last executing test programs: 13m10.822517432s ago: executing program 2 (id=2656): openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/profiling', 0x2a482, 0x48) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000000)={0x23, 0x4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) 13m4.203060218s ago: executing program 2 (id=2683): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x7d2d732298b18228, 0x84, 0xa, 0x45}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) writev(r7, 0x0, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20000}, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, 0x0, 0x65) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x24, 0x2, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 13m1.957700051s ago: executing program 2 (id=2687): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0x894c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8984662b0254d78d, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) listen(r2, 0x204) r5 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) sendmmsg$inet(r5, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000340)="89", 0x1}], 0x2}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100001042dbd7000000000f43b6fe900", @ANYRES32=0x0, @ANYBLOB="4b02060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x4044000) 13m1.886177873s ago: executing program 2 (id=2688): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x200, 0x1, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) socket$unix(0x1, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x903, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x15) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000640)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x1, 0x587, &(0x7f00000018c0)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 13m1.432174888s ago: executing program 2 (id=2692): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x40000, 0x14}, 0x18) mknodat(r1, &(0x7f0000000680)='./file0\x00', 0x40, 0xb52) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 13m1.304888222s ago: executing program 2 (id=2696): openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/profiling', 0x2a482, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000000)={0x23, 0x4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x4008800) 12m44.962651825s ago: executing program 32 (id=2696): openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/profiling', 0x2a482, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000000)={0x23, 0x4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x4008800) 6m4.933226987s ago: executing program 0 (id=4114): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2de175a7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000080000200000000000000029000000370000000c0000000000000004010f040108000028000000000000002900000005000000"], 0x60}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x814) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 6m1.79135656s ago: executing program 0 (id=4126): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x30, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x48016) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r8, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, &(0x7f00000003c0)) timer_settime(r8, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, 0x0, 0x0, 0x42, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x4810}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 6m1.420094742s ago: executing program 0 (id=4129): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3c280e8c2a77ba7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r6, &(0x7f0000008280), 0x0, 0x40000180, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}, @TCA_U32_POLICE={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x10, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe}, {0xfff3, 0x1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24054040}, 0x10) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 6m0.635519037s ago: executing program 0 (id=4136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x12}}, 0x1c}}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000002c0)={0x1, 0x726, 0x7, 0x0, 0x4}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x564}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb8a22d34ce75ab81}, 0x20044000) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001d00)={'sit0\x00', &(0x7f0000001c80)={'gre0\x00', 0x0, 0x40, 0x1, 0x9, 0x3, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@end, @timestamp={0x44, 0x10, 0xbc, 0x0, 0xe, [0x5, 0x7, 0x7]}, @noop]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7f, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5}, 0x50) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001940)={0x68, 0x3, 0x7, 0x201, 0x0, 0x0, {0xb614a184b9ec0974, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7100}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x368000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff80}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6dc8}, @NFACCT_FILTER={0x4}]}, 0x68}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000500)={0x0, 0x50d2, 0x0, [0x3, 0x4, 0x1, 0x7fff, 0xc000000000], [0x2, 0x8001, 0xf, 0x7, 0x0, 0xffff, 0x7, 0x1, 0x57ff, 0x7, 0x3, 0xf, 0xd, 0x1, 0x5, 0x645d1be7, 0x2, 0x5, 0x7, 0x8, 0xe, 0xfffffffffffffffb, 0x3, 0x2, 0x2, 0x8, 0x7, 0x5, 0x10000, 0x7, 0x29a4, 0x1, 0xacd9e73000000000, 0x200, 0x4, 0x100000000, 0x4, 0x4, 0x3, 0x0, 0x2, 0x1, 0xfffffffffffffff7, 0x1000, 0x1, 0x4, 0x1, 0x5, 0x1, 0x5, 0x8, 0xa, 0x8, 0x9, 0x0, 0x4, 0x401, 0x1, 0xffffffffffffff90, 0x3, 0x0, 0xff, 0x6, 0x7, 0x1, 0x1, 0x3, 0x3, 0x9, 0x6, 0x9, 0x5, 0x3, 0x8000000000000000, 0x1, 0x1, 0x8, 0x3, 0xfffffffffffffff9, 0x9, 0x189c, 0x4, 0x200, 0xc, 0x557, 0x2, 0x7, 0x0, 0x7, 0x4, 0x5, 0x1, 0x0, 0x8, 0xc00000000000, 0xf4f5, 0xffffffff, 0x2, 0x1ff, 0x6, 0x5, 0x4, 0x7, 0x400, 0x0, 0x7fffffff, 0x1, 0x6, 0x8, 0xfff, 0x4, 0x933c, 0x55c, 0x0, 0x4, 0x3, 0x200, 0xd0, 0xfff, 0x1000, 0x5280]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0xc, @unused=[0x7, 0xffffffffffffffff, 0x6, 0x5], @devid=r7}) 6m0.180881562s ago: executing program 0 (id=4138): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x2, 0x5b3, &(0x7f0000000680)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==") syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10f0fc, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x44) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x3) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040004, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(0x0, 0x7, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) timerfd_create(0x7, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 5m59.261783352s ago: executing program 0 (id=4141): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xcc, &(0x7f0000000040)="ff02040000ffe41f2be82d0a00"/24, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000300)) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000100)=0xde89) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup2(r8, r8) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, 0x0, 0x47) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0xc00) 5m40.533562324s ago: executing program 33 (id=4141): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xcc, &(0x7f0000000040)="ff02040000ffe41f2be82d0a00"/24, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000300)) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000100)=0xde89) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup2(r8, r8) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, 0x0, 0x47) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0xc00) 15.860678362s ago: executing program 4 (id=5884): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4040004) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x5, 0x3, 0x1, 0x0, 0x3, 0x400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x8408, 0x5, 0x7, 0x3, 0x3ff, 0x3, 0x9, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a01010000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x221) 15.106300836s ago: executing program 4 (id=5889): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x1, 0x3, 0xd, 0xc, '#D_', 0x448, [0x0, 0x473, 0x8, 0x9, 0xb]}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r10, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r9, 0x407, 0x100004) write$eventfd(r9, &(0x7f0000000240), 0xffffff14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") 11.715009297s ago: executing program 4 (id=5892): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) unlink(&(0x7f0000000100)='./file0/file1\x00') socket(0x2b, 0x1, 0x1) 11.583455541s ago: executing program 3 (id=5895): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x60000600) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r0, 0x7040, 0x6) sync() sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000700)=0x8) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) r3 = socket(0x23, 0x2, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x4e, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xffffffffffffffff) io_uring_enter(r4, 0x4cc0, 0x87721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 10.377145721s ago: executing program 4 (id=5900): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f00000001c0)=0x3, 0x4) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) prctl$PR_GET_TIMERSLACK(0x1e) preadv(r4, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0xb, 0x1, {0x3, 0x2, 0x3, 0x0, 0x440f}, 0x3}) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @local}, 0xfffff69d}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="0b064299103d9360f25361ebca44bf33e562b78ded9881d6b338915bb909959bd9522451b8866cd56c72ed5084ec992f0768011d099ed9b00d601cca81642cc5f6cbb5bc5091d2b09ff6bdf319cf7b7c29a4f90c1792c4d767c0f8ff64a9ce3b44a2887997c0b4d166170258075f51628f036857b9d9fb46028531647d8aa11a8a188b9059e5b691dff6f9486873c076a59976eaf2fedaa199385d30ff8e2280fe7db47ae57f270bf4ae1a1c819a7f716341", 0xb2}, {&(0x7f0000000100)="c4e90f59a632c9ed1d12a7af0669294ea3c15c4501ac90bc68bbab7f9d0167283e41ce6e04b3e854cbdb7c05e43f8047e20802a1849abc13a1ed83e15e64eb5db36d677d86712b65608e5fb14c49637d40a50f73633ea55e56c619f82c0ebff8169053c4a4eaef07", 0x68}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="ab9a59418290582ba3b1a7d900aa1dd772014f3b8160ea353ccbdfa2928357eed92a0b1952d90edd073587fe44d500d86eeaf1395103a736c6a287d853", 0x3d}, {&(0x7f0000000900)="a10963d5516128c797affcb640c9c0b96d4c4f1fd791c0a81a72dd949ccea212a8ed622aba9c30ac9828534a23c15907a5556d12030ff65719cdabe7a63bd10efc628608400ed49ea90085009de5f61e86692e7969bc83dd9e87a849a861bc43a7a7b094515b5c71df85867ce8", 0x6d}], 0x5, &(0x7f0000000380)=[@rthdr={{0x68, 0x29, 0x39, {0x5c, 0xa, 0x3, 0x0, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x33, 0x10, 0x2, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @private2, @empty]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @flowinfo={{0x14, 0x29, 0xb, 0xc}}, @rthdr={{0x88, 0x29, 0x39, {0x32, 0xe, 0x1, 0x4, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @ipv4={'\x00', '\xff\xff', @local}, @local, @remote]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2f, 0x14, 0x2, 0x21, 0x0, [@empty, @remote, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @rand_addr=' \x01\x00', @mcast1, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts={{0x180, 0x29, 0x37, {0x3c, 0x2c, '\x00', [@generic={0x4, 0xfc, "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"}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x50, {0x1, 0x12, 0xb, 0x1a, [0x1, 0x8000, 0x8000, 0x8, 0x7, 0x9, 0x1, 0x10, 0x400]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x400}}, {{&(0x7f0000000780)={0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000007c0)="f127251e05f27a641090bfada3fe925078619614cd3e689b854b38224d977f4f4792d6e396575ba529", 0x29}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e20, 0x8001, @private0, 0x1}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000000880)="c2a4b572e7be78dfffac94fe25a4f753c8405c6e873330b828cd0834a1bae754cd089cbf5c91e217d8f2bc1431701886d922884de8d2e5bece98ed30fead5d87f8fe290a42", 0x45}, {&(0x7f0000002380)="6598d7878ad473fb994f2d41329f74be5aa1e8837820f1e94c1e2028b7d0283bf8f1aba740908f485307c67000b1bfdcc384dc394a4e36284e68ffe86efe264b7939fa0be6df413114a272c483fae4d33e1942b629beea05110f4cbaa01fc856b8987cb6f40c350d3b32", 0x6a}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x180}}], 0x4, 0xc040) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b700000000008510000002000000850000002600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x8000000000000001}, {0x4, 0x7fffffffffffffff, 0x0, 0x7}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@mcast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) alarm(0x7) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000200)={&(0x7f0000000180)=[{0x14, 0x2, 0x0, {0xb295, 0x7, 0x1}}, {0x0, 0x2, 0x0, {0x1, 0xfffffffa}}], 0x2, 0x20, 0x6, 0x5}) 9.948567165s ago: executing program 3 (id=5902): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x20000000002, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd, 0x0, &(0x7f0000000100)="ff412f66b0833efc8864978781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240), 0xf) write$P9_RFLUSH(r2, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe) syz_open_dev$loop(0x0, 0x236, 0x20042) mlockall(0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffff9, 0x2, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) munlockall() 8.298406279s ago: executing program 3 (id=5908): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) getpid() getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0xb1d9}}, {@uid={'uid', 0x3d, r3}}]}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x0, 0x5, 0x0, 0x0, 0x8000000000000001, 0x4a181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x868, 0x5, 0x0, 0x8, 0x7, 0x800003, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x1}}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1800, @private1, 0x6}}]}, 0x60}}, 0x4004040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x200000d4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r8, 0x0, 0x80c4) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 7.582540162s ago: executing program 4 (id=5910): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x3, 0x2002) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x10026, 0x10003, 0xffedfff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}], 0x2, 0x400c405) 7.550305604s ago: executing program 3 (id=5911): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4040004) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x5, 0x3, 0x1, 0x0, 0x3, 0x400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x8408, 0x5, 0x7, 0x3, 0x3ff, 0x3, 0x9, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a01010000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x221) 7.318982471s ago: executing program 6 (id=5913): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000780)=[{&(0x7f0000001440)="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", 0x1ab}], 0x1) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x5, 0x4002) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88400, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x2) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)=0x2) socket$kcm(0x1e, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x5, 0x567}, 0xb) 7.214895494s ago: executing program 3 (id=5914): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x60000600) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r0, 0x7040, 0x6) sync() sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x8001, @private2, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200), 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) r3 = socket(0x23, 0x2, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x4e, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xffffffffffffffff) io_uring_enter(r4, 0x4cc0, 0x87721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 6.701446931s ago: executing program 5 (id=5915): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102385, &(0x7f0000000400)=0x19018) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) 6.42486863s ago: executing program 4 (id=5917): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x40, 0x6f, 0x2, 0x0, 0x4, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x50c4, 0x1, @perf_config_ext={0x0, 0x7}, 0x14000, 0x8000000000000000, 0x8001, 0xbd31418b5ac51ab0, 0x3, 0xf3, 0xfff, 0x0, 0x40, 0x0, 0x7fb}, r0, 0x9, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/244], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x6fa, @private1={0xfc, 0x1, '\x00', 0x1}}, @in6={0xa, 0x4e20, 0x800, @local, 0x5}, @in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0x200}], 0xa0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x0, 0x56, 0x0, 0x8}, 0x28) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendto$inet6(r1, &(0x7f0000000000)="836bb66f", 0xfdef, 0x0, 0x0, 0xfffffffffffffec8) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000140)=0x40000006) ioctl$USBDEVFS_RESET(r5, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0xe) 6.337298943s ago: executing program 5 (id=5918): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x810, 0x400000, 0x1000000, 0x3, 0xe201, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x52f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = mq_open(&(0x7f0000000140)=',%\x00', 0x40, 0x12d, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$bpf(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x200022, &(0x7f00000003c0)={[{@gid}, {@gid={'gid', 0x3d, r5}}], [{@dont_hash}]}) socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) mq_notify(r4, &(0x7f00000003c0)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)="dec6ecf45e4697068c199ca6c90812039a44673f7c0574d14bcd9829ce61c3c0a62a7eda2599a11797699753da6d13bf9ab189199b277cf96a10ff2e56beeb285f3b301fa598da479db917a5c883"}}) 3.263407523s ago: executing program 3 (id=5921): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xab, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8001, 0x9, 0x0}) timer_create(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180)=0x7, 0x4) r4 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)={[{@utf8}, {@uid}, {@nojoliet}, {@nocompress}, {@showassoc}, {@map_acorn}, {@mode={'mode', 0x3d, 0x8}}, {@map_normal}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}], [{@fowner_lt}]}, 0x2, 0xa45, &(0x7f00000007c0)="$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") r5 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r7, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x87c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0x4, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x103, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 2.544314437s ago: executing program 1 (id=5923): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) getpid() getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0xb1d9}}, {@uid={'uid', 0x3d, r3}}]}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x0, 0x5, 0x0, 0x0, 0x8000000000000001, 0x4a181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x868, 0x5, 0x0, 0x8, 0x7, 0x800003, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x1}}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1800, @private1, 0x6}}]}, 0x60}}, 0x4004040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x200000d4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r8, 0x0, 0x80c4) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0xd0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xbc, 0x1, [@m_gact={0x78, 0x2, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1f, 0x569, 0x0, 0x6, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d7a, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cc2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x209b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x48c, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xd0}}, 0x0) 2.325318234s ago: executing program 1 (id=5924): msgsnd(0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x4810) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000001080), 0x1) r3 = io_uring_setup(0x6001, &(0x7f0000000100)={0x0, 0x52f, 0x2041, 0x1, 0x2ce, 0x0, r1}) close_range(r3, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x1c}}, 0x840) close(0x3) 2.045431143s ago: executing program 6 (id=5925): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4040004) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x5, 0x3, 0x1, 0x0, 0x3, 0x400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x8408, 0x5, 0x7, 0x3, 0x3ff, 0x3, 0x9, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a01010000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x221) 2.030082493s ago: executing program 1 (id=5926): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = getpgid(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x49880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) finit_module(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="29c726bd7000fedbc8251900000008000300"], 0x1c}}, 0x0) r7 = getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000040c0)=0x1000, 0x4) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r8, 0x0, 0x0, 0x65, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r9 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x817, 0x82008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) 1.792559892s ago: executing program 6 (id=5927): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, 0x0, 0x40) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102385, &(0x7f0000000400)=0x19018) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) r7 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedreceive(r7, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) 1.726316474s ago: executing program 1 (id=5928): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) getpid() getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0xb1d9}}, {@uid={'uid', 0x3d, r3}}]}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x0, 0x5, 0x0, 0x0, 0x8000000000000001, 0x4a181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x868, 0x5, 0x0, 0x8, 0x7, 0x800003, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x1}}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1800, @private1, 0x6}}]}, 0x60}}, 0x4004040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x200000d4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r8, 0x0, 0x80c4) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0xe0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xcc, 0x1, [@m_gact={0x78, 0x2, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1f, 0x569, 0x0, 0x6, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d7a, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cc2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x209b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x48c, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe0}}, 0x0) 1.640816186s ago: executing program 5 (id=5929): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="003000000000000014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288, 0x5}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$FIONCLEX(r2, 0x5450) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) perf_event_open$cgroup(&(0x7f0000000a80)={0x2, 0x80, 0x5, 0xb, 0xff, 0x6, 0x0, 0x7ff, 0xe02c0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x10000, 0x3, 0x100, 0x0, 0x2, 0x3, 0x4700, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0xa7}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX=0x0, @ANYBLOB=',overriderockperm,map=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272696465726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00"], 0x2, 0x6b8, &(0x7f0000000180)="$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") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x14e) getdents64(r9, &(0x7f0000001f80)=""/4102, 0x1006) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.635723916s ago: executing program 6 (id=5930): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x3, 0x2002) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x3599, @remote, 0x7}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x106, 0x17, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 1.589783458s ago: executing program 1 (id=5931): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="375e27bd3f02fedbdf251400000010000713d8800c0003000800000000006f167b3e5300b4585b8339ad83374e5630ddd073f992eb9ce1b03e3bca416b91152eeb4d8379462225811f413279c016a74f506d6734278fba303db96cab8fd01966b9f953cbb72d4a0e18b9502eb961f22459e1405f315c7e208e937cc2267818"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xc4}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x219, 0x0, 0xfffffffd, 0x3, 0x9, 0x8001, 0x7ffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0xb) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SET_GS(0x1e, r5, 0x0, 0x1001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x2400c002) r6 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="758c200001000000183a0000040000000000000000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200dd000000008500000086000000850000009900000018120000a68dbce8715139c403bad4fb2fcc6a44b3da41a2d53f04cf69bcd765d32ef344d02c232466ed81470fde1b3b63af8cdb52a034b8c208ade26eb6e15760a2688172310932e0e2ee8002aed92cccdb1780", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183a000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000100000085100000f8ffffff"], &(0x7f0000000300)='GPL\x00', 0x3, 0xa, &(0x7f0000000440)=""/10, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001800)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001840)=[{0x4, 0x1, 0xe, 0x2}, {0x2, 0x3, 0x8, 0x1a}, {0x2, 0x1, 0x7, 0x1}, {0x3, 0x2, 0x5}, {0x3, 0x5, 0x9, 0x9}, {0x5, 0x3, 0xd, 0x2}, {0x3, 0x4, 0x3, 0x3}], 0x10, 0x6}, 0x94) shutdown(r6, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000380)=@keyring={'key_or_keyring:', r7}) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.406425774s ago: executing program 5 (id=5932): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10800, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x1000}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x41, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000780)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@authinfo={0x18}], 0x18, 0x4040010}, 0x4000000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000400)) setns(r4, 0x66020000) socket$kcm(0x10, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7, 0x3, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x5, 0x9}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.312887367s ago: executing program 1 (id=5933): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b5585f0b902cd17f323", 0x24}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x285, &(0x7f0000000940)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8102, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) write(r7, &(0x7f0000000200)="c788", 0x2) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000a00)=""/4096, &(0x7f0000001a00)=0x1000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) 873.642451ms ago: executing program 5 (id=5934): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000780005062cbd9600fcdbdf25"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000840) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x80, 0x25, 0x3}, 0x18) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, 0x0, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab38284d758e60000", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffec6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, 0x0, 0x8) 449.247225ms ago: executing program 5 (id=5935): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpgid(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x43, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x100000, 0x653f, 0xffffffff, 0x5, 0x0, 0x0, 0xa1c, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='!~u\t&0&&&') syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x1, 0x6}, {0x0, 0x0, 0x400000003, 0x4}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@local, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount$cgroup(0x0, 0x0, 0x0, 0x2000, 0x0) 447.854595ms ago: executing program 6 (id=5936): msgsnd(0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x4810) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000001080), 0x1) r3 = io_uring_setup(0x6001, &(0x7f0000000100)={0x0, 0x52f, 0x2041, 0x1, 0x2ce, 0x0, r1}) close_range(r3, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x1c}}, 0x840) close(0x3) 0s ago: executing program 6 (id=5937): r0 = socket(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000002000000700000a140000001100010000000000000000000700000a"], 0x28}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x542}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x3ba}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) kernel console output (not intermixed with test programs): 010'. [ 1420.980182][ T28] audit: type=1400 audit(2000001241.271:4369): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1421.012518][ T28] audit: type=1400 audit(2000001241.448:4370): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1421.034888][T23478] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5010'. [ 1421.037624][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.054017][T23477] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1421.063865][T23477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1421.073663][T23477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1421.290041][T23496] gretap1: entered allmulticast mode [ 1421.292413][T23493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1421.296976][T23496] team0: Port device gretap1 added [ 1421.305882][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1421.399632][T23497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5018'. [ 1421.453045][T23495] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5018'. [ 1421.529957][T23500] netlink: 'syz.6.5019': attribute type 29 has an invalid length. [ 1421.541330][T23500] netlink: 'syz.6.5019': attribute type 29 has an invalid length. [ 1421.590011][T23502] macvlan4: entered allmulticast mode [ 1421.600628][T23502] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1421.662666][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.668894][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.674988][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.681278][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.687477][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.693776][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.695213][T23513] loop6: detected capacity change from 0 to 4096 [ 1421.699986][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.712639][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.719076][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.725643][T23511] tc action pedit 'at' offset 8 out of bounds [ 1421.731996][T23511] 0: reclassify loop, rule prio 0, protocol 800 [ 1421.754838][T23513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.826646][T23513] ip6_vti0 speed is unknown, defaulting to 1000 [ 1421.997844][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1422.427722][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.042937][T23531] batman_adv: batadv0: Interface deactivated: geneve2 [ 1423.620966][ T6931] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.630406][T23523] ip6_vti0 speed is unknown, defaulting to 1000 [ 1423.636032][ T6931] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.647599][ T6931] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.657075][ T6931] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.694410][T23542] ip6_vti0 speed is unknown, defaulting to 1000 [ 1423.772623][T23555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23555 comm=syz.4.5035 [ 1425.779441][T23574] tipc: Invalid UDP bearer configuration [ 1425.779829][T23574] tipc: Enabling of bearer rejected, failed to enable media [ 1426.290300][T23586] ip6_vti0 speed is unknown, defaulting to 1000 [ 1426.392439][T23585] loop6: detected capacity change from 0 to 256 [ 1426.441795][T23595] __nla_validate_parse: 6 callbacks suppressed [ 1426.441825][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5043'. [ 1426.466289][T23595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5043'. [ 1427.070653][T23591] nfs: Bad value for 'fsc' [ 1427.093717][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1427.093735][ T28] audit: type=1400 audit(2000001247.136:4385): avc: denied { accept } for pid=23590 comm="syz.5.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1427.171588][T23595] batadv0: left allmulticast mode [ 1427.250855][T23593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5046'. [ 1427.259845][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5046'. [ 1427.354395][T23607] ip6_vti0 speed is unknown, defaulting to 1000 [ 1427.576482][T23612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5050'. [ 1427.637787][T23618] atomic_op ffff88811a6d2928 conn xmit_atomic 0000000000000000 [ 1427.713271][T23617] ip6_vti0 speed is unknown, defaulting to 1000 [ 1427.810708][T23625] loop6: detected capacity change from 0 to 4096 [ 1427.824675][T23625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1427.899463][ T28] audit: type=1400 audit(2000001247.865:4386): avc: denied { write } for pid=23624 comm="syz.6.5054" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1427.934534][T23634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5055'. [ 1428.279043][T23625] ip6_vti0 speed is unknown, defaulting to 1000 [ 1428.553350][T23632] ip6_vti0 speed is unknown, defaulting to 1000 [ 1428.630962][T23644] ip6_vti0 speed is unknown, defaulting to 1000 [ 1428.707812][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.721681][T23654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1428.792582][T23650] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1428.817183][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5060'. [ 1428.817207][T23658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5060'. [ 1428.923287][T23662] netlink: 'syz.1.5063': attribute type 25 has an invalid length. [ 1428.935280][T23662] netlink: 'syz.1.5063': attribute type 3 has an invalid length. [ 1430.075784][ T28] audit: type=1400 audit(2000001249.914:4387): avc: denied { read } for pid=23669 comm="syz.6.5066" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1430.150922][ T28] audit: type=1400 audit(2000001249.914:4388): avc: denied { open } for pid=23669 comm="syz.6.5066" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1431.044503][T23668] ip6_vti0 speed is unknown, defaulting to 1000 [ 1431.199828][T23681] ip6_vti0 speed is unknown, defaulting to 1000 [ 1431.544333][T23705] ip6_vti0 speed is unknown, defaulting to 1000 [ 1431.688246][T23718] ip6_vti0 speed is unknown, defaulting to 1000 [ 1432.622650][T23752] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1432.913563][T23752] bond6: (slave lo): Enslaving as an active interface with an up link [ 1432.959231][T23752] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1433.007299][T23757] tipc: Enabling of bearer rejected, already enabled [ 1433.525148][T23745] SELinux: failed to load policy [ 1433.535770][T23745] nfs: Bad value for 'fsc' [ 1433.541146][ T28] audit: type=1400 audit(2000001253.141:4389): avc: denied { load_policy } for pid=23740 comm="syz.4.5084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1433.682570][T23789] __nla_validate_parse: 1 callbacks suppressed [ 1433.682610][T23789] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5096'. [ 1433.714187][T23789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5096'. [ 1433.828828][T23794] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1433.841478][T23789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5096'. [ 1433.851274][T23794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1434.021361][T23802] loop6: detected capacity change from 0 to 4096 [ 1434.207901][T23806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5103'. [ 1434.218932][T23806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5103'. [ 1434.285306][T23792] ip6_vti0 speed is unknown, defaulting to 1000 [ 1434.474218][T23802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.478159][T23801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1434.499010][ T28] audit: type=1400 audit(2000001254.058:4390): avc: denied { write } for pid=23799 comm="syz.6.5102" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1434.534505][ T28] audit: type=1400 audit(2000001254.095:4391): avc: denied { read } for pid=23800 comm="syz.5.5101" lport=20765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1434.596528][T23801] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1434.606076][T23801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1434.615280][T23801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1434.624282][T23801] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1434.776007][T23802] ip6_vti0 speed is unknown, defaulting to 1000 [ 1435.995466][T23828] ip6_vti0 speed is unknown, defaulting to 1000 [ 1436.037211][ T28] audit: type=1400 audit(2000001255.498:4392): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.143644][ T28] audit: type=1400 audit(2000001255.517:4393): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.168050][ T28] audit: type=1400 audit(2000001255.517:4394): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.193879][ T28] audit: type=1400 audit(2000001255.517:4395): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.216716][ T28] audit: type=1400 audit(2000001255.517:4396): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.239482][T23840] SELinux: policydb string does not match my string SE Linux [ 1436.247800][ T28] audit: type=1400 audit(2000001255.517:4397): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.270465][ T28] audit: type=1400 audit(2000001255.517:4398): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.293045][T23840] SELinux: failed to load policy [ 1436.607202][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.798535][T23855] ip6_vti0 speed is unknown, defaulting to 1000 [ 1438.798781][T23884] batadv0: left allmulticast mode [ 1439.432679][T23890] loop6: detected capacity change from 0 to 4096 [ 1439.473546][T23890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1439.546884][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1439.546986][ T28] audit: type=1400 audit(2000001258.772:4401): avc: denied { write } for pid=23889 comm="syz.6.5124" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1439.886309][T23891] gretap0: entered allmulticast mode [ 1439.946281][T23891] team0: Port device gretap0 added [ 1439.972154][T23894] bridge0: port 1(team0) entered blocking state [ 1440.004413][T23894] bridge0: port 1(team0) entered disabled state [ 1440.029318][T23894] team0: entered allmulticast mode [ 1440.034533][T23894] team_slave_1: entered allmulticast mode [ 1440.044097][T23894] team0: entered promiscuous mode [ 1440.049324][T23894] team_slave_1: entered promiscuous mode [ 1440.500219][T23894] gretap0: entered promiscuous mode [ 1440.519667][T23872] ip6_vti0 speed is unknown, defaulting to 1000 [ 1440.631357][T23890] ip6_vti0 speed is unknown, defaulting to 1000 [ 1440.664353][T23911] __nla_validate_parse: 31 callbacks suppressed [ 1440.664373][T23911] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1440.680110][T23911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1440.689606][T23911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1440.771309][T23915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5129'. [ 1440.781351][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5129'. [ 1440.945705][T23921] ip6_vti0 speed is unknown, defaulting to 1000 [ 1441.036194][T23923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5132'. [ 1441.105908][ T28] audit: type=1400 audit(2000001260.231:4402): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.114141][T23923] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5132'. [ 1441.128731][ T28] audit: type=1400 audit(2000001260.231:4403): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.137362][T23927] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5133'. [ 1441.161022][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.173974][ T28] audit: type=1400 audit(2000001260.231:4404): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.203321][ T28] audit: type=1400 audit(2000001260.231:4405): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.230016][T23929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5133'. [ 1441.235514][ T28] audit: type=1400 audit(2000001260.231:4406): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.281124][ T28] audit: type=1400 audit(2000001260.231:4407): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.303068][ T28] audit: type=1400 audit(2000001260.231:4408): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.325182][ T28] audit: type=1400 audit(2000001260.231:4409): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.348015][ T28] audit: type=1400 audit(2000001260.259:4410): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1441.754130][T23953] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1442.987745][T23965] ip6_vti0 speed is unknown, defaulting to 1000 [ 1443.084278][T23971] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1443.346999][T23969] ip6_vti0 speed is unknown, defaulting to 1000 [ 1443.573124][T23983] loop6: detected capacity change from 0 to 4096 [ 1443.624905][T23983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.807570][T23983] ip6_vti0 speed is unknown, defaulting to 1000 [ 1443.910476][T24001] bridge0: port 2(30ªî{X¹¦) entered blocking state [ 1443.918492][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.921596][T24001] bridge0: port 2(30ªî{X¹¦) entered disabled state [ 1443.935348][T24001] 0ªî{X¹¦: entered promiscuous mode [ 1444.074010][T24000] ip6_vti0 speed is unknown, defaulting to 1000 [ 1444.252637][T24027] loop6: detected capacity change from 0 to 512 [ 1444.261821][T24027] ext4: Bad value for 'data_err' [ 1444.352797][T24024] ip6_vti0 speed is unknown, defaulting to 1000 [ 1445.220241][T24047] loop6: detected capacity change from 0 to 1024 [ 1445.235630][T24039] ip6_vti0 speed is unknown, defaulting to 1000 [ 1445.245327][T24047] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1445.256410][T24047] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1445.266386][T24047] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1445.292346][T24047] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #2: comm syz.6.5162: iget: bad extra_isize 65535 (inode size 1024) [ 1445.306407][T24047] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1445.306606][T24047] EXT4-fs (loop6): no journal found [ 1445.315794][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1445.315817][ C0] EXT4-fs (loop6): initial error at time 2000001264: ext4_get_journal_inode:5896: inode 2 [ 1445.315852][ C0] EXT4-fs (loop6): last error at time 2000001264: ext4_get_journal_inode:5896: inode 2 [ 1445.348179][T24047] EXT4-fs (loop6): can't get journal size [ 1445.354494][T24047] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.5162: iget: bad extra_isize 65535 (inode size 1024) [ 1445.368157][T24047] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1445.368304][T24047] EXT4-fs (loop6): get root inode failed [ 1445.383412][T24047] EXT4-fs (loop6): mount failed [ 1445.522022][T24043] ip6_vti0 speed is unknown, defaulting to 1000 [ 1445.555765][T24039] loop6: detected capacity change from 0 to 512 [ 1445.596955][T24039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1445.618801][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1445.618819][ T28] audit: type=1400 audit(2000001264.450:4413): avc: denied { write } for pid=24038 comm="syz.6.5162" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1445.647175][ T28] audit: type=1400 audit(2000001264.487:4414): avc: denied { read write } for pid=24038 comm="syz.6.5162" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1445.670475][ T28] audit: type=1400 audit(2000001264.487:4415): avc: denied { open } for pid=24038 comm="syz.6.5162" path="/175/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1445.696587][T24039] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1445.707827][T24057] ip6_vti0 speed is unknown, defaulting to 1000 [ 1445.789560][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.816591][T24063] bond10: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1445.826958][T24063] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1445.900749][T24079] SELinux: policydb string does not match my string SE Linux [ 1445.910096][T24079] SELinux: failed to load policy [ 1446.103799][T24089] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1446.143800][T24085] ip6_vti0 speed is unknown, defaulting to 1000 [ 1446.377835][T24093] veth0: entered promiscuous mode [ 1446.403755][T24093] bond0: entered promiscuous mode [ 1446.427188][T24088] ip6_vti0 speed is unknown, defaulting to 1000 [ 1446.523491][T24092] bond0: left promiscuous mode [ 1446.542393][T24092] veth0: left promiscuous mode [ 1446.565145][T24102] __nla_validate_parse: 14 callbacks suppressed [ 1446.565163][T24102] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5179'. [ 1446.845537][T24107] ip6_vti0 speed is unknown, defaulting to 1000 [ 1447.241570][T24123] loop6: detected capacity change from 0 to 4096 [ 1447.261539][T24123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1447.319193][ T28] audit: type=1400 audit(2000001266.040:4416): avc: denied { write } for pid=24121 comm="syz.6.5194" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1447.948317][T24123] ip6_vti0 speed is unknown, defaulting to 1000 [ 1448.044301][ T28] audit: type=1400 audit(2000001266.723:4417): avc: denied { append } for pid=24139 comm="syz.1.5190" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1448.226274][T24140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5190'. [ 1449.149570][ T28] audit: type=1400 audit(2000001267.743:4418): avc: denied { create } for pid=24142 comm="syz.5.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1449.295540][T24152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5192'. [ 1449.323953][T24130] ip6_vti0 speed is unknown, defaulting to 1000 [ 1449.477104][T24156] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1449.497073][T24156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1449.509731][T24156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1449.669021][T24162] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1449.699070][ T28] audit: type=1400 audit(2000001268.276:4419): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1449.725268][ T28] audit: type=1400 audit(2000001268.294:4420): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1449.748616][ T28] audit: type=1400 audit(2000001268.294:4421): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1449.773118][ T28] audit: type=1400 audit(2000001268.294:4422): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1449.799712][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.989866][T24160] ip6_vti0 speed is unknown, defaulting to 1000 [ 1451.126049][T24167] ip6_vti0 speed is unknown, defaulting to 1000 [ 1451.482686][T24187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1451.508865][T24183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1452.535930][T24173] ip6_vti0 speed is unknown, defaulting to 1000 [ 1452.671006][T24201] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5205'. [ 1452.681508][T24201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5205'. [ 1452.691936][T24201] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5205'. [ 1452.775257][T24203] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5206'. [ 1453.018150][T24211] deleting an unspecified loop device is not supported. [ 1453.337993][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1453.338009][ T28] audit: type=1400 audit(2000001271.372:4428): avc: denied { read } for pid=24205 comm="syz.6.5208" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1453.681616][T24214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1453.702951][ T28] audit: type=1400 audit(2000001271.372:4429): avc: denied { open } for pid=24205 comm="syz.6.5208" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1453.835994][T24214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1453.859297][ T28] audit: type=1400 audit(2000001271.381:4430): avc: denied { ioctl } for pid=24205 comm="syz.6.5208" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1453.910594][T24226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5209'. [ 1453.948930][T24225] loop6: detected capacity change from 0 to 1024 [ 1453.970466][T24225] EXT4-fs: Ignoring removed bh option [ 1454.040929][T24225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1454.091519][T24225] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1454.105750][ T28] audit: type=1400 audit(2000001272.382:4431): avc: denied { write } for pid=24220 comm="syz.6.5212" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1454.232954][T24241] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5216'. [ 1454.255368][T24241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5216'. [ 1454.273995][T24241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5216'. [ 1454.283329][T24228] ip6_vti0 speed is unknown, defaulting to 1000 [ 1455.158897][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.995360][T24272] loop6: detected capacity change from 0 to 1024 [ 1457.691971][T24285] ip6_vti0 speed is unknown, defaulting to 1000 [ 1457.906978][T24306] loop6: detected capacity change from 0 to 4096 [ 1457.923568][T24302] ip6_vti0 speed is unknown, defaulting to 1000 [ 1458.030321][T24306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.070788][ T28] audit: type=1400 audit(2000001276.105:4432): avc: denied { write } for pid=24305 comm="syz.6.5232" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1458.231296][T24306] ip6_vti0 speed is unknown, defaulting to 1000 [ 1458.350366][T24320] __nla_validate_parse: 8 callbacks suppressed [ 1458.350395][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1458.491749][T19733] page_pool_release_retry() stalled pool shutdown: id 68, 51 inflight 242 sec [ 1458.884595][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.910479][ T28] audit: type=1400 audit(2000001276.853:4433): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1459.294619][ T28] audit: type=1400 audit(2000001276.853:4434): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1459.317035][ T28] audit: type=1400 audit(2000001276.853:4435): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1459.336416][T24332] loop6: detected capacity change from 0 to 4096 [ 1459.339585][ T28] audit: type=1400 audit(2000001276.853:4436): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1460.383808][ T28] audit: type=1400 audit(2000001276.853:4437): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1460.406202][ T28] audit: type=1400 audit(2000001276.853:4438): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1460.918866][T24317] ip6_vti0 speed is unknown, defaulting to 1000 [ 1460.926206][T24332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.995397][T24344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1461.011735][T24344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1461.028145][T24344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1461.068326][T24350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1461.320607][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5242'. [ 1461.427013][T24365] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5243'. [ 1461.445225][T24365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5243'. [ 1461.449763][ T28] audit: type=1400 audit(2000001276.863:4439): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1461.474405][T24365] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5243'. [ 1461.476696][ T28] audit: type=1400 audit(2000001276.863:4440): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1461.537464][ T28] audit: type=1400 audit(2000001276.863:4441): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1461.560897][ T28] audit: type=1400 audit(2000001278.808:4442): avc: denied { write } for pid=24330 comm="syz.6.5236" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1462.171256][T24332] ip6_vti0 speed is unknown, defaulting to 1000 [ 1462.847700][T24379] ip6_vti0 speed is unknown, defaulting to 1000 [ 1462.865080][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.561034][T24394] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5251'. [ 1463.785818][T24409] __nla_validate_parse: 8 callbacks suppressed [ 1463.785854][T24409] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5255'. [ 1463.809528][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5255'. [ 1463.818979][T24409] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5255'. [ 1463.828935][T24408] loop6: detected capacity change from 0 to 4096 [ 1463.841485][T24408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.909669][T24408] ip6_vti0 speed is unknown, defaulting to 1000 [ 1464.038212][T24419] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1464.139149][T24416] ip6_vti0 speed is unknown, defaulting to 1000 [ 1464.595797][T24429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5263'. [ 1464.604928][T24429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5263'. [ 1464.614121][T24429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5263'. [ 1464.720329][T24435] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5265'. [ 1464.729884][T24435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5265'. [ 1464.768050][T24435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5265'. [ 1464.782510][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1464.782528][ T28] audit: type=1400 audit(2000001282.382:4454): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.810814][ T28] audit: type=1400 audit(2000001282.382:4455): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.833293][ T28] audit: type=1400 audit(2000001282.382:4456): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.855817][ T28] audit: type=1400 audit(2000001282.382:4457): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.879112][ T28] audit: type=1400 audit(2000001282.382:4458): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.901584][ T28] audit: type=1400 audit(2000001282.382:4459): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.970789][ T28] audit: type=1400 audit(2000001282.382:4460): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.994126][ T28] audit: type=1400 audit(2000001282.382:4461): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1465.016963][ T28] audit: type=1400 audit(2000001282.438:4462): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1465.144938][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.430991][T24447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5269'. [ 1465.659439][T24451] ip6_vti0 speed is unknown, defaulting to 1000 [ 1465.835525][T24444] ip6_vti0 speed is unknown, defaulting to 1000 [ 1466.089198][T24461] loop6: detected capacity change from 0 to 1024 [ 1466.121246][T24461] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1466.134662][T24461] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1466.154100][T24461] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1466.176472][T24461] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #2: comm syz.6.5272: iget: bad extra_isize 65535 (inode size 1024) [ 1466.195990][T24461] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1466.196262][T24461] EXT4-fs (loop6): no journal found [ 1466.205449][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1466.205470][ C0] EXT4-fs (loop6): initial error at time 2000001283: ext4_get_journal_inode:5896: inode 2 [ 1466.205501][ C0] EXT4-fs (loop6): last error at time 2000001283: ext4_get_journal_inode:5896: inode 2 [ 1466.237117][T24461] EXT4-fs (loop6): can't get journal size [ 1466.244828][T24461] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.5272: iget: bad extra_isize 65535 (inode size 1024) [ 1466.258692][T24461] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1466.260247][T24461] EXT4-fs (loop6): get root inode failed [ 1466.275470][T24461] EXT4-fs (loop6): mount failed [ 1466.308054][T24461] loop6: detected capacity change from 0 to 512 [ 1466.327008][T24461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1466.353511][T24461] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1466.354394][ T28] audit: type=1400 audit(2000001283.850:4463): avc: denied { write } for pid=24459 comm="syz.6.5272" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1466.427100][T24460] ip6_vti0 speed is unknown, defaulting to 1000 [ 1467.021441][T24478] ip6_vti0 speed is unknown, defaulting to 1000 [ 1467.271653][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.691343][T24505] loop6: detected capacity change from 0 to 4096 [ 1467.805521][T24505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1467.818538][T24507] ip6_vti0 speed is unknown, defaulting to 1000 [ 1467.949005][T24505] ip6_vti0 speed is unknown, defaulting to 1000 [ 1468.198000][T24521] ip6_vti0 speed is unknown, defaulting to 1000 [ 1468.605079][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.626139][T24543] netlink: 'syz.1.5296': attribute type 1 has an invalid length. [ 1468.664443][T24543] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1469.632300][T24576] __nla_validate_parse: 27 callbacks suppressed [ 1469.632895][T24576] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5303'. [ 1469.730198][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5303'. [ 1469.840302][T24576] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5303'. [ 1471.116675][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5307'. [ 1471.162443][T24597] loop6: detected capacity change from 0 to 4096 [ 1471.201256][T24592] ip6_vti0 speed is unknown, defaulting to 1000 [ 1471.228386][T24597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1471.249852][T24594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5305'. [ 1471.254687][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1471.254705][ T28] audit: type=1400 audit(2000001288.434:4474): avc: denied { write } for pid=24596 comm="syz.6.5308" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1471.326199][T24594] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5305'. [ 1471.394065][T24609] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1471.403549][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1471.426140][T24609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1471.593688][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5311'. [ 1471.854556][T24618] ip6_vti0 speed is unknown, defaulting to 1000 [ 1471.970493][ T28] audit: type=1400 audit(2000001288.920:4475): avc: denied { getopt } for pid=24613 comm="syz.3.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1472.049882][ T28] audit: type=1400 audit(2000001289.182:4476): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1472.079040][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.102531][ T28] audit: type=1400 audit(2000001289.182:4477): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1472.152037][ T28] audit: type=1400 audit(2000001289.210:4478): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1472.406230][T24631] ip6_vti0 speed is unknown, defaulting to 1000 [ 1472.840950][ T28] audit: type=1400 audit(2000001289.210:4479): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1472.863144][ T28] audit: type=1400 audit(2000001289.210:4480): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1472.885153][ T28] audit: type=1400 audit(2000001289.210:4481): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1472.997066][ T28] audit: type=1400 audit(2000001289.210:4482): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1473.048856][T24642] xt_policy: output policy not valid in PREROUTING and INPUT [ 1473.194753][ T28] audit: type=1400 audit(2000001289.210:4483): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1474.157724][T24667] loop6: detected capacity change from 0 to 4096 [ 1474.192348][T24667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1474.552490][T24677] ip6_vti0 speed is unknown, defaulting to 1000 [ 1474.815242][T24688] ip6_vti0 speed is unknown, defaulting to 1000 [ 1475.096839][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.220423][T24713] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1475.308547][T24716] __nla_validate_parse: 19 callbacks suppressed [ 1475.308566][T24716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5339'. [ 1475.324211][T24716] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5339'. [ 1475.349602][T24718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1475.419121][T24720] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5341'. [ 1475.430696][T24720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5341'. [ 1475.442684][T24720] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5341'. [ 1475.514335][T24727] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1475.557352][T24724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5343'. [ 1475.585318][T24731] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1475.601075][T24704] ip6_vti0 speed is unknown, defaulting to 1000 [ 1476.508154][T24743] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5346'. [ 1476.745610][ T28] kauditd_printk_skb: 274 callbacks suppressed [ 1476.745629][ T28] audit: type=1400 audit(2000001293.578:4758): avc: denied { accept } for pid=24749 comm="syz.5.5348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1476.979906][T24762] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1477.218434][T24764] ip6_vti0 speed is unknown, defaulting to 1000 [ 1477.687778][T24788] 9pnet_fd: p9_fd_create_unix (24788): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1479.084233][T24804] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1479.198798][T24804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1479.372014][T24809] veth1_to_bond: entered allmulticast mode [ 1479.392756][T24808] veth1_to_bond: left allmulticast mode [ 1479.398468][ T28] audit: type=1400 audit(2000001296.057:4759): avc: denied { setopt } for pid=24808 comm="syz.1.5365" lport=42937 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1479.660000][T24827] hub 8-0:1.0: USB hub found [ 1479.664752][T24827] hub 8-0:1.0: 8 ports detected [ 1479.770149][ T28] audit: type=1400 audit(2000001296.403:4760): avc: denied { map } for pid=24830 comm="syz.1.5372" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1479.853428][T24837] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1479.867602][T24837] bond6: (slave lo): making interface the new active one [ 1479.876583][T24837] bond6: (slave lo): Enslaving as an active interface with an up link [ 1479.901197][T24837] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1480.001676][ T28] audit: type=1400 audit(2000001296.628:4761): avc: denied { read } for pid=24838 comm="syz.1.5376" name="file1" dev="tmpfs" ino=5984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1480.037075][ T28] audit: type=1400 audit(2000001296.628:4762): avc: denied { watch } for pid=24838 comm="syz.1.5376" path="/1095/file1" dev="tmpfs" ino=5984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1481.668669][ T9675] usb usb8-port1: attempt power cycle [ 1483.636047][ T9675] usb usb8-port1: unable to enumerate USB device [ 1483.681769][T24855] loop6: detected capacity change from 0 to 2048 [ 1483.701467][T24857] __nla_validate_parse: 30 callbacks suppressed [ 1483.701487][T24857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1483.743320][T24852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1483.760557][T24855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1483.777608][T24853] ip6_vti0 speed is unknown, defaulting to 1000 [ 1483.877838][T24857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1483.897654][T24852] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1484.196171][ T28] audit: type=1400 audit(2000001300.500:4763): avc: denied { write } for pid=24851 comm="syz.6.5378" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.256661][ T28] audit: type=1400 audit(2000001300.500:4764): avc: denied { create } for pid=24851 comm="syz.6.5378" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.445400][ T28] audit: type=1400 audit(2000001300.528:4765): avc: denied { write } for pid=24851 comm="syz.6.5378" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.469012][ T28] audit: type=1400 audit(2000001300.528:4766): avc: denied { write } for pid=24851 comm="syz.6.5378" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.530215][ T28] audit: type=1400 audit(2000001300.528:4767): avc: denied { write } for pid=24851 comm="syz.6.5378" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.555584][ T28] audit: type=1400 audit(2000001300.528:4768): avc: denied { rename } for pid=24851 comm="syz.6.5378" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.658113][ T28] audit: type=1400 audit(2000001300.528:4769): avc: denied { reparent } for pid=24851 comm="syz.6.5378" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.689658][ T28] audit: type=1400 audit(2000001300.528:4770): avc: denied { add_name } for pid=24851 comm="syz.6.5378" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1484.692777][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.853096][T24886] netlink: 'syz.5.5386': attribute type 4 has an invalid length. [ 1484.876608][T24886] netlink: 'syz.5.5386': attribute type 4 has an invalid length. [ 1486.846326][T24892] loop6: detected capacity change from 0 to 2048 [ 1487.066349][T24891] netlink: 'syz.6.5387': attribute type 1 has an invalid length. [ 1488.049514][T24901] netlink: 'syz.5.5390': attribute type 21 has an invalid length. [ 1488.057462][T24901] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5390'. [ 1488.728213][T24910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5394'. [ 1488.743574][T24908] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5393'. [ 1488.753500][T24908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5393'. [ 1488.770305][T24909] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5394'. [ 1488.783403][T24908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5393'. [ 1489.112249][T24926] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1489.125725][T24926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1489.248370][T24934] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1489.270134][T24934] __nla_validate_parse: 5 callbacks suppressed [ 1489.270174][T24934] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1489.316531][T24937] loop6: detected capacity change from 0 to 1024 [ 1489.334353][T24937] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 1489.391640][T24940] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5403'. [ 1490.060229][T24953] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5407'. [ 1490.079946][T24953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5407'. [ 1490.104403][T24947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5405'. [ 1490.114322][T24947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5405'. [ 1490.123545][T24947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5405'. [ 1490.206277][T24949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5406'. [ 1490.215863][T24949] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5406'. [ 1490.364979][T24956] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5408'. [ 1490.422117][T24965] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1490.466727][T24968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.475863][T24968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.965777][T25011] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1492.032033][T25017] loop6: detected capacity change from 0 to 1024 [ 1492.057830][T25017] EXT4-fs: test_dummy_encryption option not supported [ 1492.728982][T25028] loop6: detected capacity change from 0 to 512 [ 1492.742997][T25028] EXT4-fs: Ignoring removed orlov option [ 1492.867784][T25028] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1492.983594][T25028] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5426: invalid indirect mapped block 32768 (level 2) [ 1492.999229][T25028] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1493.000544][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1493.017312][ C1] EXT4-fs (loop6): initial error at time 2000001308: ext4_free_branches:1023: inode 16 [ 1493.027959][ C1] EXT4-fs (loop6): last error at time 2000001308: ext4_free_branches:1023: inode 16 [ 1493.048301][T25028] EXT4-fs (loop6): 1 orphan inode deleted [ 1493.054258][T25028] EXT4-fs (loop6): 1 truncate cleaned up [ 1493.061648][T25028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1493.650884][T25031] ip6_vti0 speed is unknown, defaulting to 1000 [ 1493.832072][T25035] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1494.292921][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.577125][T25061] ip6_vti0 speed is unknown, defaulting to 1000 [ 1494.686646][T25067] ip6_vti0 speed is unknown, defaulting to 1000 [ 1494.774891][T25031] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1494.959620][T25091] __nla_validate_parse: 22 callbacks suppressed [ 1494.959696][T25091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5445'. [ 1495.220928][T25098] loop6: detected capacity change from 0 to 512 [ 1496.028347][T25098] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1496.814295][T25098] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1496.828031][T25098] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.5443: Block bitmap for bg 0 marked uninitialized [ 1496.843044][T25098] loop6: lost filesystem error report for type 5 error -117 [ 1496.849140][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1496.862897][ C0] EXT4-fs (loop6): initial error at time 2000001312: ext4_read_block_bitmap_nowait:517 [ 1496.872576][ C0] EXT4-fs (loop6): last error at time 2000001312: ext4_read_block_bitmap_nowait:517 [ 1497.220052][T25098] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1497.230542][T25098] loop6: lost filesystem error report for type 5 error -117 [ 1497.840308][T25098] EXT4-fs (loop6): 1 orphan inode deleted [ 1498.537050][T25118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5450'. [ 1498.583901][T25118] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5450'. [ 1498.622331][T25121] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5449'. [ 1498.631670][T25121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5449'. [ 1498.640935][T25121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5449'. [ 1498.680975][T25123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5451'. [ 1498.717098][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5451'. [ 1498.775148][T25098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1498.856704][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.198865][T25143] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1499.358925][T25149] ip6_vti0 speed is unknown, defaulting to 1000 [ 1499.489755][T25150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1500.602926][T25161] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5460'. [ 1501.158454][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5460'. [ 1501.454614][T25153] ip6_vti0 speed is unknown, defaulting to 1000 [ 1501.500191][T25175] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1501.521104][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1501.553474][T25175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1501.604712][T25172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5461'. [ 1501.778618][T25172] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5461'. [ 1502.658882][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'. [ 1502.667991][T25185] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5465'. [ 1502.752239][T25199] ip6_vti0 speed is unknown, defaulting to 1000 [ 1502.908268][T25208] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5470'. [ 1502.957782][T25203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=25203 comm=syz.3.5469 [ 1503.021911][ T28] audit: type=1400 audit(2000001318.076:4771): avc: denied { write } for pid=25201 comm="syz.3.5469" path="socket:[81826]" dev="sockfs" ino=81826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1503.250187][ T28] audit: type=1400 audit(2000001318.366:4772): avc: denied { ioctl } for pid=25213 comm="syz.3.5471" path="socket:[81846]" dev="sockfs" ino=81846 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1503.323227][ T28] audit: type=1400 audit(2000001318.394:4773): avc: denied { accept } for pid=25213 comm="syz.3.5471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1503.345040][ T28] audit: type=1400 audit(2000001318.404:4774): avc: denied { read } for pid=25213 comm="syz.3.5471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1503.621615][T25228] ip6_vti0 speed is unknown, defaulting to 1000 [ 1504.636935][T25271] ip6_vti0 speed is unknown, defaulting to 1000 [ 1506.035975][T25315] netlink: 'syz.1.5494': attribute type 3 has an invalid length. [ 1506.043833][T25315] netlink: 'syz.1.5494': attribute type 7 has an invalid length. [ 1506.051568][T25315] netlink: 'syz.1.5494': attribute type 8 has an invalid length. [ 1506.059323][T25315] netlink: 'syz.1.5494': attribute type 7 has an invalid length. [ 1506.067185][T25315] __nla_validate_parse: 22 callbacks suppressed [ 1506.067274][T25315] netlink: 157484 bytes leftover after parsing attributes in process `syz.1.5494'. [ 1506.553494][T25279] ip6_vti0 speed is unknown, defaulting to 1000 [ 1506.643695][T25313] ip6_vti0 speed is unknown, defaulting to 1000 [ 1506.735017][T25326] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1506.899869][T25330] loop6: detected capacity change from 0 to 1024 [ 1506.911458][T25330] ext4: Unknown parameter 'hash' [ 1507.013242][T25333] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5503'. [ 1507.022885][T25333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5503'. [ 1507.101286][T25333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5503'. [ 1507.924848][T25340] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5504'. [ 1508.632107][T25346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5506'. [ 1508.669600][T25348] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1508.694957][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1508.704368][T25346] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5506'. [ 1508.733489][T25348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1509.104707][ T28] audit: type=1400 audit(2000001323.820:4775): avc: denied { connect } for pid=25350 comm="syz.4.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1509.978767][ T28] audit: type=1400 audit(2000001324.521:4776): avc: denied { ioctl } for pid=25350 comm="syz.4.5508" path="socket:[83137]" dev="sockfs" ino=83137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1510.052776][T15654] tipc: Subscription rejected, illegal request [ 1512.098597][T25373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5512'. [ 1512.191997][T25372] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5512'. [ 1512.795065][T25373] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5512'. [ 1512.964517][T25389] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5516'. [ 1512.975912][T25389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5516'. [ 1512.985416][T25389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5516'. [ 1513.412273][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5520'. [ 1513.560930][T25401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5520'. [ 1513.599840][T25400] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5520'. [ 1515.000128][ T28] audit: type=1326 audit(2000001329.198:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.4.5519" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94bee8ce59 code=0x0 [ 1516.253735][T25423] tipc: Can't bind to reserved service type 0 [ 1516.482866][T25429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5527'. [ 1517.699161][T25441] __nla_validate_parse: 4 callbacks suppressed [ 1517.699180][T25441] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5529'. [ 1517.715497][T25441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5529'. [ 1517.795236][T25441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5529'. [ 1518.029712][T25446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1518.408194][T25449] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1519.120620][T25446] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1519.144221][T25455] netlink: 'syz.3.5534': attribute type 5 has an invalid length. [ 1519.599330][T25457] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1519.606505][T25459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5536'. [ 1519.617587][T25455] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5534'. [ 1519.627625][T25455] xt_TCPMSS: Only works on TCP SYN packets [ 1520.119212][T25478] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1520.138800][T25478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5538'. [ 1520.547270][T25481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1520.640864][T25482] tmpfs: Cannot disable swap on remount [ 1520.702537][T25481] ip6gre2: entered promiscuous mode [ 1520.715977][T25481] ip6gre2: entered allmulticast mode [ 1520.757565][T25481] netlink: 'syz.1.5542': attribute type 6 has an invalid length. [ 1521.023938][T25486] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1521.377041][T25496] netlink: 'syz.5.5545': attribute type 21 has an invalid length. [ 1522.213685][T25494] ip6_vti0 speed is unknown, defaulting to 1000 [ 1522.496495][T25506] loop6: detected capacity change from 0 to 2048 [ 1522.608812][T25506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1523.744358][ T28] audit: type=1400 audit(2000001336.803:4778): avc: denied { write } for pid=25505 comm="syz.6.5548" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1523.777595][T19736] page_pool_release_retry() stalled pool shutdown: id 68, 51 inflight 304 sec [ 1523.889636][T25529] __nla_validate_parse: 11 callbacks suppressed [ 1523.889673][T25529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1523.923579][T25532] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5555'. [ 1523.937614][T25529] ip6gre1: entered promiscuous mode [ 1523.939306][T25532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5555'. [ 1523.943296][T25529] ip6gre1: entered allmulticast mode [ 1523.952021][T25532] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5555'. [ 1523.969159][T25534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1524.339346][T25546] xt_policy: output policy not valid in PREROUTING and INPUT [ 1524.560449][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.241468][T25573] loop6: detected capacity change from 0 to 1024 [ 1525.283062][T25573] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1525.315082][T25573] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1525.703145][T25573] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1525.753261][T25573] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #2: comm syz.6.5562: iget: bad extra_isize 65535 (inode size 1024) [ 1525.793682][T25573] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1525.793858][T25573] EXT4-fs (loop6): no journal found [ 1525.803079][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1525.803099][ C0] EXT4-fs (loop6): initial error at time 2000001339: ext4_get_journal_inode:5896: inode 2 [ 1525.803128][ C0] EXT4-fs (loop6): last error at time 2000001339: ext4_get_journal_inode:5896: inode 2 [ 1525.895660][T25573] EXT4-fs (loop6): can't get journal size [ 1525.901842][T25573] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.5562: iget: bad extra_isize 65535 (inode size 1024) [ 1525.927738][T25573] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1525.995208][T25573] EXT4-fs (loop6): get root inode failed [ 1526.023687][T25573] EXT4-fs (loop6): mount failed [ 1526.060245][T25573] loop6: detected capacity change from 0 to 512 [ 1526.081921][T25573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1526.132700][ T28] audit: type=1400 audit(2000001339.778:4779): avc: denied { write } for pid=25567 comm="syz.6.5562" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1526.155852][T25568] ip6_vti0 speed is unknown, defaulting to 1000 [ 1526.360645][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.405311][T25577] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1526.430911][T25577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1526.463728][T25577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1527.210935][T25597] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5571'. [ 1527.246756][T25597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5571'. [ 1528.306471][T25605] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 1528.874966][T25616] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1528.972461][T25613] ip6_vti0 speed is unknown, defaulting to 1000 [ 1529.337534][T25636] __nla_validate_parse: 9 callbacks suppressed [ 1529.337555][T25636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1529.394869][T25627] ip6_vti0 speed is unknown, defaulting to 1000 [ 1529.432199][T25629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1529.443698][T25629] tmpfs: Cannot disable swap on remount [ 1529.601331][T25646] loop6: detected capacity change from 0 to 1024 [ 1529.621212][T25646] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1529.644940][T25646] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1529.671888][T25646] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1529.695803][T25646] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #2: comm syz.6.5594: iget: bad extra_isize 65535 (inode size 1024) [ 1529.734392][T25646] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1529.735785][T25646] EXT4-fs (loop6): no journal found [ 1529.744926][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1529.744955][ C0] EXT4-fs (loop6): initial error at time 2000001343: ext4_get_journal_inode:5896: inode 2 [ 1529.745003][ C0] EXT4-fs (loop6): last error at time 2000001343: ext4_get_journal_inode:5896: inode 2 [ 1529.779755][T25646] EXT4-fs (loop6): can't get journal size [ 1529.798374][T25646] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.5594: iget: bad extra_isize 65535 (inode size 1024) [ 1529.811885][T25646] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1529.812065][T25646] EXT4-fs (loop6): get root inode failed [ 1529.827198][T25646] EXT4-fs (loop6): mount failed [ 1529.845735][T25646] loop6: detected capacity change from 0 to 512 [ 1529.901599][T25646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1529.921856][ T28] audit: type=1400 audit(2000001343.314:4780): avc: denied { write } for pid=25640 comm="syz.6.5594" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1529.975107][T25641] ip6_vti0 speed is unknown, defaulting to 1000 [ 1530.272956][T25648] ip6_vti0 speed is unknown, defaulting to 1000 [ 1530.662808][ T28] audit: type=1326 audit(2000001343.922:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff283ffce59 code=0x7ffc0000 [ 1530.735848][ T28] audit: type=1326 audit(2000001343.931:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff283ffce59 code=0x7ffc0000 [ 1531.799433][ T28] audit: type=1326 audit(2000001343.931:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff283ffce59 code=0x7ffc0000 [ 1531.825166][ T28] audit: type=1326 audit(2000001343.931:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff283ffce59 code=0x7ffc0000 [ 1532.121094][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.184024][ T28] audit: type=1326 audit(2000001343.931:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff283ffce59 code=0x7ffc0000 [ 1532.213347][ T28] audit: type=1326 audit(2000001343.940:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff283ffcbc2 code=0x7ffc0000 [ 1532.264335][ T28] audit: type=1326 audit(2000001343.959:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff283fbd68e code=0x7ffc0000 [ 1532.363016][ T28] audit: type=1326 audit(2000001343.959:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff283ffcc87 code=0x7ffc0000 [ 1532.418196][ T28] audit: type=1326 audit(2000001343.959:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.5.5589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff283fbd68e code=0x7ffc0000 [ 1532.571656][T25679] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5593'. [ 1532.581084][T25679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5593'. [ 1532.622096][T25681] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5591'. [ 1532.623918][T25679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5593'. [ 1532.644304][T25681] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5591'. [ 1532.654271][T25681] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5591'. [ 1532.816400][T25692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1532.856370][T25693] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1532.860967][T25693] bond1: (slave lo): Enslaving as an active interface with an up link [ 1532.880356][T25693] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1532.948808][T25692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1533.022395][T25709] loop6: detected capacity change from 0 to 512 [ 1533.063071][T25709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1533.075843][T25709] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.275347][T25690] ip6_vti0 speed is unknown, defaulting to 1000 [ 1533.822617][T25723] ip6_vti0 speed is unknown, defaulting to 1000 [ 1533.870299][T25734] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1533.888679][T25734] batman_adv: batadv0: Adding interface: gretap2 [ 1533.896052][T25734] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.925544][T25734] batman_adv: batadv0: Interface activated: gretap2 [ 1534.014531][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1534.147196][T25747] loop6: detected capacity change from 0 to 4096 [ 1534.167727][T25747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.199316][T25752] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1534.260587][T25747] ip6_vti0 speed is unknown, defaulting to 1000 [ 1534.496451][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.606091][T25779] loop6: detected capacity change from 0 to 4096 [ 1534.622403][T25779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.714148][T25784] __nla_validate_parse: 7 callbacks suppressed [ 1534.714186][T25784] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1534.739702][T25784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1534.760188][T25784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1534.821359][T25786] ip6_vti0 speed is unknown, defaulting to 1000 [ 1535.804649][T25799] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1535.819789][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 1535.819857][ T28] audit: type=1400 audit(2000001348.832:4949): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1535.854463][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.863647][T25799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1535.910220][ T28] audit: type=1400 audit(2000001348.832:4950): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.043112][ T28] audit: type=1400 audit(2000001348.832:4951): avc: denied { write } for pid=20249 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.103209][T25803] loop6: detected capacity change from 0 to 4096 [ 1536.152552][T25803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1536.175857][ T28] audit: type=1400 audit(2000001348.832:4952): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.201967][T25805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1536.226385][ T28] audit: type=1400 audit(2000001348.860:4953): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.248678][ T28] audit: type=1400 audit(2000001348.860:4954): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.294902][ T28] audit: type=1400 audit(2000001348.860:4955): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.342707][ T28] audit: type=1400 audit(2000001348.860:4956): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.375688][T25803] ip6_vti0 speed is unknown, defaulting to 1000 [ 1536.391662][ T28] audit: type=1400 audit(2000001348.860:4957): avc: denied { write } for pid=20249 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1536.678310][ T28] audit: type=1400 audit(2000001349.637:4958): avc: denied { connect } for pid=25795 comm="syz.4.5621" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1537.105571][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.189575][T25832] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5634'. [ 1537.234267][T25832] ip6gre1: entered promiscuous mode [ 1537.240201][T25832] ip6gre1: entered allmulticast mode [ 1537.255162][T25837] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5634'. [ 1537.268917][T25841] netlink: 'syz.4.5635': attribute type 5 has an invalid length. [ 1537.295126][T25841] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5635'. [ 1537.312752][T25832] tmpfs: Cannot disable swap on remount [ 1537.316627][T25841] xt_TCPMSS: Only works on TCP SYN packets [ 1537.382842][T25837] netlink: 'syz.6.5634': attribute type 6 has an invalid length. [ 1537.405498][T25837] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5634'. [ 1537.425034][T25834] ip6_vti0 speed is unknown, defaulting to 1000 [ 1537.568658][T25856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=25856 comm=syz.5.5641 [ 1537.610058][T25856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5641'. [ 1537.751294][T25861] loop6: detected capacity change from 0 to 4096 [ 1537.798532][T25861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.095985][T25861] ip6_vti0 speed is unknown, defaulting to 1000 [ 1538.358913][T25875] geneve4: entered allmulticast mode [ 1538.466122][T15654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 1538.551362][T15654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 1538.989378][T15654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 1539.005520][T15654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 1539.159860][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.427618][T25885] ip6_vti0 speed is unknown, defaulting to 1000 [ 1540.835878][T25911] 9pnet_fd: p9_fd_create_unix (25911): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1541.078717][T25912] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1543.379356][T25924] netlink: 'syz.1.5654': attribute type 21 has an invalid length. [ 1543.387410][T25924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1543.397602][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1543.399165][ T28] audit: type=1400 audit(2000001355.885:4981): avc: denied { write } for pid=25917 comm="syz.1.5654" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1544.305522][ T28] audit: type=1400 audit(2000001356.765:4982): avc: denied { cpu } for pid=25919 comm="syz.3.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1544.661555][ T28] audit: type=1400 audit(2000001357.101:4983): avc: denied { setopt } for pid=25936 comm="syz.3.5659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1544.696244][T25941] geneve2: entered allmulticast mode [ 1544.849908][T25948] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1544.866607][ T4836] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 1544.869573][T25948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5659'. [ 1545.637501][ T4836] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 1545.659446][ T4836] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 1545.672758][ T4836] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 1545.753623][ T28] audit: type=1400 audit(2000001357.316:4984): avc: denied { firmware_load } for pid=25936 comm="syz.3.5659" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1547.611458][T25962] netlink: 540 bytes leftover after parsing attributes in process `syz.5.5665'. [ 1547.628346][ T28] audit: type=1400 audit(2000001359.879:4985): avc: denied { unmount } for pid=20249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1547.655903][T25962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5665'. [ 1547.674439][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5663'. [ 1547.697455][T25967] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5666'. [ 1547.706789][T25968] loop6: detected capacity change from 0 to 4096 [ 1547.719947][T25956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5663'. [ 1547.751120][T25968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1547.865838][T25975] ip6_vti0 speed is unknown, defaulting to 1000 [ 1547.948444][T25987] 9pnet_fd: p9_fd_create_unix (25987): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1547.982688][T25968] ip6_vti0 speed is unknown, defaulting to 1000 [ 1548.099494][T25989] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1548.178221][T25994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5674'. [ 1548.178725][T25986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5681'. [ 1548.220529][T25994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5674'. [ 1548.238391][T25986] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5681'. [ 1549.113359][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.337577][T26016] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5679'. [ 1549.354739][T26018] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1549.440029][T26015] geneve2: entered allmulticast mode [ 1549.451272][T15654] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 1549.460166][T15654] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 1549.469037][T15654] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 1549.561001][T15654] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 1549.706864][T26032] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1549.873978][ T28] audit: type=1326 audit(2000001361.975:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1549.953984][ T28] audit: type=1326 audit(2000001361.975:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.037901][ T28] audit: type=1326 audit(2000001361.975:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.098282][ T28] audit: type=1326 audit(2000001361.975:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.165683][ T28] audit: type=1326 audit(2000001361.975:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.235264][ T28] audit: type=1326 audit(2000001361.975:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.263822][ T28] audit: type=1326 audit(2000001361.975:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.765687][ T28] audit: type=1326 audit(2000001361.975:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.791667][ T28] audit: type=1326 audit(2000001361.975:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1550.818065][ T28] audit: type=1326 audit(2000001361.975:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26037 comm="syz.3.5689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74b8b4ce59 code=0x7ffc0000 [ 1551.074776][T26075] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1551.111695][T26072] ip6_vti0 speed is unknown, defaulting to 1000 [ 1551.315514][T26062] ip6_vti0 speed is unknown, defaulting to 1000 [ 1551.836661][T26122] --map-set only usable from mangle table [ 1552.365130][T26136] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1552.381115][T26107] ip6_vti0 speed is unknown, defaulting to 1000 [ 1553.468713][T26170] ip6_vti0 speed is unknown, defaulting to 1000 [ 1553.983185][T26172] __nla_validate_parse: 15 callbacks suppressed [ 1553.983233][T26172] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1554.009329][T26172] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1554.019907][T26168] team0: Port device bond0 removed [ 1554.026999][T26168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1555.474404][T26190] ip6_vti0 speed is unknown, defaulting to 1000 [ 1555.619134][T26202] ip6_vti0 speed is unknown, defaulting to 1000 [ 1555.734690][T26211] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5735'. [ 1555.755835][T26214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5737'. [ 1555.818260][T26214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5737'. [ 1555.831317][T26210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1555.895943][T26226] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5740'. [ 1555.981866][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 1555.981927][ T28] audit: type=1400 audit(2000001367.690:5070): avc: denied { create } for pid=26231 comm="syz.3.5742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1556.014464][T26234] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5752'. [ 1556.376972][T26248] loop6: detected capacity change from 0 to 1024 [ 1556.884265][ T28] audit: type=1400 audit(2000001368.326:5071): avc: denied { create } for pid=26235 comm="syz.1.5743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1557.155511][T26248] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1557.199351][T26248] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1557.212672][ T28] audit: type=1400 audit(2000001368.354:5072): avc: denied { setopt } for pid=26235 comm="syz.1.5743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1557.259369][T26248] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1557.274389][ T28] audit: type=1400 audit(2000001368.906:5073): avc: denied { create } for pid=26256 comm="syz.1.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1557.294501][T26248] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #2: comm syz.6.5747: iget: bad extra_isize 65535 (inode size 1024) [ 1557.294536][T26248] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1557.294707][T26248] EXT4-fs (loop6): no journal found [ 1557.294722][T26248] EXT4-fs (loop6): can't get journal size [ 1557.295029][T26248] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.5747: iget: bad extra_isize 65535 (inode size 1024) [ 1557.295062][T26248] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1557.295174][T26248] EXT4-fs (loop6): get root inode failed [ 1557.295207][T26248] EXT4-fs (loop6): mount failed [ 1557.307344][T26258] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5748'. [ 1557.312905][ T28] audit: type=1400 audit(2000001368.934:5074): avc: denied { write } for pid=26256 comm="syz.1.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1557.350493][T26248] loop6: detected capacity change from 0 to 512 [ 1557.394896][T26241] ip6_vti0 speed is unknown, defaulting to 1000 [ 1557.467224][ T28] audit: type=1400 audit(2000001369.065:5075): avc: denied { setopt } for pid=26256 comm="syz.1.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1557.634036][ T28] audit: type=1400 audit(2000001369.065:5076): avc: denied { connect } for pid=26256 comm="syz.1.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1557.813372][T26269] netlink: 'syz.4.5749': attribute type 4 has an invalid length. [ 1557.829533][T26269] netlink: 'syz.4.5749': attribute type 4 has an invalid length. [ 1557.899194][ T28] audit: type=1400 audit(2000001369.477:5077): avc: denied { execute } for pid=26256 comm="syz.1.5748" path="/1182/memory.events" dev="tmpfs" ino=6438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1558.211474][T26248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1558.292189][T26248] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 1558.301428][ T28] audit: type=1400 audit(2000001369.841:5078): avc: denied { write } for pid=26245 comm="syz.6.5747" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1558.324104][ T28] audit: type=1400 audit(2000001369.841:5079): avc: denied { read write } for pid=26245 comm="syz.6.5747" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1558.328372][T26246] ip6_vti0 speed is unknown, defaulting to 1000 [ 1558.630128][T26279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1558.687007][T26279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1558.732489][T26274] ip6_vti0 speed is unknown, defaulting to 1000 [ 1558.958738][T26280] ip6_vti0 speed is unknown, defaulting to 1000 [ 1560.543484][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.735570][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1562.735677][ T28] audit: type=1400 audit(2000001373.798:5083): avc: denied { block_suspend } for pid=26305 comm="syz.3.5773" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1563.994406][T26325] __nla_validate_parse: 1 callbacks suppressed [ 1563.994566][T26325] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5767'. [ 1564.848087][ T28] audit: type=1400 audit(2000001375.604:5084): avc: denied { create } for pid=26305 comm="syz.3.5773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1566.159956][T26345] netlink: 540 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1566.209234][ T28] audit: type=1400 audit(2000001377.250:5085): avc: denied { read write } for pid=26344 comm="syz.6.5774" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1566.287977][T26345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1566.315737][ T28] audit: type=1400 audit(2000001377.250:5086): avc: denied { open } for pid=26344 comm="syz.6.5774" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1566.383358][T26330] ip6_vti0 speed is unknown, defaulting to 1000 [ 1566.773302][ T28] audit: type=1326 audit(2000001377.783:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26354 comm="syz.3.5776" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74b8b4ce59 code=0x0 [ 1567.367719][T26363] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5778'. [ 1567.493698][T26369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5779'. [ 1567.794861][T26377] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5782'. [ 1569.414566][T26406] pim6reg: entered allmulticast mode [ 1569.435667][T26407] pim6reg: left allmulticast mode [ 1569.561732][ T28] audit: type=1400 audit(2000001380.393:5088): avc: denied { ioctl } for pid=26412 comm="syz.5.5791" path="socket:[87148]" dev="sockfs" ino=87148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1570.324223][ T28] audit: type=1400 audit(2000001381.029:5089): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1570.602118][T26433] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5796'. [ 1570.623047][ T28] audit: type=1400 audit(2000001381.384:5090): avc: denied { search } for pid=3020 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1570.668229][ T28] audit: type=1400 audit(2000001381.384:5091): avc: denied { search } for pid=3020 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1570.759339][T26435] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5796'. [ 1570.776270][ T28] audit: type=1400 audit(2000001381.384:5092): avc: denied { search } for pid=3020 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1570.845893][ T28] audit: type=1400 audit(2000001381.384:5093): avc: denied { read } for pid=3020 comm="dhcpcd" name="n53" dev="tmpfs" ino=22215 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1570.922962][ T28] audit: type=1400 audit(2000001381.384:5094): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n53" dev="tmpfs" ino=22215 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1570.971637][ T28] audit: type=1400 audit(2000001381.403:5095): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n53" dev="tmpfs" ino=22215 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1571.013769][ T28] audit: type=1400 audit(2000001381.562:5096): avc: denied { read } for pid=26440 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1571.039689][ T28] audit: type=1400 audit(2000001381.562:5097): avc: denied { read open } for pid=26440 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1571.262323][T26466] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1571.744650][T26515] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5813'. [ 1571.747525][T26500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1571.793990][T26525] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5815'. [ 1571.950989][T26500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1573.396604][T26557] --map-set only usable from mangle table [ 1574.259551][T26570] ip6_vti0 speed is unknown, defaulting to 1000 [ 1574.490024][T26574] ip6_vti0 speed is unknown, defaulting to 1000 [ 1574.501034][T26583] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5826'. [ 1574.677784][T26557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5822'. [ 1574.833148][T26602] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5832'. [ 1574.947375][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1574.947392][ T28] audit: type=1400 audit(2000001385.435:5113): avc: denied { write } for pid=26601 comm="syz.4.5832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1574.960312][T26606] loop6: detected capacity change from 0 to 256 [ 1575.062732][ T28] audit: type=1400 audit(2000001385.435:5114): avc: denied { read } for pid=26604 comm="syz.6.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1575.111184][ T28] audit: type=1400 audit(2000001385.481:5115): avc: denied { mount } for pid=26604 comm="syz.6.5833" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1575.311347][ T28] audit: type=1400 audit(2000001385.734:5116): avc: denied { unmount } for pid=20249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1575.443474][T26625] netlink: 'syz.1.5835': attribute type 21 has an invalid length. [ 1576.459216][T26630] loop6: detected capacity change from 0 to 8192 [ 1576.502399][T26626] ip6_vti0 speed is unknown, defaulting to 1000 [ 1576.725633][ T28] audit: type=1400 audit(2000001387.043:5117): avc: denied { compute_member } for pid=26646 comm="syz.4.5843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1577.161750][T26649] __nla_validate_parse: 2 callbacks suppressed [ 1577.161814][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5843'. [ 1577.187742][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5843'. [ 1577.242815][T26649] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5843'. [ 1577.392880][T26630] loop6: p1 < > p2 p4 < p5 > [ 1577.419024][T26630] loop6: partition table partially beyond EOD, truncated [ 1577.515012][T26630] loop6: p1 start 134217728 is beyond EOD, truncated [ 1577.574036][ T28] audit: type=1400 audit(2000001387.764:5118): avc: denied { ioctl } for pid=26629 comm="syz.6.5840" path="socket:[88403]" dev="sockfs" ino=88403 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1577.676182][T26630] loop6: p2 size 591360 extends beyond EOD, truncated [ 1577.684749][T26630] loop6: p5 size 591360 extends beyond EOD, truncated [ 1577.999808][T26654] ip6_vti0 speed is unknown, defaulting to 1000 [ 1578.109735][T26674] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5848'. [ 1578.421618][ T28] audit: type=1400 audit(2000001388.643:5119): avc: denied { write } for pid=26672 comm="syz.1.5849" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1578.593041][ T28] audit: type=1400 audit(2000001388.652:5120): avc: denied { open } for pid=26672 comm="syz.1.5849" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1579.348475][T26693] netlink: 'syz.3.5854': attribute type 29 has an invalid length. [ 1579.635755][T26699] netlink: 'syz.6.5855': attribute type 21 has an invalid length. [ 1579.644519][ T28] audit: type=1326 audit(2000001389.466:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.5.5852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff283ffce59 code=0x0 [ 1579.719395][T26699] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5855'. [ 1580.050896][T26699] loop6: detected capacity change from 0 to 256 [ 1580.209369][T26697] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1580.444315][T26694] netlink: 'syz.3.5854': attribute type 29 has an invalid length. [ 1580.791955][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1580.799043][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1581.533571][ T28] audit: type=1400 audit(2000001391.515:5122): avc: denied { setopt } for pid=26709 comm="syz.4.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1581.903727][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1581.910789][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1582.321451][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1582.573290][ T28] audit: type=1400 audit(2000001391.627:5123): avc: denied { sqpoll } for pid=26711 comm="syz.3.5858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1582.740417][T26724] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5861'. [ 1583.015576][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1583.022675][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1583.250989][T26736] ip6_vti0 speed is unknown, defaulting to 1000 [ 1583.571263][ T28] audit: type=1400 audit(2000001393.498:5124): avc: denied { listen } for pid=26758 comm="syz.5.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1583.599835][ T28] audit: type=1400 audit(2000001393.507:5125): avc: denied { write } for pid=26741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.622926][ T28] audit: type=1400 audit(2000001393.526:5126): avc: denied { shutdown } for pid=26758 comm="syz.5.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1583.642610][ T28] audit: type=1400 audit(2000001393.554:5127): avc: denied { write } for pid=26767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.866413][ T28] audit: type=1400 audit(2000001393.778:5128): avc: denied { bind } for pid=26774 comm="syz.4.5870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1583.924689][ T28] audit: type=1400 audit(2000001393.778:5129): avc: denied { bind } for pid=26774 comm="syz.4.5870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1583.963013][ T28] audit: type=1400 audit(2000001393.778:5130): avc: denied { write } for pid=26774 comm="syz.4.5870" name="icmp" dev="proc" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1584.135764][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1584.153653][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1584.227166][ T28] audit: type=1400 audit(2000001394.115:5131): avc: denied { setopt } for pid=26774 comm="syz.4.5870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1584.251400][T26788] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5872'. [ 1584.524109][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 1584.581110][T26791] ip6_vti0 speed is unknown, defaulting to 1000 [ 1585.239177][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1586.350995][ C0] net_ratelimit: 1 callbacks suppressed [ 1586.351015][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1586.363742][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1587.238571][T26798] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1587.462842][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1587.470037][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1587.568653][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1587.568680][ T28] audit: type=1400 audit(2000001397.230:5133): avc: denied { nlmsg_read } for pid=26805 comm="syz.3.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1588.035692][ T28] audit: type=1400 audit(2000001397.642:5134): avc: denied { map } for pid=26796 comm="syz.5.5876" path="socket:[88746]" dev="sockfs" ino=88746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1588.073305][T26809] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1588.173515][T26802] loop6: detected capacity change from 0 to 4096 [ 1588.180898][ T28] audit: type=1400 audit(2000001397.651:5135): avc: denied { write } for pid=26805 comm="syz.3.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1588.223990][T26802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1588.289642][ T28] audit: type=1400 audit(2000001397.651:5136): avc: denied { mounton } for pid=26805 comm="syz.3.5877" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1588.387621][ T28] audit: type=1400 audit(2000001397.651:5137): avc: denied { create } for pid=26805 comm="syz.3.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1588.478787][ T28] audit: type=1400 audit(2000001397.660:5138): avc: denied { sys_admin } for pid=26805 comm="syz.3.5877" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1588.501589][ T28] audit: type=1400 audit(2000001397.670:5139): avc: denied { unmount } for pid=26805 comm="syz.3.5877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1588.526786][T19733] page_pool_release_retry() stalled pool shutdown: id 68, 51 inflight 364 sec [ 1588.527997][ T28] audit: type=1400 audit(2000001397.950:5140): avc: denied { write } for pid=26801 comm="syz.6.5879" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1588.559818][T26799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5876'. [ 1588.569617][T26799] tipc: Started in network mode [ 1588.574697][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1588.574765][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1588.589629][T26799] tipc: Node identity 61616107, cluster identity 4711 [ 1588.596843][T26799] tipc: Node number set to 1633771783 [ 1588.730103][T26802] ip6_vti0 speed is unknown, defaulting to 1000 [ 1588.936264][ T28] audit: type=1400 audit(2000001398.259:5141): avc: denied { write } for pid=26794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1588.937323][T26833] veth0: Caught tx_queue_len zero misconfig [ 1589.055302][ T28] audit: type=1400 audit(2000001398.624:5142): avc: denied { write } for pid=26835 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1589.508991][T26843] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5884'. [ 1589.558405][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.687080][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1589.694731][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1589.807840][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5888'. [ 1590.798307][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1590.805452][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1591.149374][T26865] netlink: 'syz.4.5889': attribute type 21 has an invalid length. [ 1591.910151][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1591.917916][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1591.926838][T26856] pim6reg: entered allmulticast mode [ 1592.007733][T26865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5889'. [ 1592.308122][T26870] pim6reg: left allmulticast mode [ 1593.021958][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1593.029047][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1593.454978][T26887] loop6: detected capacity change from 0 to 8192 [ 1593.522570][T26891] ip6_vti0 speed is unknown, defaulting to 1000 [ 1594.133759][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1594.139592][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 1594.139672][ T28] audit: type=1400 audit(2000001403.132:5236): avc: denied { connect } for pid=26877 comm="syz.4.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1594.140923][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1594.224859][T26911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1594.286395][ T28] audit: type=1400 audit(2000001403.450:5237): avc: denied { ioctl } for pid=26877 comm="syz.4.5892" path="socket:[87991]" dev="sockfs" ino=87991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1594.286422][T14394] tipc: Subscription rejected, illegal request [ 1594.328558][ T28] audit: type=1400 audit(2000001403.460:5238): avc: denied { write } for pid=26906 comm="syz.1.5898" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1594.398559][T26887] loop6: p1 < > p2 p4 < p5 > [ 1594.434982][T26887] loop6: partition table partially beyond EOD, truncated [ 1594.468082][T26887] loop6: p1 start 134217728 is beyond EOD, truncated [ 1594.495083][ T28] audit: type=1400 audit(2000001403.460:5239): avc: denied { ioctl } for pid=26906 comm="syz.1.5898" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1594.525933][T26887] loop6: p2 size 591360 extends beyond EOD, truncated [ 1594.749120][T26887] loop6: p5 size 591360 extends beyond EOD, truncated [ 1594.789415][T26916] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5899'. [ 1594.986727][T26927] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 1595.006531][T26927] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 1595.025616][T26925] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5902'. [ 1595.054957][ T28] audit: type=1400 audit(2000001404.236:5240): avc: denied { read } for pid=26926 comm="syz.1.5903" path="socket:[88896]" dev="sockfs" ino=88896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1595.245835][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1595.253166][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1595.393833][ T28] audit: type=1400 audit(2000001404.554:5241): avc: denied { bind } for pid=26936 comm="syz.5.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1595.460881][T26939] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5906'. [ 1595.538722][T26941] loop6: detected capacity change from 0 to 1764 [ 1595.549535][T26941] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 1596.357409][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1596.407015][ T28] audit: type=1400 audit(2000001404.610:5242): avc: denied { accept } for pid=26936 comm="syz.5.5906" lport=33825 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1596.432037][ T28] audit: type=1400 audit(2000001404.938:5243): avc: denied { map } for pid=26936 comm="syz.5.5906" path="socket:[89102]" dev="sockfs" ino=89102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1597.074193][ T28] audit: type=1400 audit(2000001404.956:5244): avc: denied { read } for pid=26936 comm="syz.5.5906" path="socket:[89102]" dev="sockfs" ino=89102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1597.469719][ C0] net_ratelimit: 1 callbacks suppressed [ 1597.469763][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1597.470396][T26972] ip6_vti0 speed is unknown, defaulting to 1000 [ 1597.475749][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1597.497411][T26968] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5911'. [ 1598.061171][T26978] ip6_vti0 speed is unknown, defaulting to 1000 [ 1598.091123][T26986] loop6: detected capacity change from 0 to 512 [ 1598.203641][T26986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1598.221920][T26986] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1598.238397][ T28] audit: type=1400 audit(2000001407.220:5245): avc: denied { read write } for pid=26994 comm="syz.1.5916" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1598.383137][T26997] pim6reg: entered allmulticast mode [ 1598.394618][T26995] pim6reg: left allmulticast mode [ 1598.581056][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1598.588130][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1599.692947][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1599.700032][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1600.522875][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1600.522937][ T28] audit: type=1400 audit(2000001408.866:5255): avc: denied { write } for pid=26984 comm="syz.6.5913" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1600.572335][ T28] audit: type=1400 audit(2000001408.876:5256): avc: denied { create } for pid=26984 comm="syz.6.5913" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1600.804737][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1600.811812][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1601.916547][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1601.923648][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1602.793882][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1602.932986][T19736] usb usb8-port1: attempt power cycle [ 1602.941880][T27039] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5925'. [ 1603.028338][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1603.035418][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1603.218859][T27052] loop6: detected capacity change from 0 to 512 [ 1603.227955][T27050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=27050 comm=syz.5.5929 [ 1603.268848][T27052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1603.296399][T27052] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.525516][T27062] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5932'. [ 1603.840949][ T28] audit: type=1400 audit(2000001412.318:5257): avc: denied { mount } for pid=27051 comm="syz.6.5930" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1603.979124][ T28] audit: type=1400 audit(2000001412.318:5258): avc: denied { write } for pid=27051 comm="syz.6.5930" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1604.035614][T27069] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5934'. [ 1604.140191][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1604.147239][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1604.389908][T20249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1604.439245][ T28] audit: type=1400 audit(2000001413.001:5259): avc: denied { getopt } for pid=27063 comm="syz.1.5933" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1604.534949][ T28] audit: type=1400 audit(2000001413.094:5260): avc: denied { bind } for pid=27074 comm="syz.5.5935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1604.845360][T27071] ================================================================== [ 1604.853562][T27071] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 1604.862270][T27071] [ 1604.864654][T27071] write to 0xffff88810ccebca0 of 8 bytes by task 27072 on cpu 0: [ 1604.872389][T27071] shmem_file_splice_read+0x40e/0x5a0 [ 1604.877801][T27071] splice_direct_to_actor+0x26e/0x670 [ 1604.883283][T27071] do_splice_direct+0x119/0x1a0 [ 1604.888151][T27071] do_sendfile+0x382/0x650 [ 1604.892574][T27071] __x64_sys_sendfile64+0x105/0x150 [ 1604.897793][T27071] x64_sys_call+0x2dc4/0x3020 [ 1604.902485][T27071] do_syscall_64+0x12c/0x3b0 [ 1604.907093][T27071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.912992][T27071] [ 1604.915332][T27071] write to 0xffff88810ccebca0 of 8 bytes by task 27071 on cpu 1: [ 1604.923074][T27071] shmem_file_splice_read+0x40e/0x5a0 [ 1604.928464][T27071] splice_direct_to_actor+0x26e/0x670 [ 1604.933852][T27071] do_splice_direct+0x119/0x1a0 [ 1604.938834][T27071] do_sendfile+0x382/0x650 [ 1604.943346][T27071] __x64_sys_sendfile64+0x105/0x150 [ 1604.948558][T27071] x64_sys_call+0x2dc4/0x3020 [ 1604.953244][T27071] do_syscall_64+0x12c/0x3b0 [ 1604.957849][T27071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.963925][T27071] [ 1604.966250][T27071] value changed: 0x0000000000005513 -> 0x0000000000005519 [ 1604.973359][T27071] [ 1604.975685][T27071] Reported by Kernel Concurrency Sanitizer on: [ 1604.981841][T27071] CPU: 1 UID: 0 PID: 27071 Comm: syz.1.5933 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1604.992783][T27071] Tainted: [W]=WARN [ 1604.996589][T27071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1605.006651][T27071] ================================================================== [ 1605.054240][T19736] usb usb8-port1: unable to enumerate USB device [ 1605.061259][T27007] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.5917' resets device [ 1605.175151][ T28] audit: type=1400 audit(2000001413.702:5261): avc: denied { listen } for pid=27081 comm="syz.6.5937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1605.252324][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1605.259958][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1606.363849][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1606.370950][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1607.475696][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1607.482796][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1608.598159][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1608.605217][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.699306][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1609.706431][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1610.811116][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1610.818196][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1611.922930][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1611.929995][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.034768][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1613.042713][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.146577][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1614.153630][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available