program 4 (id=10898): openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2dc, 0x40602, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x20, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x1, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x19328, 0x10000000000, 0xfffffffd, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x99, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0x57) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x2, 0xfc88, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x11, 0xa, 0x300, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 2.015423869s ago: executing program 7 (id=10899): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000600)=0xfffffff8, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 1.303452896s ago: executing program 3 (id=10900): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0xd9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x22}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0xe, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0) write(r0, &(0x7f0000000140)='n', 0x1) 1.290099977s ago: executing program 1 (id=10901): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6bd10bf24a80bed, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.262985497s ago: executing program 1 (id=10902): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000020000e13daa9decbc2ea000407c4919", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) 1.239835918s ago: executing program 4 (id=10903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) sendto$inet6(r1, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8015, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.056917563s ago: executing program 3 (id=10904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000600)=0xfffffff8, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 1.056244333s ago: executing program 7 (id=10905): pipe2(&(0x7f0000001cc0), 0x800) socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r0) socket$igmp(0x2, 0x3, 0x2) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x116, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 269.324722ms ago: executing program 7 (id=10906): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x64c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x106, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4) 224.208814ms ago: executing program 4 (id=10907): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa0240, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x50) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 223.751654ms ago: executing program 4 (id=10908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, 0x0, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) 276.749µs ago: executing program 3 (id=10909): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 7 (id=10910): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) kernel console output (not intermixed with test programs): 0 r/w without journal. Quota mode: writeback. [ 1258.995393][ T3662] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.013571][ T3646] tipc: Disabling bearer [ 1259.027971][ T3671] device-mapper: table: 252:0: zero-length target [ 1259.035041][ T3671] device-mapper: ioctl: error adding target to table [ 1259.044288][T25458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.051780][T25458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.067186][T28379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.067194][ T3674] loop2: detected capacity change from 0 to 7 [ 1259.185377][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8986'. [ 1259.292996][ T3707] loop4: detected capacity change from 0 to 512 [ 1259.340423][ T3707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.357569][ T3707] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.385363][ T3722] loop2: detected capacity change from 0 to 7 [ 1259.473841][ T3420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.490095][T28408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.691018][ T3763] ip6gretap1: entered promiscuous mode [ 1259.767367][ T3420] veth0_vlan: entered promiscuous mode [ 1259.834765][ T3420] veth1_vlan: entered promiscuous mode [ 1259.859331][ T3420] veth0_macvtap: entered promiscuous mode [ 1259.874557][ T3420] veth1_macvtap: entered promiscuous mode [ 1259.906502][ T3420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.929662][ T3420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.992071][T25464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.032544][T25466] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.066861][T25466] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.112688][T25464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.428787][ T3851] ip6gretap1: entered promiscuous mode [ 1260.525086][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1260.525118][ T28] audit: type=1400 audit(1786103762.099:19512): avc: denied { write } for pid=3849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.577606][ T28] audit: type=1400 audit(1786103762.149:19513): avc: denied { write } for pid=3873 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.754971][ T28] audit: type=1400 audit(1786103762.329:19514): avc: denied { write } for pid=3875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.838442][ T28] audit: type=1400 audit(1786103762.389:19515): avc: denied { write } for pid=3893 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.866395][ T3899] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1261.006151][ T28] audit: type=1400 audit(1786103762.579:19516): avc: denied { write } for pid=3901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.042045][ T3924] macsec1: entered allmulticast mode [ 1261.062471][ T3924] veth1_macvtap: entered allmulticast mode [ 1261.073539][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9040'. [ 1261.098269][ T28] audit: type=1400 audit(1786103762.669:19517): avc: denied { write } for pid=3926 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.125266][ T3924] veth1_macvtap (unregistering): left allmulticast mode [ 1261.186644][ T3940] loop2: detected capacity change from 0 to 7 [ 1261.303983][ T28] audit: type=1400 audit(1786103762.879:19518): avc: denied { write } for pid=3934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.379363][ T28] audit: type=1400 audit(1786103762.949:19519): avc: denied { write } for pid=3960 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.556972][ T28] audit: type=1400 audit(1786103763.129:19520): avc: denied { write } for pid=3965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.600416][ T3984] loop1: detected capacity change from 0 to 512 [ 1261.609411][ T28] audit: type=1400 audit(1786103763.179:19521): avc: denied { write } for pid=3981 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.639510][ T3984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1261.661876][ T3984] EXT4-fs (loop1): 1 truncate cleaned up [ 1261.668721][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.734791][T30257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.915977][ T4012] loop2: detected capacity change from 0 to 7 [ 1262.548428][ T4046] syz.6.9065 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 1262.563775][ T4046] CPU: 1 UID: 0 PID: 4046 Comm: syz.6.9065 Not tainted syzkaller #0 PREEMPT(lazy) [ 1262.563806][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1262.563873][ T4046] Call Trace: [ 1262.563884][ T4046] [ 1262.563892][ T4046] __dump_stack+0x1d/0x30 [ 1262.563960][ T4046] dump_stack_lvl+0x95/0xd0 [ 1262.564098][ T4046] dump_stack+0x15/0x1b [ 1262.564119][ T4046] dump_header+0x80/0x240 [ 1262.564162][ T4046] oom_kill_process+0x295/0x350 [ 1262.564192][ T4046] out_of_memory+0x981/0xbc0 [ 1262.564221][ T4046] try_charge_memcg+0x621/0xa00 [ 1262.564237][ T4046] ? __css_rstat_updated+0xbb/0x280 [ 1262.564268][ T4046] __memcg_kmem_charge_page+0x199/0x3a0 [ 1262.564294][ T4046] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1262.564328][ T4046] alloc_pages_mpol+0xa9/0x1d0 [ 1262.564353][ T4046] alloc_pages_noprof+0x8f/0x140 [ 1262.564389][ T4046] pte_alloc_one+0x1c/0xc0 [ 1262.564426][ T4046] __pte_alloc+0x32/0x2a0 [ 1262.564447][ T4046] ? percpu_counter_add_batch+0x117/0x120 [ 1262.564478][ T4046] copy_page_range+0x2d0f/0x3400 [ 1262.564512][ T4046] dup_mmap+0x870/0x10b0 [ 1262.564537][ T4046] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 1262.564676][ T4046] ? __list_add_valid_or_report+0x38/0xe0 [ 1262.564702][ T4046] copy_mm+0xfa/0x340 [ 1262.564724][ T4046] copy_process+0x108c/0x2310 [ 1262.564750][ T4046] kernel_clone+0x1c0/0x5f0 [ 1262.564771][ T4046] ? do_futex+0x3f8/0x460 [ 1262.564795][ T4046] __x64_sys_clone+0x143/0x180 [ 1262.564819][ T4046] x64_sys_call+0x1222/0x3020 [ 1262.564838][ T4046] do_syscall_64+0x136/0x3c0 [ 1262.564919][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.564950][ T4046] RIP: 0033:0x7f4db9cae0d9 [ 1262.564965][ T4046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.564983][ T4046] RSP: 002b:00007f4db8706fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1262.565001][ T4046] RAX: ffffffffffffffda RBX: 00007f4db9f35fa0 RCX: 00007f4db9cae0d9 [ 1262.565015][ T4046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000 [ 1262.565027][ T4046] RBP: 00007f4db9d45024 R08: 0000000000000000 R09: 0000000000000000 [ 1262.565041][ T4046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1262.565052][ T4046] R13: 00007f4db9f36038 R14: 00007f4db9f35fa0 R15: 00007fffee784048 [ 1262.565072][ T4046] [ 1262.565260][ T4046] memory: usage 96kB, limit 96kB, failcnt 41 [ 1263.016861][ T4046] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1263.031868][ T4067] loop1: detected capacity change from 0 to 512 [ 1263.040453][ T4046] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1263.050246][ T4046] Memory cgroup stats for /syz6/test: [ 1263.050366][ T4046] cache 0 [ 1263.060723][ T4046] rss 0 [ 1263.063961][ T4046] shmem 0 [ 1263.066945][ T4067] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.9071: inode has both inline data and extents flags [ 1263.080606][ T4067] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1263.080640][ T4046] mapped_file 0 [ 1263.093599][ T4046] dirty 0 [ 1263.096533][ T4046] writeback 0 [ 1263.096908][ T4067] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.9071: couldn't read orphan inode 15 (err -117) [ 1263.099919][ T4046] workingset_refault_anon 0 [ 1263.099929][ T4046] workingset_refault_file 0 [ 1263.099937][ T4046] swap 0 [ 1263.099943][ T4046] swapcached 0 [ 1263.099951][ T4046] pgpgin 0 [ 1263.113294][ T4067] loop1: lost filesystem error report for type 5 error -117 [ 1263.117613][ T4046] pgpgout 0 [ 1263.117626][ T4046] pgfault 0 [ 1263.117632][ T4046] pgmajfault 0 [ 1263.117639][ T4046] inactive_anon 0 [ 1263.117645][ T4046] active_anon 0 [ 1263.117652][ T4046] inactive_file 0 [ 1263.117659][ T4046] active_file 0 [ 1263.122860][ T4067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.125076][ T4046] unevictable 0 [ 1263.125085][ T4046] hierarchical_memory_limit 98304 [ 1263.125093][ T4046] hierarchical_memsw_limit 9223372036854771712 [ 1263.125101][ T4046] total_cache 0 [ 1263.125108][ T4046] total_rss 0 [ 1263.125114][ T4046] total_shmem 0 [ 1263.125121][ T4046] total_mapped_file 0 [ 1263.125128][ T4046] total_dirty 0 [ 1263.225943][ T4046] total_writeback 0 [ 1263.229878][ T4046] total_workingset_refault_anon 0 [ 1263.235290][ T4046] total_workingset_refault_file 0 [ 1263.240542][ T4046] total_swap 0 [ 1263.244874][ T4046] total_swapcached 0 [ 1263.248917][ T4046] total_pgpgin 0 [ 1263.252752][ T4046] total_pgpgout 0 [ 1263.256665][ T4046] total_pgfault 0 [ 1263.260697][ T4046] total_pgmajfault 0 [ 1263.270286][T30257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.284545][ T4046] total_inactive_anon 0 [ 1263.288928][ T4046] total_active_anon 0 [ 1263.293582][ T4046] total_inactive_file 0 [ 1263.308370][ T4076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.333756][ T4076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.340155][ T4046] total_active_file 0 [ 1263.361277][ T4046] total_unevictable 0 [ 1263.366456][ T4046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.9065,pid=4042,uid=0 [ 1263.379656][ T4087] loop2: detected capacity change from 0 to 7 [ 1263.383825][ T4046] Memory cgroup out of memory: Killed process 4042 (syz.6.9065) total-vm:93984kB, anon-rss:1408kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1263.869896][ T4120] loop7: detected capacity change from 0 to 128 [ 1263.881493][ T4120] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1263.894771][ T4120] ext4 filesystem being mounted at /490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.937722][T28379] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1264.256891][ T4147] loop2: detected capacity change from 0 to 7 [ 1264.635391][ T4162] loop6: detected capacity change from 0 to 512 [ 1264.871411][ T4176] loop2: detected capacity change from 0 to 7 [ 1265.703859][ T4204] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9126'. [ 1265.760945][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9126'. [ 1265.819270][ T4215] sg_write: data in/out 200860/136 bytes for SCSI command 0x0-- guessing data in; [ 1265.819270][ T4215] program syz.7.9131 not setting count and/or reply_len properly [ 1266.973768][ T4255] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(855638020.1667391802.3982703204), cmd(13) [ 1267.093267][ T4227] loop4: detected capacity change from 0 to 32768 [ 1267.317543][ T4274] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9157'. [ 1267.779392][ T4286] loop6: detected capacity change from 0 to 32768 [ 1267.853240][ T4308] netlink: 17271 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1269.219276][ T4355] loop2: detected capacity change from 0 to 7 [ 1269.351487][ T4363] netlink: 17271 bytes leftover after parsing attributes in process `syz.4.9190'. [ 1270.593283][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1270.593306][ T28] audit: type=1400 audit(1786103772.149:19544): avc: denied { write } for pid=4394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1270.659671][ T28] audit: type=1400 audit(1786103772.229:19545): avc: denied { write } for pid=4416 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1270.685039][ T4413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9205'. [ 1270.694401][ T4413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9205'. [ 1270.735970][ T4396] loop3: detected capacity change from 0 to 32768 [ 1270.769663][ T4420] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9207'. [ 1270.780385][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9207'. [ 1270.938585][ T4435] loop2: detected capacity change from 0 to 7 [ 1271.075716][ T4446] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9217'. [ 1271.085196][ T4446] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9217'. [ 1271.222085][ T4455] netlink: 188 bytes leftover after parsing attributes in process `syz.7.9220'. [ 1271.369131][ T4466] syzkaller0: entered promiscuous mode [ 1271.607661][ T4466] syzkaller0: entered allmulticast mode [ 1271.636252][ T4469] tipc: Started in network mode [ 1271.646573][ T4474] loop2: detected capacity change from 0 to 7 [ 1271.673295][ T4469] tipc: Node identity 0a3e13aa319e, cluster identity 4711 [ 1271.748122][ T4469] tipc: Enabled bearer , priority 0 [ 1271.835011][ T4465] tipc: Resetting bearer [ 1271.849944][ T4465] tipc: Disabling bearer [ 1271.876182][ T4450] loop6: detected capacity change from 0 to 32768 [ 1272.193116][ T28] audit: type=1400 audit(1786103773.769:19546): avc: denied { ioctl } for pid=4503 comm="syz.7.9238" path="socket:[152935]" dev="sockfs" ino=152935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1272.268426][ T28] audit: type=1400 audit(1786103773.769:19547): avc: denied { bind } for pid=4503 comm="syz.7.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1272.318841][ T28] audit: type=1400 audit(1786103773.769:19548): avc: denied { connect } for pid=4503 comm="syz.7.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1272.440053][ T28] audit: type=1400 audit(1786103773.769:19549): avc: denied { write } for pid=4503 comm="syz.7.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1272.467581][ T4521] tipc: Enabling of bearer rejected, failed to enable media [ 1272.527893][ T4511] loop1: detected capacity change from 0 to 32768 [ 1272.627749][ T28] audit: type=1400 audit(1786103774.199:19550): avc: denied { mount } for pid=4539 comm="syz.7.9250" name="/" dev="rpc_pipefs" ino=153879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1272.672515][ T28] audit: type=1400 audit(1786103774.249:19551): avc: denied { unmount } for pid=28379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1272.866269][ T4553] __nla_validate_parse: 4 callbacks suppressed [ 1272.866359][ T4553] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9256'. [ 1273.113975][ T4578] loop6: detected capacity change from 0 to 512 [ 1273.157109][ T4578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.227836][ T4591] netlink: 92 bytes leftover after parsing attributes in process `syz.7.9269'. [ 1273.237921][ T4578] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.259815][ T28] audit: type=1400 audit(1786103774.829:19552): avc: denied { write } for pid=4576 comm="syz.6.9267" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1273.284587][ T28] audit: type=1400 audit(1786103774.829:19553): avc: denied { write } for pid=4576 comm="syz.6.9267" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1273.368337][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.434876][ T4612] loop3: detected capacity change from 0 to 512 [ 1273.544030][ T4623] sctp: [Deprecated]: syz.4.9279 (pid 4623) Use of int in max_burst socket option deprecated. [ 1273.544030][ T4623] Use struct sctp_assoc_value instead [ 1274.287326][ T4639] netlink: 92 bytes leftover after parsing attributes in process `syz.7.9284'. [ 1274.337377][ T4644] syzkaller0: entered promiscuous mode [ 1274.343737][ T4644] syzkaller0: entered allmulticast mode [ 1274.352203][ T4644] tipc: Enabled bearer , priority 0 [ 1274.360067][ T4643] tipc: Resetting bearer [ 1274.369021][ T4643] tipc: Disabling bearer [ 1274.515748][ T4661] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9292'. [ 1274.556295][ T4666] loop2: detected capacity change from 0 to 7 [ 1274.571551][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9292'. [ 1275.003872][ T4721] netlink: 188 bytes leftover after parsing attributes in process `syz.7.9310'. [ 1275.014037][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9310'. [ 1275.099600][ T4730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9313'. [ 1275.109581][ T4730] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9313'. [ 1275.162216][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9315'. [ 1275.332370][ T4764] loop6: detected capacity change from 0 to 1764 [ 1275.369869][ T4767] syzkaller1: entered promiscuous mode [ 1275.376108][ T4767] syzkaller1: entered allmulticast mode [ 1275.473920][ T4777] sg_write: data in/out 4252/136 bytes for SCSI command 0x0-- guessing data in; [ 1275.473920][ T4777] program syz.4.9332 not setting count and/or reply_len properly [ 1275.618417][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1275.618433][ T28] audit: type=1400 audit(1786103777.189:19561): avc: denied { write } for pid=4784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.683562][ T28] audit: type=1400 audit(1786103777.249:19562): avc: denied { write } for pid=4801 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.006953][ T4833] syzkaller0: entered promiscuous mode [ 1277.034766][ T4833] syzkaller0: entered allmulticast mode [ 1277.059450][ T4833] tipc: Enabled bearer , priority 0 [ 1277.072638][ T4832] tipc: Resetting bearer [ 1277.088147][ T4832] tipc: Disabling bearer [ 1277.293335][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.311165][ T28] audit: type=1400 audit(1786103778.879:19563): avc: denied { write } for pid=4855 comm="syz.7.9357" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1277.368618][ T4858] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(65560.0.4294901760), cmd(13) [ 1277.543237][ T4870] sctp: [Deprecated]: syz.1.9363 (pid 4870) Use of int in max_burst socket option deprecated. [ 1277.543237][ T4870] Use struct sctp_assoc_value instead [ 1277.967790][ T4890] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(65540.0.4294901760), cmd(13) [ 1279.016305][ T4917] loop3: detected capacity change from 0 to 128 [ 1279.086702][ T4917] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 1279.114010][ T4917] FAT-fs (loop3): Filesystem has been set read-only [ 1279.321749][ T28] audit: type=1400 audit(1786103780.889:19564): avc: denied { connect } for pid=4938 comm="syz.7.9387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1279.503360][ T4943] __nla_validate_parse: 7 callbacks suppressed [ 1279.503377][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9389'. [ 1279.711097][ T4957] loop4: detected capacity change from 0 to 512 [ 1280.331313][ T28] audit: type=1400 audit(1786103781.899:19565): avc: denied { write } for pid=4913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1280.512037][ T28] audit: type=1400 audit(1786103782.079:19566): avc: denied { write } for pid=4972 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1280.555131][T28377] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 1280.565375][ T4975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9402'. [ 1280.583909][ T3019] veth0_vlan: left promiscuous mode [ 1280.597855][ T4975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9402'. [ 1280.614496][ T23] veth0_vlan: entered promiscuous mode [ 1280.644872][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9404'. [ 1280.853823][ T28] audit: type=1400 audit(1786103782.359:19567): avc: denied { write } for pid=5000 comm="syz.7.9410" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1280.868907][ T5013] loop3: detected capacity change from 0 to 512 [ 1280.883602][ T28] audit: type=1400 audit(1786103782.379:19568): avc: denied { map } for pid=5006 comm="syz.6.9411" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1280.888662][ T5012] tipc: Enabled bearer , priority 0 [ 1281.076499][ T5011] tipc: Disabling bearer [ 1281.974228][ T28] audit: type=1400 audit(1786103783.539:19569): avc: denied { write } for pid=4990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.689562][ T28] audit: type=1400 audit(1786103783.819:19570): avc: denied { write } for pid=5027 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.781813][ T5035] device-mapper: ioctl: name not supplied when creating device [ 1282.818425][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9419'. [ 1282.944427][ T28] audit: type=1400 audit(1786103784.509:19571): avc: denied { write } for pid=5048 comm="syz.1.9424" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1283.096897][ T5071] device-mapper: ioctl: name not supplied when creating device [ 1283.134409][ T5074] loop1: detected capacity change from 0 to 764 [ 1283.234301][ T28] audit: type=1400 audit(1786103784.779:19572): avc: denied { write } for pid=5082 comm="syz.1.9439" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1283.282063][ T28] audit: type=1400 audit(1786103784.849:19573): avc: denied { bind } for pid=5078 comm="syz.7.9437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1283.696373][ T5114] loop6: detected capacity change from 0 to 32768 [ 1283.831687][ T5118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9450'. [ 1283.842989][ T5118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9450'. [ 1283.896157][ T5123] syzkaller0: entered promiscuous mode [ 1283.901735][ T5123] syzkaller0: entered allmulticast mode [ 1283.919989][ T5125] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9453'. [ 1284.008437][ T5089] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1284.433978][ T5150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9463'. [ 1284.454311][ T28] audit: type=1400 audit(1786103786.019:19574): avc: denied { write } for pid=5157 comm="syz.7.9465" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1284.466112][ T5150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9463'. [ 1284.506644][ T5143] loop6: detected capacity change from 0 to 32768 [ 1284.517685][ T5165] __nla_validate_parse: 1 callbacks suppressed [ 1284.517755][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9466'. [ 1284.563387][ T5169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1284.691693][ T5181] syz.7.9473(5181): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1284.708329][ T5179] syzkaller0: entered promiscuous mode [ 1284.725567][ T5179] syzkaller0: entered allmulticast mode [ 1284.736719][ T5186] loop1: detected capacity change from 0 to 512 [ 1284.787031][ T5186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1284.896696][T30257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.976365][ T5205] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9484'. [ 1285.001987][ T5205] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9484'. [ 1285.036308][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.052952][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.200127][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.243074][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.633618][ T23] IPVS: starting estimator thread 0... [ 1285.692110][ T28] audit: type=1400 audit(1786103787.259:19575): avc: denied { read } for pid=5240 comm="syz.6.9497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1285.742016][ T5239] IPVS: using max 1968 ests per chain, 98400 per kthread [ 1286.706294][ T28] audit: type=1400 audit(1786103788.279:19576): avc: denied { write } for pid=5300 comm="syz.6.9509" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1287.051452][ T5337] macsec1: entered allmulticast mode [ 1287.056942][ T5337] veth1_macvtap: entered allmulticast mode [ 1287.067949][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9512'. [ 1287.217131][ T5337] veth1_macvtap (unregistering): left allmulticast mode [ 1287.619661][ T5361] device-mapper: ioctl: name not supplied when creating device [ 1287.893967][ T28] audit: type=1400 audit(1786103789.469:19577): avc: denied { write } for pid=5365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.981469][ T28] audit: type=1400 audit(1786103789.509:19578): avc: denied { write } for pid=5390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.069860][ T5408] syzkaller0: entered promiscuous mode [ 1288.082041][ T5408] syzkaller0: entered allmulticast mode [ 1288.089505][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1288.285123][ T28] audit: type=1400 audit(1786103789.859:19579): avc: denied { write } for pid=5400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.559027][ T28] audit: type=1400 audit(1786103789.979:19580): avc: denied { create } for pid=5424 comm="syz.6.9528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1289.692133][ T28] audit: type=1400 audit(1786103789.979:19581): avc: denied { bind } for pid=5424 comm="syz.6.9528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1289.877545][ T5447] macsec1: entered allmulticast mode [ 1289.883243][ T5447] veth1_macvtap: entered allmulticast mode [ 1289.894416][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9532'. [ 1289.990908][ T5447] veth1_macvtap (unregistering): left allmulticast mode [ 1290.008909][ T28] audit: type=1400 audit(1786103789.999:19582): avc: denied { write } for pid=5424 comm="syz.6.9528" path="socket:[155261]" dev="sockfs" ino=155261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1290.041070][ T28] audit: type=1400 audit(1786103790.199:19583): avc: denied { write } for pid=5428 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.121708][ T5457] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9537'. [ 1290.218280][ T28] audit: type=1400 audit(1786103791.789:19584): avc: denied { write } for pid=5444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.300167][ T28] audit: type=1400 audit(1786103791.809:19585): avc: denied { write } for pid=5471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.730092][ T5488] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1291.773768][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9555'. [ 1291.801710][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9555'. [ 1291.893209][T25449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.916218][T25449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.978365][T25449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.993720][T25449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.024473][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1292.024490][ T28] audit: type=1400 audit(1786103793.599:19596): avc: denied { write } for pid=5546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.095158][T25449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.124805][T25449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.134074][ T28] audit: type=1400 audit(1786103793.689:19597): avc: denied { write } for pid=5571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.215845][ T5583] netlink: 92 bytes leftover after parsing attributes in process `syz.6.9564'. [ 1292.249253][T25449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.262176][T25449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.307835][ T28] audit: type=1400 audit(1786103793.879:19598): avc: denied { write } for pid=5578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.344725][ T28] audit: type=1400 audit(1786103793.899:19599): avc: denied { write } for pid=5601 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.381032][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9569'. [ 1292.392678][ T5599] syzkaller0: entered promiscuous mode [ 1292.399243][ T5599] syzkaller0: entered allmulticast mode [ 1292.413826][ T5530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.421517][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.429286][ T5530] bridge_slave_0: entered allmulticast mode [ 1292.436351][ T5530] bridge_slave_0: entered promiscuous mode [ 1292.444180][ T5599] tipc: Enabled bearer , priority 0 [ 1292.460519][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.471771][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.481158][ T5530] bridge_slave_1: entered allmulticast mode [ 1292.483866][ T28] audit: type=1400 audit(1786103794.059:19600): avc: denied { write } for pid=5608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.489603][ T5530] bridge_slave_1: entered promiscuous mode [ 1292.522964][ T5619] device-mapper: table: 252:1: zero-length target [ 1292.532213][ T5530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.536820][ T5619] device-mapper: ioctl: error adding target to table [ 1292.549682][ T5598] tipc: Resetting bearer [ 1292.556734][ T28] audit: type=1400 audit(1786103794.119:19601): avc: denied { write } for pid=5622 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.594072][ T5598] tipc: Disabling bearer [ 1292.620842][ T5530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.662741][ T5530] team0: Port device team_slave_0 added [ 1292.675329][ T5530] team0: Port device team_slave_1 added [ 1292.683712][ T28] audit: type=1400 audit(1786103794.249:19602): avc: denied { write } for pid=5633 comm="syz.1.9572" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1292.747926][ T28] audit: type=1400 audit(1786103794.319:19603): avc: denied { write } for pid=5625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.828410][ T28] audit: type=1400 audit(1786103794.399:19604): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.910107][T25449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.921658][T25449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.934728][T25449] bond0 (unregistering): Released all slaves [ 1293.004210][T25449] tipc: Left network mode [ 1293.046062][T25449] hsr_slave_0: left promiscuous mode [ 1293.064700][T25449] hsr_slave_1: left promiscuous mode [ 1293.107863][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9575'. [ 1293.124496][T25449] veth1_vlan: left promiscuous mode [ 1293.167950][T25449] veth0_vlan: left promiscuous mode [ 1293.479071][ T28] audit: type=1400 audit(1786103795.049:19605): avc: denied { bind } for pid=5666 comm="syz.1.9579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1293.526459][T25449] team0 (unregistering): Port device team_slave_1 removed [ 1293.540724][T25449] team0 (unregistering): Port device team_slave_0 removed [ 1293.608255][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.634879][ T5672] device-mapper: table: 252:1: zero-length target [ 1293.636625][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.650570][ T5672] device-mapper: ioctl: error adding target to table [ 1293.703822][ T5530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.755926][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.763646][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.791568][ T5530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.827756][ T5689] loop1: detected capacity change from 0 to 512 [ 1293.840596][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1293.958500][ T5530] hsr_slave_0: entered promiscuous mode [ 1293.965111][ T5530] hsr_slave_1: entered promiscuous mode [ 1293.971006][ T5530] debugfs: 'hsr0' already exists in 'hsr' [ 1293.977056][ T5530] Cannot create hsr debugfs directory [ 1294.141397][ T5705] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1294.184166][T25449] IPVS: stop unused estimator thread 0... [ 1294.224821][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1294.318914][ T5732] device-mapper: table: 252:1: zero-length target [ 1294.340578][ T5732] device-mapper: ioctl: error adding target to table [ 1294.398426][ T5530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1294.448327][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1294.463875][ T5748] loop1: detected capacity change from 0 to 512 [ 1294.476722][ T5530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1294.513559][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1294.542728][ T5530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1294.579154][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1294.600385][ T5530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1294.627854][ T5530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.769106][ T5530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.907990][ T5797] device-mapper: table: 252:1: thi: unknown target type [ 1294.931146][ T5797] device-mapper: ioctl: error adding target to table [ 1295.014504][ T5800] loop4: detected capacity change from 0 to 512 [ 1295.067430][ T5530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.095468][T25458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.102579][T25458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.120056][T25449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.127394][T25449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.154106][ T5811] loop6: detected capacity change from 0 to 512 [ 1295.157472][ T5808] syzkaller0: entered promiscuous mode [ 1295.162646][ T5811] EXT4-fs: test_dummy_encryption option not supported [ 1295.181850][ T5808] syzkaller0: entered allmulticast mode [ 1295.209270][ T5808] tipc: Enabled bearer , priority 0 [ 1295.276921][ T5819] device-mapper: table: 252:1: : unknown target type [ 1295.284008][ T5819] device-mapper: ioctl: error adding target to table [ 1295.386386][ T5807] tipc: Resetting bearer [ 1295.435709][ T5827] loop6: detected capacity change from 0 to 512 [ 1295.453006][ T5807] tipc: Disabling bearer [ 1295.501107][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9618'. [ 1295.510885][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9618'. [ 1295.675094][ T5860] sctp: [Deprecated]: syz.1.9626 (pid 5860) Use of int in max_burst socket option deprecated. [ 1295.675094][ T5860] Use struct sctp_assoc_value instead [ 1295.697260][ T5862] device-mapper: table: 252:1: zero-length target [ 1295.719539][ T5862] device-mapper: ioctl: error adding target to table [ 1295.765143][ T5875] loop1: detected capacity change from 0 to 512 [ 1295.782416][ T5530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.902999][ T5530] veth0_vlan: entered promiscuous mode [ 1295.911549][ T5530] veth1_vlan: entered promiscuous mode [ 1295.942241][ T5530] veth0_macvtap: entered promiscuous mode [ 1295.958780][ T5530] veth1_macvtap: entered promiscuous mode [ 1295.975276][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.986154][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.998043][T25464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.009706][T25464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.021943][T25458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.522405][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.669640][ T5979] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9632'. [ 1296.736764][ T5979] syzkaller1: entered promiscuous mode [ 1296.755217][ T5979] syzkaller1: entered allmulticast mode [ 1296.846719][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9635'. [ 1296.867676][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9635'. [ 1297.065135][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9640'. [ 1297.582448][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1297.582464][ T28] audit: type=1400 audit(1786103799.159:19621): avc: denied { write } for pid=6035 comm="syz.6.9643" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1297.674536][ T28] audit: type=1400 audit(1786103799.249:19622): avc: denied { write } for pid=6008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.730036][ T28] audit: type=1400 audit(1786103799.299:19623): avc: denied { write } for pid=6049 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.846088][ T6052] tipc: Enabling of bearer rejected, failed to enable media [ 1297.969671][ T6060] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9647'. [ 1298.073823][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.081484][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.107322][ T6002] bridge_slave_0: entered allmulticast mode [ 1298.134587][ T6002] bridge_slave_0: entered promiscuous mode [ 1298.164212][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.175679][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.184554][ T6002] bridge_slave_1: entered allmulticast mode [ 1298.193342][ T6002] bridge_slave_1: entered promiscuous mode [ 1298.286167][ T6077] loop1: detected capacity change from 0 to 256 [ 1298.329122][ T6002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.434129][ T6002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.476813][ T6002] team0: Port device team_slave_0 added [ 1298.484695][ T6002] team0: Port device team_slave_1 added [ 1298.499353][ T6002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.507037][ T6002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.537889][ T6002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.554105][ T6002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.562912][ T6002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.591525][ T6002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.614646][ T28] audit: type=1400 audit(1786103800.189:19624): avc: denied { write } for pid=6078 comm="syz.1.9651" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1298.641730][ T6002] hsr_slave_0: entered promiscuous mode [ 1298.651041][ T6002] hsr_slave_1: entered promiscuous mode [ 1298.657525][ T6002] debugfs: 'hsr0' already exists in 'hsr' [ 1298.663799][ T6002] Cannot create hsr debugfs directory [ 1298.680437][ T28] audit: type=1400 audit(1786103800.249:19625): avc: denied { write } for pid=6082 comm="syz.1.9653" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1298.786637][ T6002] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.811862][ T6090] loop4: detected capacity change from 0 to 512 [ 1298.849017][ T6089] tipc: Enabling of bearer rejected, failed to enable media [ 1298.975594][ T6002] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.007925][ T6002] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.111566][ T6002] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.203607][ T28] audit: type=1400 audit(1786103800.779:19626): avc: denied { write } for pid=6109 comm="syz.6.9661" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1299.218186][ T6002] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1299.263577][ T6002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1299.266427][ T6114] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9662'. [ 1299.284276][ T6002] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1299.298650][ T6002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1299.319810][ T6002] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1299.337593][ T6002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1299.363505][ T6002] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1299.385644][ T6002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1299.455302][ T6002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.467452][ T6002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.479189][T25462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.486772][T25462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.508300][ T28] audit: type=1400 audit(1786103801.079:19627): avc: denied { write } for pid=6124 comm="syz.6.9663" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1299.553146][T25464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.560335][T25464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.789463][ T6002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.959845][ T28] audit: type=1400 audit(1786103801.529:19628): avc: denied { write } for pid=6160 comm="syz.4.9671" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1299.985285][ T6159] tipc: Enabled bearer , priority 0 [ 1299.993754][ T6159] tipc: Resetting bearer [ 1300.012925][ T6157] tipc: Disabling bearer [ 1300.056690][ T6002] veth0_vlan: entered promiscuous mode [ 1300.069659][ T6002] veth1_vlan: entered promiscuous mode [ 1300.094608][ T28] audit: type=1400 audit(1786103801.669:19629): avc: denied { write } for pid=6168 comm="syz.1.9673" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1300.140932][ T6002] veth0_macvtap: entered promiscuous mode [ 1300.151055][ T6002] veth1_macvtap: entered promiscuous mode [ 1300.175934][ T6002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.208905][ T6002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.228543][T25462] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.239785][T25454] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.250477][T25454] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.293299][T25464] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.305608][ T6177] tipc: Enabling of bearer rejected, failed to enable media [ 1300.359958][ T6188] loop1: detected capacity change from 0 to 512 [ 1300.570520][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.640211][ T6218] loop7: detected capacity change from 0 to 128 [ 1300.652831][ T6218] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1300.668114][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.713761][T25462] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1300.729668][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.901769][ T6228] loop6: detected capacity change from 0 to 164 [ 1300.922744][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.405093][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.450825][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.470740][ T6195] bridge_slave_0: entered allmulticast mode [ 1301.480129][ T6195] bridge_slave_0: entered promiscuous mode [ 1301.496280][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.505617][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.515839][ T6195] bridge_slave_1: entered allmulticast mode [ 1301.524270][ T6195] bridge_slave_1: entered promiscuous mode [ 1301.565628][ T6195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.775637][ T49] bridge_slave_1: left allmulticast mode [ 1301.809782][ T49] bridge_slave_1: left promiscuous mode [ 1301.836107][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.847319][ T49] bridge_slave_0: left allmulticast mode [ 1301.853705][ T49] bridge_slave_0: left promiscuous mode [ 1301.860238][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.995495][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.023764][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.050470][ T49] bond0 (unregistering): Released all slaves [ 1302.077092][ T6195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.124366][ T6195] team0: Port device team_slave_0 added [ 1302.137357][ T6195] team0: Port device team_slave_1 added [ 1302.187794][ T49] hsr_slave_0: left promiscuous mode [ 1302.204714][ T49] hsr_slave_1: left promiscuous mode [ 1302.218668][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.243370][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.255762][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.278572][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.315030][ T49] veth1_vlan: left promiscuous mode [ 1302.332116][ T49] veth0_vlan: left promiscuous mode [ 1302.506860][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1302.544536][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1302.668468][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.699849][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.775121][ T6195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.833882][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.859497][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.936597][ T6283] loop3: detected capacity change from 0 to 512 [ 1302.958847][ T6195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.974476][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9704'. [ 1302.987678][ T28] audit: type=1400 audit(1786103804.559:19630): avc: denied { write } for pid=6276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.993456][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9704'. [ 1303.091633][ T6195] hsr_slave_0: entered promiscuous mode [ 1303.105982][ T6195] hsr_slave_1: entered promiscuous mode [ 1303.150410][ T6195] debugfs: 'hsr0' already exists in 'hsr' [ 1303.157201][ T6195] Cannot create hsr debugfs directory [ 1303.161740][ T28] audit: type=1400 audit(1786103804.729:19631): avc: denied { write } for pid=6295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.286250][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1303.611331][ T28] audit: type=1400 audit(1786103805.179:19632): avc: denied { write } for pid=6302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.657016][ T6322] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9710'. [ 1303.719769][ T28] audit: type=1400 audit(1786103805.279:19633): avc: denied { write } for pid=6323 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.824245][ T6336] loop1: detected capacity change from 0 to 128 [ 1303.867796][ T6337] loop7: detected capacity change from 0 to 512 [ 1304.508589][ T6336] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1304.542833][ T6336] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.575681][ T28] audit: type=1400 audit(1786103806.149:19634): avc: denied { write } for pid=6339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.660659][ T28] audit: type=1400 audit(1786103806.199:19635): avc: denied { write } for pid=6334 comm="syz.1.9718" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1304.797584][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9721'. [ 1304.801693][ T28] audit: type=1400 audit(1786103806.199:19636): avc: denied { setattr } for pid=6334 comm="syz.1.9718" path="/572/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1304.831693][ T28] audit: type=1400 audit(1786103806.329:19637): avc: denied { write } for pid=6362 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.883821][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9721'. [ 1304.892689][ T6368] device-mapper: table: 252:1: : unknown target type [ 1304.910335][ T6368] device-mapper: ioctl: error adding target to table [ 1304.913371][T30257] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1304.971650][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9727'. [ 1305.009058][ T6195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1305.044754][ T6195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1305.062452][ T6195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1305.098379][ T6195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1305.114617][ T6195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1305.135583][ T28] audit: type=1400 audit(1786103806.709:19638): avc: denied { write } for pid=6375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1305.163268][ T6195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1305.183661][ T6195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1305.213780][ T28] audit: type=1400 audit(1786103806.749:19639): avc: denied { create } for pid=6403 comm="syz.6.9734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1305.277712][ T6195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1305.413092][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.438383][ T6195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.448558][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.468315][ T6195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.479564][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.486949][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.499912][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.507487][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.721847][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.766598][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9742'. [ 1305.792215][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9742'. [ 1306.002713][ T6195] veth0_vlan: entered promiscuous mode [ 1306.035501][ T6519] loop6: detected capacity change from 0 to 512 [ 1306.052257][ T6195] veth1_vlan: entered promiscuous mode [ 1306.091034][ T6519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.102291][ T6195] veth0_macvtap: entered promiscuous mode [ 1306.124800][ T6195] veth1_macvtap: entered promiscuous mode [ 1306.150141][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.160112][ T6519] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1306.161605][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.214352][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9748'. [ 1306.214831][ T6519] EXT4-fs error (device loop6): ext4_empty_dir:3082: inode #12: comm syz.6.9746: invalid size [ 1306.252249][T25452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.269529][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.281171][T25452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.316085][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.342801][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.350277][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.383583][T25462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.392442][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9760'. [ 1307.826656][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.873276][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.040088][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1308.040102][ T28] audit: type=1400 audit(1786103809.609:19667): avc: denied { write } for pid=6613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.131977][ T28] audit: type=1400 audit(1786103809.699:19668): avc: denied { write } for pid=6637 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.912176][ T28] audit: type=1400 audit(1786103810.489:19669): avc: denied { write } for pid=6644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1309.078568][ T28] audit: type=1400 audit(1786103810.649:19670): avc: denied { write } for pid=6664 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1309.266422][ T68] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.325231][ T68] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.389136][ T68] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.450254][ T68] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.524749][ T68] bridge_slave_1: left allmulticast mode [ 1309.530528][ T68] bridge_slave_1: left promiscuous mode [ 1309.537123][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.555086][ T68] bridge_slave_0: left allmulticast mode [ 1309.560883][ T68] bridge_slave_0: left promiscuous mode [ 1309.571658][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.763921][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.783407][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.798626][ T68] bond0 (unregistering): Released all slaves [ 1309.999834][ T68] hsr_slave_0: left promiscuous mode [ 1310.163516][ T68] hsr_slave_1: left promiscuous mode [ 1310.257420][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.349148][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.442730][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.540703][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.625516][ T28] audit: type=1400 audit(1786103812.199:19671): avc: denied { write } for pid=6680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.663564][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.684244][ T28] audit: type=1400 audit(1786103812.259:19672): avc: denied { write } for pid=6710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.685368][ T68] veth1_macvtap: left promiscuous mode [ 1310.732957][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.784108][ T68] veth0_macvtap: left promiscuous mode [ 1310.802539][ T68] veth1_vlan: left promiscuous mode [ 1310.811034][ T68] veth0_vlan: left promiscuous mode [ 1310.931194][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1310.948928][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1311.010724][ T6709] bond0: entered promiscuous mode [ 1311.016916][ T6709] bond_slave_0: entered promiscuous mode [ 1311.027615][ T6709] bond_slave_1: entered promiscuous mode [ 1311.076936][ T6709] batadv_slave_0: entered promiscuous mode [ 1311.102453][ T6709] batadv_slave_0: left promiscuous mode [ 1311.121741][ T6709] bond0: left promiscuous mode [ 1311.131638][ T6709] bond_slave_0: left promiscuous mode [ 1311.143122][ T6709] bond_slave_1: left promiscuous mode [ 1311.164655][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1311.223480][ T6726] loop1: detected capacity change from 0 to 128 [ 1311.230716][ T6726] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1311.254431][ T6726] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1311.342608][ T6726] FAT-fs (loop1): Filesystem has been set read-only [ 1311.350141][ T6726] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1311.411860][ T6723] syzkaller0: entered promiscuous mode [ 1311.633735][ T6723] syzkaller0: entered allmulticast mode [ 1311.670234][ T6741] loop5: detected capacity change from 0 to 7 [ 1311.911298][ T6748] __nla_validate_parse: 1 callbacks suppressed [ 1311.911338][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9801'. [ 1311.942106][ T28] audit: type=1400 audit(1786103813.509:19673): avc: denied { write } for pid=6732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1311.990492][ T28] audit: type=1400 audit(1786103813.529:19674): avc: denied { write } for pid=6754 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.086388][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1312.864628][ T28] audit: type=1400 audit(1786103814.419:19675): avc: denied { write } for pid=6768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.914518][ T6791] erspan0: left promiscuous mode [ 1312.919569][ T6791] erspan0: left allmulticast mode [ 1313.277663][T25452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.285147][T25452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.329803][ T28] audit: type=1400 audit(1786103814.899:19676): avc: denied { write } for pid=6796 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.335206][ T314] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.384930][ T314] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.399393][ T314] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.413427][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1313.431925][ T314] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.449330][ T6799] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1313.613478][ T6825] loop1: detected capacity change from 0 to 512 [ 1313.650395][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.664117][ T6825] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.678151][ T28] audit: type=1400 audit(1786103815.249:19677): avc: denied { write } for pid=6824 comm="syz.1.9823" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.690877][ T6825] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #12: comm syz.1.9823: invalid size [ 1313.727183][ T28] audit: type=1400 audit(1786103815.259:19678): avc: denied { write } for pid=6824 comm="syz.1.9823" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.774182][ T28] audit: type=1400 audit(1786103815.259:19679): avc: denied { write } for pid=6824 comm="syz.1.9823" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.804738][ T28] audit: type=1400 audit(1786103815.259:19680): avc: denied { write } for pid=6824 comm="syz.1.9823" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.850310][ T28] audit: type=1400 audit(1786103815.259:19681): avc: denied { write } for pid=6824 comm="syz.1.9823" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.892326][T30257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.928010][ T28] audit: type=1400 audit(1786103815.259:19682): avc: denied { write } for pid=6824 comm="syz.1.9823" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.977664][ T6857] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1313.991592][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1313.994444][ T28] audit: type=1400 audit(1786103815.379:19683): avc: denied { write } for pid=6816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.047871][ T28] audit: type=1400 audit(1786103815.529:19684): avc: denied { write } for pid=6847 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.653369][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9837'. [ 1314.725577][ T6889] loop4: detected capacity change from 0 to 512 [ 1314.748180][ T6889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.775812][ T6889] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1314.839715][ T28] audit: type=1400 audit(1786103816.409:19685): avc: denied { write } for pid=6888 comm="syz.4.9840" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1314.846744][ T6889] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz.4.9840: invalid size [ 1315.010465][ T6195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.116518][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9844'. [ 1315.118111][ T6914] syzkaller1: entered promiscuous mode [ 1315.149563][ T6914] syzkaller1: entered allmulticast mode [ 1316.531492][ T6955] syzkaller1: entered promiscuous mode [ 1316.587190][ T6955] syzkaller1: entered allmulticast mode [ 1316.939105][ T6964] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 1317.700627][ T6970] loop3: detected capacity change from 0 to 512 [ 1317.883666][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.950121][ T6970] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.971206][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9869'. [ 1318.006604][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9869'. [ 1318.056030][ T5530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.217977][ T6995] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1318.549755][ T7019] loop3: detected capacity change from 0 to 512 [ 1318.594044][ T7019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.622076][ T7019] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.634607][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1318.634620][ T28] audit: type=1400 audit(1786103820.209:19695): avc: denied { write } for pid=7018 comm="syz.3.9884" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1318.674777][ T28] audit: type=1400 audit(1786103820.239:19696): avc: denied { write } for pid=7018 comm="syz.3.9884" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1318.693079][ T5530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.799440][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9885'. [ 1318.859614][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9885'. [ 1319.002496][ T7041] loop3: detected capacity change from 0 to 256 [ 1319.017431][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9891'. [ 1319.195661][ T7055] loop3: detected capacity change from 0 to 512 [ 1319.230311][ T7055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.265429][ T7055] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1319.281556][ T28] audit: type=1400 audit(1786103820.849:19697): avc: denied { write } for pid=7053 comm="syz.3.9896" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1319.305295][ T28] audit: type=1400 audit(1786103820.869:19698): avc: denied { write } for pid=7053 comm="syz.3.9896" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1319.337885][ T5530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.583008][ T7071] loop1: detected capacity change from 0 to 256 [ 1319.654908][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9903'. [ 1319.665553][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9903'. [ 1319.909706][ T7092] loop3: detected capacity change from 0 to 128 [ 1320.738752][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.750486][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.763452][ T7093] bridge_slave_0: entered allmulticast mode [ 1320.774324][ T7093] bridge_slave_0: entered promiscuous mode [ 1320.800983][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.824976][ T7154] loop3: detected capacity change from 0 to 512 [ 1320.826962][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.848803][ T7093] bridge_slave_1: entered allmulticast mode [ 1320.860992][ T7093] bridge_slave_1: entered promiscuous mode [ 1320.897236][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.917539][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.005438][ T7174] loop5: detected capacity change from 0 to 7 [ 1321.108169][ T7093] team0: Port device team_slave_0 added [ 1321.117731][ T7192] loop7: detected capacity change from 0 to 128 [ 1321.125427][ T7093] team0: Port device team_slave_1 added [ 1321.179216][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.199833][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.254343][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.267377][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.275155][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.326694][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.496958][ T7093] hsr_slave_0: entered promiscuous mode [ 1321.504435][ T7093] hsr_slave_1: entered promiscuous mode [ 1321.511216][ T7093] debugfs: 'hsr0' already exists in 'hsr' [ 1321.518072][ T7093] Cannot create hsr debugfs directory [ 1321.629163][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9929'. [ 1321.758313][ T7093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1321.949498][ T7093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.076927][ T7093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.116485][ T7093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.207838][ T7093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.225833][ T7093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.569683][ T7093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.602145][ T7093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.025650][ T7093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1324.044704][ T7093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1324.072659][ T7093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1324.120225][ T7093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1324.131006][ T28] audit: type=1400 audit(1786103825.699:19699): avc: denied { write } for pid=7285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1324.148291][ T7093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1324.181196][ T7093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1324.194150][ T7093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1324.204152][ T28] audit: type=1400 audit(1786103825.769:19700): avc: denied { write } for pid=7341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1324.239224][ T7093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1324.349843][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.375207][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.408601][T25468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.415909][T25468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.445755][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.453458][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.661950][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.816374][ T7093] veth0_vlan: entered promiscuous mode [ 1324.836272][ T7093] veth1_vlan: entered promiscuous mode [ 1324.877028][ T7093] veth0_macvtap: entered promiscuous mode [ 1324.896361][ T7093] veth1_macvtap: entered promiscuous mode [ 1324.924217][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.944779][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1325.213760][T25449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.272077][ T3482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.312798][T25464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.445729][ T28] audit: type=1400 audit(1786103826.979:19701): avc: denied { write } for pid=7463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.446306][ T3482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.484809][ T7470] tipc: Enabling of bearer rejected, failed to enable media [ 1325.551309][ T28] audit: type=1400 audit(1786103827.089:19702): avc: denied { write } for pid=7487 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.603217][ T7502] loop5: detected capacity change from 0 to 7 [ 1325.609480][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9962'. [ 1325.833792][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9968'. [ 1326.416575][ T28] audit: type=1400 audit(1786103827.989:19703): avc: denied { write } for pid=7504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.497379][ T28] audit: type=1400 audit(1786103828.069:19704): avc: denied { write } for pid=7536 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.815377][ T7550] tipc: Enabling of bearer rejected, failed to enable media [ 1326.892810][ T28] audit: type=1400 audit(1786103828.469:19705): avc: denied { write } for pid=7546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.988803][ T28] audit: type=1400 audit(1786103828.529:19706): avc: denied { write } for pid=7578 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.281026][ T7610] macsec1: entered allmulticast mode [ 1327.378551][ T7610] veth1_macvtap: entered allmulticast mode [ 1327.404374][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1327.487952][ T7641] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9979'. [ 1327.577401][ T7635] veth1_macvtap (unregistering): left allmulticast mode [ 1327.810073][ T7654] tipc: Enabling of bearer rejected, failed to enable media [ 1327.995786][ T7678] loop6: detected capacity change from 0 to 256 [ 1328.876026][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9999'. [ 1328.887266][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9999'. [ 1328.897823][ T7760] syzkaller0: entered promiscuous mode [ 1328.903863][ T7760] syzkaller0: entered allmulticast mode [ 1328.912654][ T7760] tipc: Started in network mode [ 1328.917699][ T7760] tipc: Node identity f27d8f5fc755, cluster identity 4711 [ 1328.925217][ T7760] tipc: Enabled bearer , priority 0 [ 1328.934506][ T7760] tipc: Resetting bearer [ 1328.941449][ T7758] tipc: Resetting bearer [ 1328.951748][ T7758] tipc: Disabling bearer [ 1330.068977][ T7853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10011'. [ 1330.078556][ T7853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10011'. [ 1331.196585][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10017'. [ 1331.584972][ T7895] loop6: detected capacity change from 0 to 512 [ 1331.637315][ T7895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1331.700129][ T28] audit: type=1400 audit(1786103833.259:19707): avc: denied { write } for pid=7896 comm="syz.4.10024" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1331.851125][ T7895] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.230874][ T7895] EXT4-fs error (device loop6): ext4_empty_dir:3082: inode #12: comm syz.6.10023: invalid size [ 1332.244919][ T28] audit: type=1400 audit(1786103833.799:19708): avc: denied { write } for pid=7894 comm="syz.6.10023" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1332.269630][ T28] audit: type=1400 audit(1786103833.799:19709): avc: denied { write } for pid=7894 comm="syz.6.10023" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1332.319214][ T28] audit: type=1400 audit(1786103833.799:19710): avc: denied { write } for pid=7894 comm="syz.6.10023" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1332.370303][ T28] audit: type=1400 audit(1786103833.799:19711): avc: denied { write } for pid=7894 comm="syz.6.10023" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1332.372586][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.409904][ T28] audit: type=1400 audit(1786103833.799:19712): avc: denied { write } for pid=7894 comm="syz.6.10023" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1332.526070][ T7915] syzkaller0: entered promiscuous mode [ 1332.534108][ T7915] syzkaller0: entered allmulticast mode [ 1332.579513][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.605759][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.713926][ T7926] qrtr: Invalid version 0 [ 1333.210590][ T7936] syzkaller0: entered promiscuous mode [ 1333.253058][ T7936] syzkaller0: entered allmulticast mode [ 1333.276784][ T7939] loop6: detected capacity change from 0 to 512 [ 1333.358038][ T7939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.384811][ T7941] tipc: Started in network mode [ 1333.474980][ T7941] tipc: Node identity b264ede8ad5b, cluster identity 4711 [ 1333.530453][ T7939] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.557399][ T7941] tipc: Enabled bearer , priority 0 [ 1333.567993][ T7948] tipc: Resetting bearer [ 1333.579910][ T28] audit: type=1400 audit(1786103835.149:19713): avc: denied { write } for pid=7937 comm="syz.6.10039" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1333.620024][ T7934] tipc: Resetting bearer [ 1333.622980][ T7939] EXT4-fs error (device loop6): ext4_empty_dir:3082: inode #12: comm syz.6.10039: invalid size [ 1333.629867][ T28] audit: type=1400 audit(1786103835.199:19714): avc: denied { write } for pid=7937 comm="syz.6.10039" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1333.683463][ T28] audit: type=1400 audit(1786103835.199:19715): avc: denied { write } for pid=7937 comm="syz.6.10039" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1333.730208][ T28] audit: type=1400 audit(1786103835.199:19716): avc: denied { write } for pid=7937 comm="syz.6.10039" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1333.836380][ T7934] tipc: Disabling bearer [ 1333.863682][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.908960][ T7952] syzkaller0: entered promiscuous mode [ 1333.915293][ T7952] syzkaller0: entered allmulticast mode [ 1334.004142][ T7957] loop4: detected capacity change from 0 to 128 [ 1334.573885][ T7984] macsec1: entered allmulticast mode [ 1334.591351][ T7984] veth1_macvtap: entered allmulticast mode [ 1334.620207][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10051'. [ 1334.621754][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10054'. [ 1334.641533][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10054'. [ 1334.664002][ T7994] veth1_macvtap (unregistering): left allmulticast mode [ 1334.709015][ T7983] syzkaller0: entered promiscuous mode [ 1334.715507][ T7983] syzkaller0: entered allmulticast mode [ 1334.724291][ T7983] tipc: Started in network mode [ 1334.729687][ T7983] tipc: Node identity ee71f3ed9f3d, cluster identity 4711 [ 1334.737961][ T7983] tipc: Enabled bearer , priority 0 [ 1334.747867][ T7983] tipc: Resetting bearer [ 1334.768179][ T7981] tipc: Resetting bearer [ 1334.787233][ T7981] tipc: Disabling bearer [ 1335.051177][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10063'. [ 1335.068545][ T8015] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10065'. [ 1335.386665][ T8022] device-mapper: ioctl: Unable to rename non-existent device, to §<ÐA[ [ 1335.627016][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10070'. [ 1335.647735][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10070'. [ 1335.664221][ T8035] syzkaller0: entered promiscuous mode [ 1335.675853][ T8035] syzkaller0: entered allmulticast mode [ 1335.684616][ T8035] tipc: Enabled bearer , priority 0 [ 1335.700925][ T8035] tipc: Resetting bearer [ 1335.708863][ T8034] tipc: Resetting bearer [ 1335.719484][ T8034] tipc: Disabling bearer [ 1335.781968][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10077'. [ 1336.023486][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10087'. [ 1336.282745][ T8080] loop6: detected capacity change from 0 to 128 [ 1336.416754][ T8082] syzkaller0: entered promiscuous mode [ 1336.423406][ T8082] syzkaller0: entered allmulticast mode [ 1336.435823][ T8082] tipc: Enabled bearer , priority 0 [ 1336.447187][ T8082] tipc: Resetting bearer [ 1336.456299][ T8081] tipc: Resetting bearer [ 1336.465957][ T8081] tipc: Disabling bearer [ 1336.575594][ T8084] __nla_validate_parse: 1 callbacks suppressed [ 1336.575609][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10093'. [ 1336.776320][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10096'. [ 1337.035673][ T8115] loop6: detected capacity change from 0 to 128 [ 1337.104469][ T8119] syzkaller0: entered promiscuous mode [ 1337.176223][ T8119] syzkaller0: entered allmulticast mode [ 1337.202583][ T8124] tipc: Started in network mode [ 1337.207685][ T8124] tipc: Node identity 6e5965f9b091, cluster identity 4711 [ 1337.214953][ T8124] tipc: Enabled bearer , priority 0 [ 1337.224565][ T8119] tipc: Resetting bearer [ 1337.251281][ T8117] tipc: Resetting bearer [ 1337.260549][ T8117] tipc: Disabling bearer [ 1337.269581][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10105'. [ 1337.281807][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10108'. [ 1337.285442][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10105'. [ 1337.416495][ T8143] loop6: detected capacity change from 0 to 512 [ 1337.452928][ T8147] syzkaller0: entered promiscuous mode [ 1337.465958][ T8143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.474590][ T8147] syzkaller0: entered allmulticast mode [ 1337.487617][ T8143] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.490258][ T8147] tipc: Enabled bearer , priority 0 [ 1337.509617][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1337.509632][ T28] audit: type=1400 audit(1786103839.079:19722): avc: denied { write } for pid=8142 comm="syz.6.10115" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1337.538443][ T8146] tipc: Resetting bearer [ 1337.538511][ T28] audit: type=1400 audit(1786103839.079:19723): avc: denied { write } for pid=8142 comm="syz.6.10115" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1337.590055][ T28] audit: type=1400 audit(1786103839.079:19724): avc: denied { write } for pid=8142 comm="syz.6.10115" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1337.592335][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.623460][ T8146] tipc: Disabling bearer [ 1337.703677][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10125'. [ 1337.714454][ T8165] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10124'. [ 1337.725534][ T8165] syzkaller1: entered promiscuous mode [ 1337.731375][ T8165] syzkaller1: entered allmulticast mode [ 1337.777942][ T8172] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1337.832991][ T8179] loop3: detected capacity change from 0 to 512 [ 1337.853907][ T8179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.867303][ T8179] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.882934][ T28] audit: type=1400 audit(1786103839.449:19725): avc: denied { write } for pid=8177 comm="syz.3.10131" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1337.907802][ T28] audit: type=1400 audit(1786103839.479:19726): avc: denied { write } for pid=8177 comm="syz.3.10131" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1337.952814][ T28] audit: type=1400 audit(1786103839.479:19727): avc: denied { write } for pid=8177 comm="syz.3.10131" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1338.012348][ T5530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.071485][ T8191] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10136'. [ 1338.128047][ T8201] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10140'. [ 1338.138527][ T8201] syzkaller1: entered promiscuous mode [ 1338.145136][ T8201] syzkaller1: entered allmulticast mode [ 1338.202927][ T8204] loop7: detected capacity change from 0 to 1764 [ 1338.275334][ T28] audit: type=1400 audit(1786103839.849:19728): avc: denied { write } for pid=8207 comm="syz.1.10142" name="g1" dev="configfs" ino=35119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1338.630978][ T8227] syzkaller0: entered promiscuous mode [ 1338.651371][ T8227] syzkaller0: entered allmulticast mode [ 1338.662356][ T8227] tipc: Enabled bearer , priority 0 [ 1338.671445][ T8227] tipc: Resetting bearer [ 1338.679297][ T8226] tipc: Resetting bearer [ 1338.690760][ T8226] tipc: Disabling bearer [ 1338.804126][ T28] audit: type=1400 audit(1786103840.359:19729): avc: denied { write } for pid=8233 comm="syz.6.10155" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1339.181128][ T8247] loop9: detected capacity change from 0 to 7 [ 1339.193660][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1339.203503][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.213555][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1339.223594][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.236212][ T8247] loop9: unable to read partition table [ 1339.245612][ T8247] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1339.327299][ T28] audit: type=1400 audit(1786103840.899:19730): avc: denied { setopt } for pid=8258 comm="syz.6.10163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1339.362183][ T8252] loop9: detected capacity change from 7 to 0 [ 1339.406178][ T8266] syzkaller0: entered promiscuous mode [ 1339.412182][ T8266] syzkaller0: entered allmulticast mode [ 1339.420034][ T8266] tipc: Enabled bearer , priority 0 [ 1339.428881][ T8266] tipc: Resetting bearer [ 1339.442445][ T8265] tipc: Resetting bearer [ 1339.459464][ T8265] tipc: Disabling bearer [ 1341.211518][ T8311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1341.610238][ T28] audit: type=1400 audit(1786103843.089:19731): avc: denied { map } for pid=8316 comm="syz.4.10182" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1342.017108][ T8329] syzkaller0: entered promiscuous mode [ 1342.035404][ T8329] syzkaller0: entered allmulticast mode [ 1342.044446][ T8329] tipc: Enabled bearer , priority 0 [ 1342.053715][ T8329] tipc: Resetting bearer [ 1342.060632][ T8328] tipc: Resetting bearer [ 1342.068579][ T8328] tipc: Disabling bearer [ 1342.187366][ T8337] loop4: detected capacity change from 0 to 128 [ 1342.230308][ T8337] netlink: 288 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1342.281632][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.290877][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.833213][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.865514][ T8374] syzkaller0: entered promiscuous mode [ 1342.871365][ T8374] syzkaller0: entered allmulticast mode [ 1342.951230][ T8377] tipc: Enabled bearer , priority 0 [ 1342.998912][ T8374] tipc: Resetting bearer [ 1343.220849][ T8373] tipc: Resetting bearer [ 1343.227603][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10211'. [ 1343.241343][ T8373] tipc: Disabling bearer [ 1343.805960][ T8466] xt_hashlimit: size too large, truncated to 1048576 [ 1344.388445][ T8491] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10225'. [ 1344.400461][ T8491] syzkaller1: entered promiscuous mode [ 1344.407395][ T8491] syzkaller1: entered allmulticast mode [ 1344.960833][ T28] audit: type=1400 audit(1786103846.529:19732): avc: denied { listen } for pid=8595 comm="syz.3.10228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1344.985103][ T28] audit: type=1400 audit(1786103846.529:19733): avc: denied { setopt } for pid=8595 comm="syz.3.10228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1345.040221][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab2ca00: rx timeout, send abort [ 1345.048801][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888125ad1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1345.548742][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab2ca00: abort rx timeout. Force session deactivation [ 1347.379890][ T8729] syzkaller1: entered promiscuous mode [ 1347.388013][ T8729] syzkaller1: entered allmulticast mode [ 1347.961846][ T8599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1348.060106][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.095341][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.062495][ T8769] syzkaller0: entered promiscuous mode [ 1349.073899][ T8769] syzkaller0: entered allmulticast mode [ 1349.082638][ T8769] tipc: Enabled bearer , priority 0 [ 1349.091339][ T8769] tipc: Resetting bearer [ 1349.100611][ T8768] tipc: Resetting bearer [ 1349.211833][ T8768] tipc: Disabling bearer [ 1349.294686][ T8782] loop4: detected capacity change from 0 to 128 [ 1349.331659][ T8782] netlink: 288 bytes leftover after parsing attributes in process `syz.4.10257'. [ 1350.275515][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10274'. [ 1350.951047][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10287'. [ 1351.573261][ T8880] syzkaller0: entered promiscuous mode [ 1351.579137][ T8880] syzkaller0: entered allmulticast mode [ 1351.587427][ T8880] tipc: Started in network mode [ 1351.593117][ T8880] tipc: Node identity 62da0694b77c, cluster identity 4711 [ 1351.600587][ T8880] tipc: Enabled bearer , priority 0 [ 1351.609969][ T8880] tipc: Resetting bearer [ 1351.617329][ T8879] tipc: Resetting bearer [ 1351.625727][ T8879] tipc: Disabling bearer [ 1351.729677][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10300'. [ 1351.785151][ T28] audit: type=1400 audit(1786103853.359:19734): avc: denied { write } for pid=8891 comm="syz.1.10302" name="fs" dev="configfs" ino=152228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1351.820545][ T8896] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10304'. [ 1351.909972][ T8906] syzkaller0: entered promiscuous mode [ 1351.915896][ T8906] syzkaller0: entered allmulticast mode [ 1351.924295][ T8906] tipc: Enabled bearer , priority 0 [ 1351.933172][ T8906] tipc: Resetting bearer [ 1351.941384][ T8905] tipc: Resetting bearer [ 1351.952239][ T8905] tipc: Disabling bearer [ 1352.105866][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10308'. [ 1352.558825][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1352.604924][ T8926] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10316'. [ 1352.755312][ T8943] loop7: detected capacity change from 0 to 256 [ 1352.788131][ T8947] loop1: detected capacity change from 0 to 128 [ 1352.795562][ T8943] FAT-fs (loop7): codepage cp1251 not found [ 1352.804125][ T8947] netlink: 288 bytes leftover after parsing attributes in process `syz.1.10326'. [ 1352.955001][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.977791][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.147490][ T8968] tmpfs: Unknown parameter 'grpquota_iÚrØA%~' [ 1353.279610][ T28] audit: type=1400 audit(1786103854.779:19735): avc: denied { write } for pid=8967 comm="syz.6.10335" name="file0" dev="tmpfs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1353.459218][ T28] audit: type=1400 audit(1786103854.779:19736): avc: denied { open } for pid=8967 comm="syz.6.10335" path="/317/file0" dev="tmpfs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1353.657998][ T28] audit: type=1400 audit(1786103854.779:19737): avc: denied { ioctl } for pid=8967 comm="syz.6.10335" path="/317/file0" dev="tmpfs" ino=1676 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1353.791620][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10336'. [ 1354.734457][ T9001] tipc: Enabled bearer , priority 0 [ 1354.749219][ T9000] tipc: Disabling bearer [ 1354.781071][ T9015] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1354.926729][ T9023] __nla_validate_parse: 1 callbacks suppressed [ 1354.926744][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10357'. [ 1356.211366][ T9056] tipc: Enabled bearer , priority 0 [ 1356.251667][ T9056] tipc: Resetting bearer [ 1356.276940][ T9053] tipc: Disabling bearer [ 1356.526833][ T9066] syzkaller1: entered promiscuous mode [ 1356.553278][ T9066] syzkaller1: entered allmulticast mode [ 1356.665986][ T9072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1357.033578][ T9109] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1357.767024][ T9186] loop6: detected capacity change from 0 to 512 [ 1357.775342][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10386'. [ 1358.700002][ T9200] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1358.861955][ T9204] syzkaller0: entered promiscuous mode [ 1358.893272][ T9204] syzkaller0: entered allmulticast mode [ 1359.888380][ T9235] loop3: detected capacity change from 0 to 512 [ 1360.924862][ T9249] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1360.952339][ T9255] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 1361.855318][ T9284] loop3: detected capacity change from 0 to 512 [ 1361.930914][ T9287] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 1362.784004][ T9297] syzkaller0: entered promiscuous mode [ 1362.815221][ T9297] syzkaller0: entered allmulticast mode [ 1363.331778][ T9323] loop2: detected capacity change from 0 to 7 [ 1363.342376][ T9323] loop2: [ 1363.717141][ T9342] syzkaller0: entered promiscuous mode [ 1363.735808][ T9342] syzkaller0: entered allmulticast mode [ 1364.275221][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10446'. [ 1364.397321][ T9376] syzkaller0: entered promiscuous mode [ 1364.418360][ T9376] syzkaller0: entered allmulticast mode [ 1364.435797][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10445'. [ 1364.503674][ T9385] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1364.691599][ T9398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10458'. [ 1364.751631][ T9402] loop5: detected capacity change from 0 to 7 [ 1364.799804][ T9406] syzkaller0: entered promiscuous mode [ 1364.818262][ T9406] syzkaller0: entered allmulticast mode [ 1364.993742][ T9425] syzkaller1: entered promiscuous mode [ 1364.999816][ T9425] syzkaller1: entered allmulticast mode [ 1365.556049][ T28] audit: type=1400 audit(1786103867.129:19738): avc: denied { ioctl } for pid=9446 comm="syz.4.10478" path="socket:[166749]" dev="sockfs" ino=166749 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1365.656384][ T28] audit: type=1326 audit(1786103867.229:19739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.4.10487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb271e0d9 code=0x0 [ 1365.683468][ T9461] tmpfs: Unknown parameter 'grpquota_iÚrØA%~' [ 1365.912421][ T9470] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1366.626524][ T9477] loop7: detected capacity change from 0 to 256 [ 1366.699030][ T9488] loop5: detected capacity change from 0 to 2463 [ 1366.699248][ T9477] FAT-fs (loop7): IO charset maccyrillic not found [ 1366.984365][ T6672] Buffer I/O error on dev loop5, logical block 307, async page read [ 1367.022182][ T9492] macsec1: entered allmulticast mode [ 1367.057459][ T9493] loop5: detected capacity change from 2463 to 5639 [ 1367.071367][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10493'. [ 1367.113180][ T9492] veth1_macvtap: entered allmulticast mode [ 1367.134785][T31935] Buffer I/O error on dev loop5, logical block 704, async page read [ 1367.288567][ T9497] veth1_macvtap (unregistering): left allmulticast mode [ 1367.312701][ T28] audit: type=1400 audit(1786103868.789:19740): avc: denied { unmount } for pid=5530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1367.672543][ T28] audit: type=1326 audit(1786103869.249:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.3.10504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ffe10e0d9 code=0x0 [ 1368.514917][ T28] audit: type=1400 audit(1786103870.089:19742): avc: denied { execute_no_trans } for pid=9524 comm="syz.3.10508" path="/196/file0" dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1368.947083][ T9536] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10512'. [ 1369.205375][ T28] audit: type=1400 audit(1786103870.779:19743): avc: denied { setopt } for pid=9550 comm="syz.1.10515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1369.690788][ T9483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1369.780664][ T28] audit: type=1326 audit(1786103871.349:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.10519" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb271e0d9 code=0x0 [ 1370.056009][ T9661] loop6: detected capacity change from 0 to 512 [ 1371.066651][ T9688] loop3: detected capacity change from 0 to 512 [ 1371.132662][ T9688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.266030][ T9688] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.290235][ T28] audit: type=1400 audit(1786103872.859:19745): avc: denied { write } for pid=9687 comm="syz.3.10534" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1371.290823][ T9688] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:107: comm syz.3.10534: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 1371.905639][ T5530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.048379][ T9704] loop7: detected capacity change from 0 to 512 [ 1372.349509][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10538'. [ 1372.359140][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10538'. [ 1373.387832][ T28] audit: type=1400 audit(1786103874.959:19746): avc: denied { listen } for pid=9728 comm="syz.7.10547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1373.472944][ T9668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1373.534585][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10548'. [ 1373.625081][ T9737] bridge_slave_1: left allmulticast mode [ 1373.761889][ T9737] bridge_slave_1: left promiscuous mode [ 1373.769217][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.803012][ T9737] bridge_slave_0: left allmulticast mode [ 1373.809499][ T9737] bridge_slave_0: left promiscuous mode [ 1373.816504][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.520218][ T9760] loop5: detected capacity change from 0 to 7 [ 1374.569749][ T9764] loop6: detected capacity change from 0 to 512 [ 1375.296882][ T9788] syzkaller0: entered promiscuous mode [ 1375.303692][ T9788] syzkaller0: entered allmulticast mode [ 1376.227689][T16088] IPVS: starting estimator thread 0... [ 1376.279128][ T9801] loop5: detected capacity change from 0 to 7 [ 1376.284910][ T28] audit: type=1326 audit(1786103877.849:19747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9802 comm="syz.1.10570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3bf15e0d9 code=0x0 [ 1376.351931][ T9797] IPVS: using max 2640 ests per chain, 132000 per kthread [ 1377.592093][ T9766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.919243][ T9842] loop6: detected capacity change from 0 to 512 [ 1377.982829][ T9842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.050751][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10583'. [ 1378.182025][ T9842] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.395182][ T28] audit: type=1326 audit(1786103879.969:19748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.4.10589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb271e0d9 code=0x0 [ 1378.481421][ T28] audit: type=1400 audit(1786103880.049:19749): avc: denied { read } for pid=9860 comm="syz.7.10586" path="socket:[167742]" dev="sockfs" ino=167742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1378.484681][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.125422][ T9890] loop6: detected capacity change from 0 to 512 [ 1379.137349][ T9890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.150799][ T9890] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.170190][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.186809][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.196167][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.251435][ T9897] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10603'. [ 1380.166984][T10006] syzkaller0: entered promiscuous mode [ 1380.201224][T10006] syzkaller0: entered allmulticast mode [ 1380.344311][T10041] loop2: detected capacity change from 0 to 7 [ 1380.475062][T10055] random: crng reseeded on system resumption [ 1380.475760][ T28] audit: type=1400 audit(1786103882.049:19750): avc: denied { write } for pid=10053 comm="syz.4.10625" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1380.508798][ T28] audit: type=1400 audit(1786103882.049:19751): avc: denied { open } for pid=10053 comm="syz.4.10625" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1380.552207][ T28] audit: type=1400 audit(1786103882.119:19752): avc: denied { ioctl } for pid=10053 comm="syz.4.10625" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1380.645307][T10062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10627'. [ 1380.670976][T10064] syzkaller0: entered promiscuous mode [ 1380.677126][T10064] syzkaller0: entered allmulticast mode [ 1381.650985][T10203] loop6: detected capacity change from 0 to 512 [ 1381.696437][T10203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.717494][T10203] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.040770][T10228] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10647'. [ 1382.071554][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.145329][T10237] syzkaller0: entered promiscuous mode [ 1382.151584][T10237] syzkaller0: entered allmulticast mode [ 1382.960533][T10354] syzkaller0: entered promiscuous mode [ 1382.966646][T10354] syzkaller0: entered allmulticast mode [ 1382.983695][ T28] audit: type=1400 audit(1786103884.559:19753): avc: denied { read } for pid=10358 comm="syz.7.10656" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1383.071662][T10369] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10660'. [ 1383.093731][T10369] syzkaller1: entered promiscuous mode [ 1383.099846][T10369] syzkaller1: entered allmulticast mode [ 1383.348512][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10663'. [ 1383.470020][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.500271][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.009637][T10389] syzkaller0: entered promiscuous mode [ 1384.024811][T10389] syzkaller0: entered allmulticast mode [ 1384.088667][T10394] tmpfs: Unknown parameter 'grpquota_iÚrØA%~' [ 1384.276730][T10400] syzkaller0: entered promiscuous mode [ 1384.331654][T10400] syzkaller0: entered allmulticast mode [ 1384.464398][T10405] device-mapper: ioctl: Unable to rename non-existent device, to § [ 1384.648473][T10412] loop7: detected capacity change from 0 to 512 [ 1385.200229][T10427] loop3: detected capacity change from 0 to 512 [ 1385.215875][T10427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1385.233820][T10427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.248127][T10427] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.265133][T10427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.347888][T10435] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10684'. [ 1385.360705][T10433] syzkaller0: entered promiscuous mode [ 1385.367456][T10433] syzkaller0: entered allmulticast mode [ 1385.460999][T10441] syzkaller0: entered promiscuous mode [ 1385.475643][T10441] syzkaller0: entered allmulticast mode [ 1385.978591][T10472] tmpfs: Unknown parameter 'grpquota_iÚrØA%~' [ 1386.147986][T10472] blktrace: Concurrent blktraces are not allowed on loop2 [ 1386.197107][T10477] loop2: detected capacity change from 0 to 7 [ 1386.235209][T10479] syzkaller0: entered promiscuous mode [ 1386.241176][T10479] syzkaller0: entered allmulticast mode [ 1388.396102][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10708'. [ 1388.406048][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10708'. [ 1388.681190][T10462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1389.065176][T10539] loop2: detected capacity change from 0 to 7 [ 1389.076312][T10541] loop4: detected capacity change from 0 to 512 [ 1389.090216][T10541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1389.115913][T10541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.126678][T10543] syzkaller0: entered promiscuous mode [ 1389.130413][T10541] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.136626][T10543] syzkaller0: entered allmulticast mode [ 1389.156059][T10541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.182733][T10548] tmpfs: Unknown parameter 'grpquota_iÚrØA%~' [ 1390.410728][T10589] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1390.591956][T10598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10746'. [ 1390.609692][T10598] syzkaller1: entered promiscuous mode [ 1390.615835][T10598] syzkaller1: entered allmulticast mode [ 1390.767913][T10609] xt_hashlimit: size too large, truncated to 1048576 [ 1391.259128][T10635] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10760'. [ 1391.365502][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888119eca200: rx timeout, send abort [ 1391.865550][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88813c63ca00: rx timeout, send abort [ 1391.874998][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888119eca200: abort rx timeout. Force session deactivation [ 1392.374701][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88813c63ca00: abort rx timeout. Force session deactivation [ 1392.877906][T10675] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1393.766407][T10697] tipc: Enabling of bearer rejected, failed to enable media [ 1394.214412][T10726] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1394.743800][T10737] loop6: detected capacity change from 0 to 512 [ 1394.773044][T10737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1394.866262][T10737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.914903][T10737] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.090622][ T3420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.535793][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88813c3ca200: rx timeout, send abort [ 1396.035790][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a9bda00: rx timeout, send abort [ 1396.044597][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88813c3ca200: abort rx timeout. Force session deactivation [ 1396.108168][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10813'. [ 1396.117741][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10813'. [ 1396.544565][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a9bda00: abort rx timeout. Force session deactivation [ 1396.636736][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88812fcff000: rx timeout, send abort [ 1397.078342][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10829'. [ 1397.089185][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10829'. [ 1397.136794][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888104055e00: rx timeout, send abort [ 1397.145530][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88812fcff000: abort rx timeout. Force session deactivation [ 1397.365021][T10845] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1397.645503][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888104055e00: abort rx timeout. Force session deactivation [ 1397.769027][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1397.781460][T10877] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1397.819322][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1398.638922][T10913] syzkaller0: entered promiscuous mode [ 1398.660690][T10913] syzkaller0: entered allmulticast mode [ 1398.709053][T10913] tipc: Enabling of bearer rejected, failed to enable media [ 1399.799380][T10927] loop1: detected capacity change from 0 to 512 [ 1399.906240][T10927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1399.989035][T10927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.054793][T10927] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.381921][T10927] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.805265][T10953] syzkaller0: entered promiscuous mode [ 1400.870090][T10953] syzkaller0: entered allmulticast mode [ 1400.920455][T10953] tipc: Enabling of bearer rejected, failed to enable media [ 1402.974387][T11003] tipc: Enabling of bearer rejected, failed to enable media [ 1406.976411][T11082] blktrace: Concurrent blktraces are not allowed on loop8 [ 1407.003608][ T6195] ================================================================== [ 1407.012289][ T6195] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 1407.020834][ T6195] [ 1407.023169][ T6195] read-write to 0xffff888104c534b0 of 8 bytes by task 11083 on cpu 0: [ 1407.031612][ T6195] inode_add_bytes+0x47/0xe0 [ 1407.036314][ T6195] __dquot_alloc_space+0x17d/0x890 [ 1407.041451][ T6195] shmem_inode_acct_blocks+0x125/0x230 [ 1407.046949][ T6195] shmem_get_folio_gfp+0x5d3/0xd90 [ 1407.052105][ T6195] shmem_write_begin+0xfc/0x1f0 [ 1407.056971][ T6195] generic_perform_write+0x186/0x490 [ 1407.062307][ T6195] shmem_file_write_iter+0xc5/0xf0 [ 1407.067740][ T6195] __kernel_write_iter+0x30f/0x590 [ 1407.072953][ T6195] dump_user_range+0xa73/0xd00 [ 1407.077770][ T6195] elf_core_dump+0x21c0/0x2340 [ 1407.084033][ T6195] coredump_write+0xaf9/0xdd0 [ 1407.089022][ T6195] vfs_coredump+0x2770/0x3290 [ 1407.094772][ T6195] get_signal+0xd33/0xf10 [ 1407.099374][ T6195] arch_do_signal_or_restart+0x96/0x480 [ 1407.106456][ T6195] irqentry_exit+0x14d/0x610 [ 1407.111768][ T6195] asm_exc_page_fault+0x26/0x30 [ 1407.118227][ T6195] [ 1407.120677][ T6195] read to 0xffff888104c534b0 of 8 bytes by task 6195 on cpu 1: [ 1407.129257][ T6195] generic_fillattr+0x283/0x340 [ 1407.134824][ T6195] shmem_getattr+0x181/0x200 [ 1407.139603][ T6195] vfs_getattr_nosec+0x146/0x1e0 [ 1407.144743][ T6195] vfs_getattr+0x48/0x60 [ 1407.149176][ T6195] vfs_statx_path+0x28/0x140 [ 1407.154504][ T6195] vfs_statx+0xc4/0x170 [ 1407.158775][ T6195] vfs_fstatat+0x118/0x170 [ 1407.163832][ T6195] __se_sys_newfstatat+0x55/0x3e0 [ 1407.169159][ T6195] __x64_sys_newfstatat+0x55/0x70 [ 1407.174737][ T6195] x64_sys_call+0x2c64/0x3020 [ 1407.179792][ T6195] do_syscall_64+0x136/0x3c0 [ 1407.184674][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.191133][ T6195] [ 1407.193552][ T6195] value changed: 0x00000000000121d8 -> 0x00000000000121e0 [ 1407.201967][ T6195] [ 1407.204295][ T6195] Reported by Kernel Concurrency Sanitizer on: [ 1407.210571][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 1407.221815][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1407.232077][ T6195] ================================================================== [ 1407.348927][T11090] syzkaller0: entered promiscuous mode [ 1407.365815][T11090] syzkaller0: entered allmulticast mode