last executing test programs: 8.549361803s ago: executing program 2 (id=306): socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000580)=""/145, 0x91, 0x142, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101, 0x0) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400009000005001500010000000500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r4, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000180)={0x1, 0x0, '\x00', 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@minixdf}]}, 0x1, 0x52d, &(0x7f0000000c40)="$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") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0xc0) 6.920119122s ago: executing program 0 (id=311): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) preadv2(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x8000, 0x9, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000500)="e30c4ce96ec00a1e851099fb477472689ab121a73926f7251319c17d9b66336873f229d4e7d475391f3f2906ad2404ce926a86c9427a5cef20ad7b25a45aaac106bd6896d759775b534dcc80000000000000008e063258195f447b1842af13318f50db421df90591bed0e0187b8bb6bc42e698ff728fa335b2f54f5a75b74e3c8423950428f34f0e72851b5c244b52d8cefe9de02c01ce5d64863e9f5f27315836f319a0dd24919fb85e6605ddec10be60a2b31a2afbcce9fcfc94be", 0xbc, 0x401c5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 6.919804992s ago: executing program 1 (id=312): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='size=E']) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x8845) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r2, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000140), 0x0, 0x300, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x3c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x11}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x2, 0x0) 6.470779673s ago: executing program 2 (id=314): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000300)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380), 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x180, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x97b}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000845}, 0x890) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r6, 0x2, &(0x7f00000001c0)={&(0x7f00000022c0)=""/4116, 0x1014}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 6.468925793s ago: executing program 3 (id=325): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x98, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xf1, 0x9a8e, 0xc9, 0x2, 0x5, 0x1, 0x4}}, {0xc, 0x2, [0x6, 0xc, 0x100, 0x4c3]}}, {{0x1c, 0x1, {0x81, 0x1, 0xdc, 0x10000, 0x2, 0x101, 0x2, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x5, 0x40, 0x6, 0x1, 0x0, 0x84, 0x8, 0x1}}, {0x6, 0x2, [0xea26]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0xf, 0x4}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) syslog(0x4, &(0x7f0000000840)=""/159, 0x9f) r2 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500010000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e17c5ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) 5.957944075s ago: executing program 0 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 5.78335859s ago: executing program 1 (id=317): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xc5}, 0x108084, 0x2, 0x7d5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd2c, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_create_resource$binfmt(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) recvmsg(r5, 0x0, 0x20000020) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) listns(0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0], 0x6, 0x807, &(0x7f0000000280)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) mq_unlink(0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x81ff, &(0x7f0000000040)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x800e0000, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0xffffff81, 0x0, 0x6000}, 0x40004) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x5, 0x4) 5.173525545s ago: executing program 3 (id=319): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$eJzs3N1rXGkZAPDnnHy3qZOKiPWmEZEWxGlaSbFFsJWKN14Ieis0pJMSMv0gE6lJA070HxD1WvBGUIvSC3vdGwVvvXG7t1v2YqEs2WYXlmU3y5mPZJrM5KOZycmmvx+8Oe/HOed9npzMnPNCZgJ4Y41nP9KIMxFxM4koNPrTiBis1YYjqvX91laXpz9aXZ5OYn39Z+8nkUTEy9Xl6ea5ksb2ZKMxHBH/+2ESX/7t9nkri0tzU+Vyab7RvrBw5/6FyuLSd2bvTN0u3S7dvXj5e5OXJi9PXJnsWq4fv3PtyYff+PG71U/+9umjD/7wlySuxWhjrDWPRtYHNh7jG7+TVv0RMdWF8x8FfY18WvNM+nc5KO1xUAAAdJS2PMN9NQrRF5sPb4X49/9zDQ4AAADoivW+iHUAAADgmEus/wEAAOCYa/4fwMvV5elmyfc/Eg7Xi+sRMVbPf61R6iP9Ua1th2MgIk68TKL1Y61J/bADG4+I529f+WdWos3nkHutuhIRX2t3/ZNa/mONT0JvzT+NiIkuzD++pf1Fyv9aF+bPO38A3kxPr9dvZNvvf+nG80+0uf/1t7l3vY6873/N57+1bc9/m/n3dXj+++ke53j41z896DSW5f/9Jz/6R7Nk82fbAyW1Dy9WIr7e3y7/ZCP/pEP+N3c5dxL1UxQ+e1DqtM9e8u/Gd/F0sv7niHPRPv+WPHb6fqILM7Pl0kT9Z9s5Vv47+fdO8x+F63+iQ/47XP/hrO/+K2fq/KU+v7hx4/G2zsbuu+efvjeY/LxWG2z0/GpqYWH+YsRg8pPt/Zd2zre5T/McWf7nv7nz67/d33/2nlBt/G1kqaw0tln7N1vm/MGjh//qFE9z/Zfn9b+1/+tf6/vdHuf41n9+f35rX/M13br+zUo2//OkvhYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKY0IkYjSYsRkdTqaVosRpyMiK/EibR8r7Lw7Zl7v7x7KxuLGIuBdGa2XJqIiEK9nWTti7X6ZvvSlvZ3I+J0RPyxMFJrF6fvlW/lnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbTkbEaCRpMSLSiFgrpGmxmHdUAAAAQNeN5R0AAAAA0HPW/wAAAHD8Wf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY6fPPn2WRET16kitZAYbYwO5Rgb0Wpp3AEBu+vIOAMhNf94BALnZ5xrf4wIcQ8ku48Nte7N3j6GexAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0XTuzNNnSURUr47USmawMTbQ9oizhxgd0Etp3gEAuenbabD/8OIADt9rv8RPdTcO4PC1X+MDb5Jkl/HhzX2qr44M9SwmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6e0VpJ0mJEpLV6mhaLEaciYiwGkpnZcmkiIr4UEW8VBoay9lDeQQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB1lcWlualyuTT/OpXkYIerqHSq/Hq+sjgSuYdxuJXkaIRRr+T9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB4qi0tzU+Vyab6SdyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3iqLS3NT5XJpfg+Vx/vZuaWSd44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOTn8wAAAP//XiMNCQ==") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='size=E']) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x8845) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r2, &(0x7f0000000840)=@target={'target ', {'PCI:', '0', ':', '10', ':', '2', '.', '5'}}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r3, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000140), 0x0, 0x300, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x3c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc4}, 0x1, 0x0, 0x0, 0x11}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd98, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r5, &(0x7f0000000000)=0x7, r5, 0x0, 0x2, 0x0) 5.025747708s ago: executing program 0 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000120000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 5.025263568s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 4.819441733s ago: executing program 1 (id=322): socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x10000, 0x1000, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x138) setresgid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="9e", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x1) unshare(0x20000400) socket(0x2000000000000021, 0x2, 0x2) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000000100)={0x0, 0x66}, 0x1, 0x0, 0x0, 0xc011}, 0xc000050) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f00000006c0)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f00000001c0)=0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r5, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setgroups(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.278253926s ago: executing program 0 (id=323): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000040)={0x8, 0x4abd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x2, 0x0, 0x80, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0xffffff80}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) io_uring_setup(0x32c7, &(0x7f0000000300)={0x0, 0x91a2, 0x40000, 0x1, 0x2ea}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) 4.272786186s ago: executing program 3 (id=324): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[], 0x0}, 0x94) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7fffff}}, {{0xa, 0x4e08, 0x8001, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r5 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x6a4fbca0687807bb, &(0x7f00000000c0), 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) listen(r3, 0x802) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x7, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8000, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 4.100449371s ago: executing program 2 (id=326): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0xa, 0x4, 0xff, 0x6, 0x3, 0x0, 0x2, 0xfffffffffffffffc}, &(0x7f0000000340)={0xf720, 0x4, 0xa, 0x8, 0x8, 0xd, 0x7, 0x8}, 0x0, &(0x7f0000000540)={r3, r4+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x6]}, 0x8}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFqE0EcBvB/27Td9mLP4mHBi6eivkGQCOKCENmDnlyoXloR0svqKY/hM/hIPkZPva3YXZq6UQ+yySbu7wdhP/IxMHPJ5DCTvHvw8fzs0+WH6vvXSJI0RhHzuI44id3Yi9pO89y9yQdx1zwAgG0znRbjvudAh3aW3jmKiGI/Ig6XqvzbmmYFAAAAAAAAAABAx5z/B4Dhcf7//zebjYvj5vvbr5z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpzXVX3qr+8+p4fANA9+z8ADI/9HwCGx/4PAMPz+s3bl+Msm0zTNIm4mpd5mdfPun/+Ips8Tm+cLEZdlWW+3+Rs8qTu03Z/3Ix/+tv+IB49rPuf3bNXWas/jLNVLx4AAAAAAAAAAAAAAAAAAAA2xGl6q3W/f6/uT//U1+nO7wO07u+P4v5obcsAAAAAAAAAAAAAAAAAAACArXb5+ct5cXHxfiYIt+Eo/mFUEpsxeaGT0PcnEwAAAAAAAAAAAAAAAAAADM/i0m/fMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/iz+/391oe81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPwIwAA//++jJCI") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000110) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) eventfd2(0x1, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000010000012400048020000180070001006374000014000280080002400000000508000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000adcc5c177bf"], 0x78}}, 0x0) fsopen(&(0x7f0000000600)='pvfs2\x00', 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 4.079231951s ago: executing program 4 (id=327): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='size=E']) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x8845) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r2, &(0x7f0000000840)=@target={'target ', {'PCI:', '0', ':', '10', ':', '2', '.', '5'}}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r3, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000140), 0x0, 0x300, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x3c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}, 0x1, 0x0, 0x0, 0x11}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd98, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r5, &(0x7f0000000000)=0x7, r5, 0x0, 0x2, 0x0) 3.011511657s ago: executing program 3 (id=328): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68ec, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x303c}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000000900010073797a300000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000000000a0000000000661bd97d652b5476"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f1000000000000063000000000000009500059e00020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r5, @ANYBLOB="00000000060000008520000039ede63cbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r5, r5, r5, r5], 0x0, 0x10, 0x200}, 0x94) 2.295926424s ago: executing program 4 (id=329): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='size=E']) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x8845) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r2, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000140), 0x0, 0x300, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x3c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x11}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x2, 0x0) 2.03911745s ago: executing program 1 (id=330): setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, 0x0) socket(0x3, 0x80000, 0x3ff) write$cgroup_int(r1, 0x0, 0x0) recvfrom$inet(r1, &(0x7f00000000c0)=""/235, 0xeb, 0x2, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_read_part_table(0x1057, &(0x7f00000006c0)="$eJzszzGKwlAUBdCbzyTkV1PNEqayt3YT1paCpW4gja3uw01GYkJ2ICKc09zHf5cPL3xU0+V02ExTTTKsz0v+jElK7ufbts3lmKSbFzWp5X9alqX6O0dZv+7n2CV9M9bXPLTJ9S/j0ij7x7vvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv8AwAAP//0G4J+w==") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x41, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) listns(&(0x7f0000000080)={0x20, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)=[0x0], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) 1.701137938s ago: executing program 4 (id=331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x98, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xf1, 0x9a8e, 0xc9, 0x2, 0x5, 0x1, 0x4}}, {0xc, 0x2, [0x6, 0xc, 0x100, 0x4c3]}}, {{0x1c, 0x1, {0x81, 0x1, 0xdc, 0x10000, 0x2, 0x101, 0x2, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x5, 0x40, 0x6, 0x1, 0x0, 0x84, 0x8, 0x1}}, {0x6, 0x2, [0xea26]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0xf, 0x4}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) syslog(0x4, &(0x7f0000000840)=""/159, 0x9f) r2 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) 1.699904049s ago: executing program 3 (id=332): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f000100", 0x22) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4004, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xbff}, @in6={0xa, 0x4e25, 0xc8e0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x57}}}, 0x118) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$setflags(r5, 0x2, 0xf342da941ddc3924) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f0000001340)=""/4106, 0x100a}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r7) r8 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) setpriority(0x1, 0xff, 0xfffffffffffffffd) 947.530696ms ago: executing program 2 (id=333): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000001500000000000000", @ANYRES32, @ANYBLOB="0000000000003635000000000000000000006faf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000340), &(0x7f0000000180)=""/122}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000380)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r7, r4, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x104) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) bind$802154_raw(r1, &(0x7f0000000340)={0x24, @none={0x0, 0xffff}}, 0x14) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 947.192387ms ago: executing program 4 (id=334): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="1a1f42b34011"}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800599c6d0e0000ded650492d"], 0xfe33) perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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") r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x9, 0x8001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048895}, 0x8041) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8992, &(0x7f0000000940)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x18\xb1\x00\x00\x00n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) 799.51384ms ago: executing program 0 (id=335): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$eJzs3N1rXGkZAPDnnHy3qZOKiPWmEZEWxGlaSbFFsJWKN14Ieis0pJMSMv0gE6lJA070HxD1WvBGUIvSC3vdGwVvvXG7t1v2YqEs2WYXlmU3y5mPZJrM5KOZycmmvx+8Oe/HOed9npzMnPNCZgJ4Y41nP9KIMxFxM4koNPrTiBis1YYjqvX91laXpz9aXZ5OYn39Z+8nkUTEy9Xl6ea5ksb2ZKMxHBH/+2ESX/7t9nkri0tzU+Vyab7RvrBw5/6FyuLSd2bvTN0u3S7dvXj5e5OXJi9PXJnsWq4fv3PtyYff+PG71U/+9umjD/7wlySuxWhjrDWPRtYHNh7jG7+TVv0RMdWF8x8FfY18WvNM+nc5KO1xUAAAdJS2PMN9NQrRF5sPb4X49/9zDQ4AAADoivW+iHUAAADgmEus/wEAAOCYa/4fwMvV5elmyfc/Eg7Xi+sRMVbPf61R6iP9Ua1th2MgIk68TKL1Y61J/bADG4+I529f+WdWos3nkHutuhIRX2t3/ZNa/mONT0JvzT+NiIkuzD++pf1Fyv9aF+bPO38A3kxPr9dvZNvvf+nG80+0uf/1t7l3vY6873/N57+1bc9/m/n3dXj+++ke53j41z896DSW5f/9Jz/6R7Nk82fbAyW1Dy9WIr7e3y7/ZCP/pEP+N3c5dxL1UxQ+e1DqtM9e8u/Gd/F0sv7niHPRPv+WPHb6fqILM7Pl0kT9Z9s5Vv47+fdO8x+F63+iQ/47XP/hrO/+K2fq/KU+v7hx4/G2zsbuu+efvjeY/LxWG2z0/GpqYWH+YsRg8pPt/Zd2zre5T/McWf7nv7nz67/d33/2nlBt/G1kqaw0tln7N1vm/MGjh//qFE9z/Zfn9b+1/+tf6/vdHuf41n9+f35rX/M13br+zUo2//OkvhYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKY0IkYjSYsRkdTqaVosRpyMiK/EibR8r7Lw7Zl7v7x7KxuLGIuBdGa2XJqIiEK9nWTti7X6ZvvSlvZ3I+J0RPyxMFJrF6fvlW/lnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbTkbEaCRpMSLSiFgrpGmxmHdUAAAAQNeN5R0AAAAA0HPW/wAAAHD8Wf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY6fPPn2WRET16kitZAYbYwO5Rgb0Wpp3AEBu+vIOAMhNf94BALnZ5xrf4wIcQ8ku48Nte7N3j6GexAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0XTuzNNnSURUr47USmawMTbQ9oizhxgd0Etp3gEAuenbabD/8OIADt9rv8RPdTcO4PC1X+MDb5Jkl/HhzX2qr44M9SwmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6e0VpJ0mJEpLV6mhaLEaciYiwGkpnZcmkiIr4UEW8VBoay9lDeQQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB1lcWlualyuTT/OpXkYIerqHSq/Hq+sjgSuYdxuJXkaIRRr+T9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB4qi0tzU+Vyab6SdyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3iqLS3NT5XJpfg+Vx/vZuaWSd44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOTn8wAAAP//XiMNCQ==") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='size=E']) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x8845) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r2, &(0x7f0000000840)=@target={'target ', {'PCI:', '0', ':', '10', ':', '2', '.', '5'}}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r3, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000140), 0x0, 0x300, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x3c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc4}, 0x1, 0x0, 0x0, 0x11}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd98, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r5, &(0x7f0000000000)=0x7, r5, 0x0, 0x2, 0x0) 659.756754ms ago: executing program 1 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000120000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 277.874013ms ago: executing program 1 (id=337): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000300)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380), 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x180, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x97b}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000845}, 0x890) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r6, 0x2, &(0x7f00000001c0)={&(0x7f00000022c0)=""/4116, 0x1014}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 277.586303ms ago: executing program 2 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 277.319793ms ago: executing program 3 (id=339): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002b40)=ANY=[], 0x24, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywFAVLDrEbaHJoLr2UUCilgdIP0HuPoV+g/RKBNhBKMO2hF5WVV44SSbbjKLFS/X6w9szOyrOj2f94ViOhAIbWZPajEPFyRHydRBxqKxuNvHBy/bi1B9fmsi2JRuOTP5NI8n2t45P893ieeSkifvky4kShs97ayupiqVxOl/L8VL1yeaq2snryYqW0kC6kl2ZmZ0+/NTvz7jtv962tr5/7+7uP73xw+qtja9/+dO/wrSTOxMG8rL0dT+F6e2YyJvPnZCzOPHbgdB8qGyTJbp8AOzKSx/lYZGPAoRjJox747/siIhrAkErEPwyp1jygdW/fp/vgF8b999dvgDrbP7r+2kjsa94bHVhLHrkzyu53J/pQf1bHz3/cvpVt0b/XIQC2dP1GRJwaHe0c/5J8/Nu5U9s45vE6jH/w/NzJ5j9vtM1/fmuVFDbmP9Fl/jPeJXZ3Yuv4L9zrQzU9ZfO/97rOfzcWrSZG8tz/mnO+seTCxXKajW3/j4jjMbY3y2+2nnN67W6jV1n7/C/bsvpbc8H8PO6N7n30MfOleulp2tzu/o2IV7rOf5ON/k+69H/2fJzbZh1H09uv9irbuv3PVuPHiNe69v/DFa1k8/XJqeb1MNW6Kjr9dfPor73q3+32Z/1/YPP2TyTt67W1J6/jh33/pL3Kdnr970k+bab35Puulur1pemIPclHnftnHj62lW8dn7X/+LHu8b/Z9b8/Ij7bZvtvHrnZ89BB6P/5J+r/nokkf0RH0d0PP/++V/3b6/83m6nj+Z7tjH+bnunS01zNAAAAAAAAMLgKEXEwkkJxI10oFIvr7+84EgcK5WqtfuJCdfnSfDQ/KzsRY4XWSvd42/shpvP3w7byM4/lZyPicER8M7K/mS/OVcvzu914AAAAAAAAAAAAAAAAAAAAGBDjPT7/n/l9ZLfPDnjmfOU3DK8t478f3/QEDCT//2F4iX8YXuIfhpf4h+El/mF4iX8YXuIfhpf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgL46d/ZstjXWHlyby/LzV1aWF6tXTs6ntcViZXmuOFddulxcqFYXymlxrlrZ6u+Vq9XL0zOxfHWqntbqU7WV1fOV6vKl+vmLldJCej4dey6tAgAAAAAAAAAAAAAAAAAAgBdLbWV1sVQup0sSEjtKjA7GaUj0ObHbIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPRvAAAA//8GMzQ5") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3bd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x240000c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x48400) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x10) rmdir(&(0x7f0000000100)='./control\x00') ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0) 276.846943ms ago: executing program 4 (id=340): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c0200200f910", @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4000, &(0x7f0000000700)={[{@test_dummy_encryption_v1}, {@sysvgroups}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") unshare(0x400) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x4000010, 0xffffffffffffffff, 0x70b2b000) io_uring_setup(0x1b7b, 0x0) listen(0xffffffffffffffff, 0x7) close(0x3) readlink(0x0, &(0x7f0000002000)=""/96, 0x60) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000b00)={r5, r4}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, 0x0, 0x0) 203.514115ms ago: executing program 2 (id=341): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68ec, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x303c}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000000900010073797a300000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000000000a0000000000661bd97d652b5476"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f1000000000000063000000000000009500059e00020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r5, @ANYBLOB="00000000060000008520000039ede63cbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r5, r5, r5, r5], 0x0, 0x10, 0x200}, 0x94) 0s ago: executing program 0 (id=342): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='size=E']) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x8845) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r2, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000140), 0x0, 0x300, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x3c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x11}, 0x40800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 876551][ T28] audit: type=1400 audit(1785052157.820:329): avc: denied { mount } for pid=3738 comm="syz.3.50" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.063098][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.078291][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.123660][ T3742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3742 comm=syz.0.53 [ 54.144529][ T3743] loop3: detected capacity change from 0 to 1024 [ 54.154509][ T3743] EXT4-fs: Ignoring removed bh option [ 54.180884][ T3743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.183069][ T28] audit: type=1400 audit(1785052158.320:330): avc: denied { write } for pid=3738 comm="syz.3.50" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.184744][ T28] audit: type=1400 audit(1785052158.320:331): avc: denied { map } for pid=3738 comm="syz.3.50" path="/11/file1/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.184812][ T28] audit: type=1400 audit(1785052158.320:332): avc: denied { execute } for pid=3738 comm="syz.3.50" path="/11/file1/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.244429][ T3747] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET) [ 54.408821][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.543342][ T3749] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3749 comm=syz.0.55 [ 54.702698][ T28] audit: type=1400 audit(1785052158.840:333): avc: denied { getopt } for pid=3754 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.759229][ T28] audit: type=1400 audit(1785052158.900:334): avc: denied { create } for pid=3756 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.792948][ T3762] loop1: detected capacity change from 0 to 512 [ 54.801199][ T28] audit: type=1400 audit(1785052158.930:335): avc: denied { connect } for pid=3756 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.821588][ T28] audit: type=1400 audit(1785052158.930:336): avc: denied { module_request } for pid=3752 comm="syz.2.52" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.865290][ T3762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.897500][ T3762] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.920270][ T3762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 54.928528][ T3762] System zones: 1-12 [ 54.935088][ T3762] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.949935][ T3774] netlink: 108 bytes leftover after parsing attributes in process `syz.4.58'. [ 54.962403][ T3771] syzkaller0: entered promiscuous mode [ 54.971240][ T3774] netlink: 'syz.4.58': attribute type 3 has an invalid length. [ 54.978962][ T3771] syzkaller0: entered allmulticast mode [ 54.979346][ T3762] EXT4-fs (loop1): 1 truncate cleaned up [ 54.990975][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.043912][ T3774] loop4: detected capacity change from 0 to 4096 [ 55.057535][ T3774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.080363][ T3774] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 55.124144][ T3753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.52'. [ 55.168773][ T3774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.209799][ T3781] loop0: detected capacity change from 0 to 164 [ 55.219668][ T3781] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 55.306044][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.461774][ T3783] loop3: detected capacity change from 0 to 512 [ 55.558853][ T3783] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.59: corrupted inode contents [ 55.570829][ T3783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.573395][ T3783] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.59: mark_inode_dirty error [ 55.582668][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 55.582689][ C0] EXT4-fs (loop3): initial error at time 3932535807: ext4_do_update_inode:5742: inode 16 [ 55.582714][ C0] EXT4-fs (loop3): last error at time 3932535807: ext4_do_update_inode:5742: inode 16 [ 55.619945][ T3783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.632040][ T3783] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.59: corrupted inode contents [ 55.653144][ T3783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.654025][ T3783] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.59: mark_inode_dirty error [ 55.674435][ T3783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.676366][ T3783] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.59: corrupted inode contents [ 55.697514][ T3783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.699948][ T3783] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 55.718110][ T3783] loop3: lost filesystem error report for type 5 error -117 [ 55.719381][ T3783] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.59: corrupted inode contents [ 55.738627][ T3783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.739360][ T3783] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.59: mark_inode_dirty error [ 55.759583][ T3783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.760687][ T3783] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 55.778864][ T3783] loop3: lost filesystem error report for type 5 error -117 [ 55.779865][ T3783] EXT4-fs (loop3): 1 truncate cleaned up [ 55.794457][ T3783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.807624][ T3783] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.842385][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 56.104767][ T3783] syz.3.59 (3783) used greatest stack depth: 9680 bytes left [ 56.295612][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.774769][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.852816][ T3809] loop2: detected capacity change from 0 to 512 [ 57.903317][ T3809] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 57.944128][ T3809] EXT4-fs (loop2): Remounting filesystem read-only [ 57.950746][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 57.950773][ C0] EXT4-fs (loop2): initial error at time 3932535810: ext4_mb_generate_buddy:1317 [ 57.950807][ C0] EXT4-fs (loop2): last error at time 3932535810: ext4_mb_generate_buddy:1317 [ 58.017745][ T3809] EXT4-fs (loop2): 1 truncate cleaned up [ 58.038326][ T3809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.098950][ T3811] bond1: option resend_igmp: invalid value (1243329439) [ 58.113641][ T3818] loop4: detected capacity change from 0 to 512 [ 58.127316][ T3811] bond1: option resend_igmp: allowed values 0 - 255 [ 58.135011][ T3818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.170803][ T3811] bond1 (unregistering): Released all slaves [ 58.190915][ T3818] EXT4-fs (loop4): too many log groups per flexible block group [ 58.206857][ T3818] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 58.221852][ T3818] EXT4-fs (loop4): mount failed [ 58.240957][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 58.240973][ T28] audit: type=1400 audit(3932535809.906:349): avc: denied { read write } for pid=3797 comm="syz.4.61" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.304730][ T28] audit: type=1400 audit(3932535809.906:350): avc: denied { open } for pid=3797 comm="syz.4.61" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.372054][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.393778][ T28] audit: type=1400 audit(3932535810.126:351): avc: denied { write } for pid=3810 comm="syz.1.64" path="socket:[5506]" dev="sockfs" ino=5506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.477104][ T3826] bridge0: port 3(gretap0) entered blocking state [ 58.484623][ T3826] bridge0: port 3(gretap0) entered disabled state [ 58.494668][ T3826] gretap0: entered allmulticast mode [ 58.513882][ T3826] gretap0: entered promiscuous mode [ 58.626799][ T3826] bridge0: port 3(gretap0) entered blocking state [ 58.634872][ T3826] bridge0: port 3(gretap0) entered forwarding state [ 58.707820][ T3383] IPVS: starting estimator thread 0... [ 58.750208][ T3816] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 58.758184][ T28] audit: type=1400 audit(3932535810.906:352): avc: denied { write } for pid=3824 comm="syz.1.67" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.796507][ T3832] IPVS: using max 2256 ests per chain, 112800 per kthread [ 58.805549][ T3835] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 58.814563][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 58.893128][ T3836] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.65'. [ 58.903794][ T3836] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 58.924184][ T28] audit: type=1400 audit(3932535811.016:353): avc: denied { create } for pid=3827 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.086030][ T28] audit: type=1400 audit(3932535811.106:354): avc: denied { name_bind } for pid=3833 comm="syz.0.69" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 59.290443][ T3841] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 59.319507][ T28] audit: type=1400 audit(3932535811.286:355): avc: denied { create } for pid=3833 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 59.578020][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 59.659730][ T28] audit: type=1400 audit(3932535811.326:356): avc: denied { bind } for pid=3838 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.859138][ T28] audit: type=1400 audit(3932535811.336:357): avc: denied { node_bind } for pid=3838 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.649456][ T3854] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 60.662216][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.673767][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.720985][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.729828][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.740746][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.749957][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.787865][ T3854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 60.843752][ T28] audit: type=1400 audit(3932535811.346:358): avc: denied { bind } for pid=3840 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.873586][ T3857] netlink: 'syz.3.74': attribute type 2 has an invalid length. [ 60.953173][ T3857] netlink: 64 bytes leftover after parsing attributes in process `syz.3.74'. [ 61.067528][ T3859] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 61.244305][ T3870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3870 comm=syz.3.74 [ 62.410814][ T3859] bond1 (unregistering): Released all slaves [ 63.545674][ T3877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.942630][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 63.942649][ T28] audit: type=1400 audit(3932535816.086:367): avc: denied { create } for pid=3892 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.062413][ T3889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 64.122048][ T3889] netlink: 'syz.3.78': attribute type 7 has an invalid length. [ 64.289222][ T3889] netlink: 'syz.3.78': attribute type 8 has an invalid length. [ 64.299835][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 65.334408][ T3898] loop0: detected capacity change from 0 to 512 [ 65.781897][ T3917] bridge0: port 3(gretap0) entered disabled state [ 66.337945][ T3917] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.345313][ T3917] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.726234][ T28] audit: type=1400 audit(3932535818.866:368): avc: denied { write } for pid=3903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.764993][ T3897] loop4: detected capacity change from 0 to 512 [ 66.811175][ T3917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.820747][ T3917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.890505][ T361] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.001417][ T3897] EXT4-fs: Ignoring removed oldalloc option [ 67.018834][ T361] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.050727][ T28] audit: type=1400 audit(3932535819.196:369): avc: denied { write } for pid=3933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.383224][ T3898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 67.504011][ T3897] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 67.505159][ T3897] EXT4-fs: failed to create workqueue [ 67.608168][ T3898] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.633971][ T28] audit: type=1400 audit(3932535819.386:370): avc: denied { read write } for pid=3934 comm="syz.2.86" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.688592][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.704867][ T3897] EXT4-fs (loop4): mount failed [ 67.732878][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.758157][ T28] audit: type=1400 audit(3932535819.386:371): avc: denied { open } for pid=3934 comm="syz.2.86" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.784654][ T28] audit: type=1400 audit(3932535819.506:372): avc: denied { bind } for pid=3922 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.824198][ T3931] syz.3.85 (3931) used greatest stack depth: 9152 bytes left [ 67.986631][ T3959] atomic_op ffff88811b8d8d28 conn xmit_atomic 0000000000000000 [ 68.038223][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 68.220001][ T3966] loop4: detected capacity change from 0 to 128 [ 68.226972][ T3966] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.247862][ T3966] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.259406][ T3966] vfat filesystem being mounted at /15/bus supports timestamps until 2107-12-31 (0x10391447e) [ 69.044382][ T28] audit: type=1400 audit(3932535821.186:373): avc: denied { create } for pid=3958 comm="syz.3.90" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.042948][ T28] audit: type=1400 audit(3932535822.186:374): avc: denied { unlink } for pid=3299 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.203569][ T30] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.356555][ T28] audit: type=1400 audit(3932535822.236:375): avc: denied { read } for pid=3951 comm="syz.2.88" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.552867][ T28] audit: type=1400 audit(3932535822.426:376): avc: denied { read } for pid=3973 comm="syz.3.92" path="socket:[6617]" dev="sockfs" ino=6617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.577153][ T28] audit: type=1400 audit(3932535822.536:377): avc: denied { create } for pid=3975 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.596692][ T28] audit: type=1400 audit(3932535822.626:378): avc: denied { setopt } for pid=3975 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.618591][ T28] audit: type=1400 audit(3932535822.626:379): avc: denied { read } for pid=3975 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.639966][ T28] audit: type=1400 audit(3932535822.686:380): avc: denied { write } for pid=3975 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.828997][ T28] audit: type=1400 audit(3932535822.966:381): avc: denied { create } for pid=3985 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.852615][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 70.890685][ T28] audit: type=1400 audit(3932535822.966:382): avc: denied { bind } for pid=3985 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.069523][ T3993] loop0: detected capacity change from 0 to 128 [ 71.105506][ T3988] netlink: 'syz.4.96': attribute type 5 has an invalid length. [ 71.615904][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 71.774548][ T4001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'. [ 72.001541][ T3993] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.017787][ T3993] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.539454][ T4010] loop2: detected capacity change from 0 to 512 [ 72.557942][ T4008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.99'. [ 72.592760][ T4010] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 72.629152][ T4010] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 72.656200][ T4010] EXT4-fs (loop2): 1 truncate cleaned up [ 72.670053][ T4010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.916056][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.136039][ T4025] loop3: detected capacity change from 0 to 512 [ 73.588307][ T4025] ------------[ cut here ]------------ [ 73.593829][ T4025] EA inode 11 i_nlink=2 [ 73.593856][ T4025] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.3.103/4025 [ 73.608875][ T4025] Modules linked in: [ 73.612815][ T4025] CPU: 1 UID: 0 PID: 4025 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.622086][ T4025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.632278][ T4025] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 73.638983][ T4025] Code: e6 c1 96 ff 49 8d 7e 40 4c 8d 2d 4b a0 5a 05 e8 a6 a6 b5 ff 49 8b 6e 40 4c 89 e7 e8 da a1 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 61 e9 d9 03 90 90 90 90 90 90 90 [ 73.658706][ T4025] RSP: 0018:ffffc9000fb077f8 EFLAGS: 00010246 [ 73.658825][ T4005] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 73.664811][ T4025] RAX: ffff8881039f8b30 RBX: ffff8881058b85a8 RCX: ffffffff81c295e6 [ 73.664832][ T4025] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3620 [ 73.664853][ T4025] RBP: 000000000000000b R08: 00018881058b855b R09: 0000000000000000 [ 73.673122][ T4005] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 73.681153][ T4025] R10: ffffc9000fb07728 R11: 0001c9000fb07728 R12: ffff8881058b8558 [ 73.713640][ T4025] R13: ffffffff871d3620 R14: ffff8881058b8510 R15: 0000000000000001 [ 73.721774][ T4025] FS: 00007f2016a956c0(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 73.730821][ T4025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.737475][ T4025] CR2: 00007fe8c6e48000 CR3: 000000011b960000 CR4: 00000000003506f0 [ 73.745498][ T4025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.753595][ T4025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 73.756212][ T4021] loop0: detected capacity change from 0 to 512 [ 73.761669][ T4025] Call Trace: [ 73.761678][ T4025] [ 73.761691][ T4025] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 73.761739][ T4025] ext4_xattr_delete_inode+0x6b5/0x790 [ 73.761778][ T4025] ext4_evict_inode+0xb18/0xdf0 [ 73.761864][ T4025] ? __pfx_ext4_evict_inode+0x10/0x10 [ 73.761892][ T4025] evict+0x2a5/0x510 [ 73.761978][ T4025] iput+0x430/0x5a0 [ 73.762014][ T4025] ext4_process_orphan+0x1a4/0x1c0 [ 73.762062][ T4025] ext4_orphan_cleanup+0x6a6/0xa10 [ 73.762117][ T4025] ? ext4_register_li_request+0x14c/0x440 [ 73.762234][ T4025] ext4_fill_super+0x33ab/0x3760 [ 73.762279][ T4025] ? set_blocksize+0x14c/0x270 [ 73.762336][ T4025] ? __pfx_ext4_fill_super+0x10/0x10 [ 73.762394][ T4025] get_tree_bdev_flags+0x291/0x300 [ 73.762421][ T4025] ? __pfx_ext4_fill_super+0x10/0x10 [ 73.762462][ T4025] get_tree_bdev+0x1f/0x30 [ 73.762487][ T4025] ext4_get_tree+0x1c/0x30 [ 73.819889][ T4021] EXT4-fs: Ignoring removed nobh option [ 73.820493][ T4025] vfs_get_tree+0x57/0x1d0 [ 73.820527][ T4025] do_new_mount+0x288/0x8d0 [ 73.820576][ T4025] path_mount+0x4ad/0xb90 [ 73.820608][ T4025] __se_sys_mount+0x28c/0x2e0 [ 73.820668][ T4025] __x64_sys_mount+0x67/0x80 [ 73.820701][ T4025] x64_sys_call+0x2d61/0x3020 [ 73.820735][ T4025] do_syscall_64+0x136/0x3c0 [ 73.820770][ T4025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.820837][ T4025] RIP: 0033:0x7f201807f10a [ 73.820877][ T4025] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.855107][ T4021] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.855341][ T4025] RSP: 002b:00007f2016a94e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.855366][ T4025] RAX: ffffffffffffffda RBX: 00007f2016a94ee0 RCX: 00007f201807f10a [ 73.855381][ T4025] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f2016a94ea0 [ 73.880249][ T4021] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.102: EA inode hash validation failed [ 73.883584][ T4025] RBP: 00002000000009c0 R08: 00007f2016a94ee0 R09: 0000000000800718 [ 73.883607][ T4025] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 73.883626][ T4025] R13: 00007f2016a94ea0 R14: 000000000000048d R15: 0000200000000200 [ 73.883654][ T4025] [ 73.883664][ T4025] ---[ end trace 0000000000000000 ]--- [ 73.883908][ T4025] EXT4-fs (loop3): 1 orphan inode deleted [ 73.884434][ T4025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.049315][ T4021] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.108442][ T4024] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 74.118376][ T4024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.135584][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.152864][ T4021] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.102: corrupted inode contents [ 74.182994][ T4021] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.186448][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 74.202156][ C0] EXT4-fs (loop0): initial error at time 3932535826: ext4_do_update_inode:5742: inode 15 [ 74.212035][ C0] EXT4-fs (loop0): last error at time 3932535826: ext4_do_update_inode:5742: inode 15 [ 74.276203][ T4021] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.102: mark_inode_dirty error [ 74.292372][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.303674][ T4035] process 'syz.2.105' launched './file0' with NULL argv: empty string added [ 74.306695][ T4021] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.313155][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 74.313172][ T28] audit: type=1400 audit(3932535826.416:391): avc: denied { write } for pid=4034 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.363962][ T4021] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.102: corrupted inode contents [ 74.396246][ T4021] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.407753][ T28] audit: type=1400 audit(3932535826.446:392): avc: denied { execute } for pid=4034 comm="syz.2.105" name="file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.442412][ T4021] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.102: mark_inode_dirty error [ 74.460210][ T4037] loop3: detected capacity change from 0 to 512 [ 74.468793][ T4037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.487484][ T4021] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.495949][ T4021] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.102: mark inode dirty (error -117) [ 74.526097][ T28] audit: type=1400 audit(3932535826.466:393): avc: denied { execute_no_trans } for pid=4034 comm="syz.2.105" path="/18/file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.566917][ T4037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.586370][ T4037] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.604314][ T4021] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.653789][ T4021] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 74.728886][ T4021] EXT4-fs (loop0): 1 orphan inode deleted [ 74.817391][ T4021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.875687][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.171110][ T4048] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 75.458692][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.857685][ T4073] netlink: 280 bytes leftover after parsing attributes in process `syz.4.113'. [ 76.977798][ T28] audit: type=1400 audit(3932535829.126:394): avc: denied { block_suspend } for pid=4076 comm="syz.0.114" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.023263][ T4078] netlink: 'syz.0.114': attribute type 27 has an invalid length. [ 77.132270][ T4079] binfmt_misc: register: failed to install interpreter file ./file2 [ 77.200210][ T28] audit: type=1400 audit(3932535829.216:395): avc: denied { connect } for pid=4072 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.268700][ T28] audit: type=1400 audit(3932535829.416:396): avc: denied { remount } for pid=4076 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.446503][ T4071] loop1: detected capacity change from 0 to 512 [ 77.467143][ T4078] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.474340][ T4078] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.478237][ T4085] loop3: detected capacity change from 0 to 128 [ 77.525018][ T4085] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.526412][ T4071] EXT4-fs: test_dummy_encryption option not supported [ 77.560748][ T4085] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.608979][ T28] audit: type=1400 audit(3932535829.746:397): avc: denied { write } for pid=4084 comm="syz.3.116" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.643709][ T4078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.645208][ T4081] loop4: detected capacity change from 0 to 512 [ 77.689545][ T4078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.812059][ T4068] ALSA: seq fatal error: cannot create timer (-22) [ 77.815445][ T28] audit: type=1400 audit(3932535829.956:398): avc: denied { map } for pid=4084 comm="syz.3.116" path="socket:[6872]" dev="sockfs" ino=6872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.821573][ T4081] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 77.872764][ T4081] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.115: corrupted in-inode xattr: e_value size too large [ 77.891212][ T4081] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.893857][ T4081] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.115: couldn't read orphan inode 15 (err -117) [ 77.905101][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 77.905168][ C0] EXT4-fs (loop4): initial error at time 3932535830: ext4_iget_extra_inode:5180: inode 15 [ 77.905558][ C0] EXT4-fs (loop4): last error at time 3932535830: ext4_iget_extra_inode:5180: inode 15 [ 77.939746][ T28] audit: type=1400 audit(3932535829.956:399): avc: denied { read } for pid=4084 comm="syz.3.116" path="socket:[6872]" dev="sockfs" ino=6872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.939841][ T28] audit: type=1400 audit(3932535830.056:400): avc: denied { ioctl } for pid=4070 comm="syz.1.112" path="socket:[6875]" dev="sockfs" ino=6875 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.019263][ T4081] loop4: lost filesystem error report for type 5 error -117 [ 78.047376][ T4081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.074972][ T4092] xt_hashlimit: size too large, truncated to 1048576 [ 78.084973][ T4079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.098452][ T4079] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.118427][ T4079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.164477][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.171670][ T4079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.186361][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.193666][ T4079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.223770][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.249450][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.251856][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.298146][ T4079] veth1_vlan: left promiscuous mode [ 78.304312][ T4079] veth0_vlan: left promiscuous mode [ 78.316548][ T4079] veth0_vlan: entered promiscuous mode [ 78.352152][ T4079] veth1_vlan: entered promiscuous mode [ 78.360425][ T4101] netlink: 'syz.1.117': attribute type 8 has an invalid length. [ 78.383597][ T4079] veth1_macvtap: left promiscuous mode [ 78.409196][ T4079] veth0_macvtap: left promiscuous mode [ 78.415804][ T4079] veth0_macvtap: entered promiscuous mode [ 78.422694][ T4079] veth1_macvtap: entered promiscuous mode [ 78.432077][ T4079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.440544][ T4079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.450341][ T4079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.457966][ T4103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4103 comm=syz.4.120 [ 78.472504][ T4079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.511047][ T4104] loop4: detected capacity change from 0 to 512 [ 78.646113][ T4104] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.120: corrupted in-inode xattr: invalid ea_ino [ 78.673791][ T4107] loop2: detected capacity change from 0 to 512 [ 78.702544][ T4107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.715404][ T4107] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.774130][ T4104] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.775597][ T4104] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.120: couldn't read orphan inode 15 (err -117) [ 78.785060][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 78.785081][ C1] EXT4-fs (loop4): initial error at time 3932535830: ext4_iget_extra_inode:5180: inode 15 [ 78.785145][ C1] EXT4-fs (loop4): last error at time 3932535830: ext4_iget_extra_inode:5180: inode 15 [ 78.920872][ T4104] loop4: lost filesystem error report for type 5 error -117 [ 78.923257][ T4104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.091009][ T4094] @ÿ: renamed from bond_slave_0 [ 79.223609][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.234589][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.373678][ T4120] bridge_slave_0: left allmulticast mode [ 79.405582][ T4120] bridge_slave_0: left promiscuous mode [ 79.432518][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.484358][ T4121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.123'. [ 79.516478][ T4120] bridge_slave_1: left allmulticast mode [ 79.518899][ T4124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 79.522324][ T4120] bridge_slave_1: left promiscuous mode [ 79.522433][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.607449][ T4127] loop3: detected capacity change from 0 to 512 [ 79.722365][ T4127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.735299][ T4127] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.757254][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 79.757295][ T28] audit: type=1400 audit(3932535831.896:405): avc: denied { write } for pid=4117 comm="syz.3.122" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.786416][ T4127] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 79.801332][ T4127] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.122: corrupted inode contents [ 79.825554][ T4127] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.122: mark_inode_dirty error [ 79.839018][ T4127] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.122: corrupted inode contents [ 79.855973][ T4127] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.122: mark_inode_dirty error [ 79.868750][ T4127] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.122: corrupted inode contents [ 80.096835][ T4127] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.122: mark_inode_dirty error [ 80.111025][ T4127] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.122: corrupted inode contents [ 80.123695][ T4127] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.122: mark_inode_dirty error [ 80.135000][ T4127] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 80.152927][ T28] audit: type=1400 audit(3932535831.896:406): avc: denied { write } for pid=4117 comm="syz.3.122" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.179209][ T28] audit: type=1400 audit(3932535831.906:407): avc: denied { open } for pid=4117 comm="syz.3.122" path="/27/file1/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.229081][ T4120] bond0: (slave bond_slave_0): Releasing backup interface [ 80.236919][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.246199][ T28] audit: type=1400 audit(3932535831.966:408): avc: denied { write } for pid=4117 comm="syz.3.122" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.268019][ T28] audit: type=1400 audit(3932535831.966:409): avc: denied { write } for pid=4117 comm="syz.3.122" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.289937][ T28] audit: type=1400 audit(3932535831.966:410): avc: denied { remove_name } for pid=4117 comm="syz.3.122" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.330456][ T4120] bond0: (slave bond_slave_1): Releasing backup interface [ 80.344475][ T28] audit: type=1400 audit(3932535831.966:411): avc: denied { rename } for pid=4117 comm="syz.3.122" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.382515][ T28] audit: type=1400 audit(3932535831.966:412): avc: denied { add_name } for pid=4117 comm="syz.3.122" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.408438][ T4140] loop4: detected capacity change from 0 to 512 [ 80.420359][ T28] audit: type=1400 audit(3932535831.966:413): avc: denied { unlink } for pid=4117 comm="syz.3.122" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.444534][ T28] audit: type=1400 audit(3932535832.366:414): avc: denied { create } for pid=4133 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 80.467145][ T4140] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 80.468114][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.475366][ T4140] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 80.506918][ T4140] EXT4-fs (loop4): 1 truncate cleaned up [ 80.527412][ T4120] team0: Port device team_slave_0 removed [ 80.545697][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.640549][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 80.667065][ T4147] loop3: detected capacity change from 0 to 256 [ 80.724276][ T4147] vfat filesystem being mounted at /28/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 80.738618][ T4120] team0: Port device team_slave_1 removed [ 80.748240][ T4148] loop1: detected capacity change from 0 to 164 [ 80.758542][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.785856][ T4148] ISOFS: unable to read i-node block [ 80.803559][ T4148] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.818619][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.966076][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.044604][ T4155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 81.086949][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.142094][ T4120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.336678][ T4126] team0: Port device xfrm0 added [ 81.353940][ T4132] tipc: Started in network mode [ 81.359779][ T4132] tipc: Node identity 22ae56592f26, cluster identity 4711 [ 81.367312][ T4132] tipc: Enabled bearer , priority 0 [ 81.404382][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 81.507512][ T4162] capability: warning: `syz.3.132' uses 32-bit capabilities (legacy support in use) [ 81.561351][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.581215][ T4162] random: crng reseeded on system resumption [ 81.655815][ T4172] loop2: detected capacity change from 0 to 764 [ 81.728116][ T4172] rock: directory entry would overflow storage [ 81.793689][ T4172] rock: sig=0x4654, size=5, remaining=4 [ 82.068628][ T4174] /dev/loop4: Can't open blockdev [ 82.322987][ T4164] syz.2.133 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 82.531599][ T23] tipc: Node number set to 227038809 [ 82.588264][ T4176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.137'. [ 82.610471][ T4176] 9p: Bad value for 'wfdno' [ 82.626831][ T4184] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 82.695242][ T4186] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 82.695242][ T4186] program syz.2.136 not setting count and/or reply_len properly [ 82.906970][ T4187] set_capacity_and_notify: 1 callbacks suppressed [ 82.906996][ T4187] loop1: detected capacity change from 0 to 512 [ 82.944475][ T4189] netlink: 'syz.3.140': attribute type 7 has an invalid length. [ 83.125085][ T4185] loop4: detected capacity change from 0 to 256 [ 83.242550][ T4185] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.448074][ T4192] syzkaller0: entered promiscuous mode [ 83.461736][ T4192] syzkaller0: entered allmulticast mode [ 83.561720][ T4168] loop0: detected capacity change from 0 to 1024 [ 83.653658][ T4185] vfat filesystem being mounted at /25/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 83.689251][ T4168] EXT4-fs: Ignoring removed orlov option [ 83.704797][ T4184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 83.782975][ T4195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.138'. [ 84.473680][ T4206] netlink: 88 bytes leftover after parsing attributes in process `syz.1.141'. [ 84.502956][ T4208] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 84.621978][ T4168] EXT4-fs: error -4 creating inode table initialization thread [ 84.934850][ T4200] loop3: detected capacity change from 0 to 1024 [ 84.948784][ T4168] EXT4-fs (loop0): mount failed [ 84.996469][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 84.996489][ T28] audit: type=1400 audit(3932535837.046:424): avc: denied { setopt } for pid=4209 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.062360][ T4200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 85.106457][ T4200] System zones: 0-1, 3-36 [ 85.203606][ T4200] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.142: bad orphan inode 134217728 [ 85.233666][ T4222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.281955][ T4200] loop3: lost filesystem error report for type 5 error -117 [ 85.350471][ T4200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.001482][ T4227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62824 sclass=netlink_route_socket pid=4227 comm=syz.0.147 [ 86.019872][ T4227] loop0: detected capacity change from 0 to 1024 [ 86.027421][ T28] audit: type=1326 audit(3932535837.756:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201807de99 code=0x7ffc0000 [ 86.132788][ T4227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.458079][ T28] audit: type=1326 audit(3932535837.756:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201807de99 code=0x7ffc0000 [ 86.510343][ T4233] loop1: detected capacity change from 0 to 512 [ 86.518678][ T4233] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.551980][ T4233] vfat filesystem being mounted at /30/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 86.555492][ T28] audit: type=1326 audit(3932535837.766:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201807de99 code=0x7ffc0000 [ 86.613532][ T4233] lo speed is unknown, defaulting to 1000 [ 86.620010][ T28] audit: type=1326 audit(3932535837.766:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201807de99 code=0x7ffc0000 [ 86.623629][ T4233] lo speed is unknown, defaulting to 1000 [ 86.652353][ T4233] lo speed is unknown, defaulting to 1000 [ 86.670968][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.681136][ T4235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.689792][ T4235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.698252][ T4228] No such timeout policy "syz1" [ 86.764184][ T28] audit: type=1326 audit(3932535837.766:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f201807de99 code=0x7ffc0000 [ 86.800538][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 86.814322][ T4233] infiniband sz1: set down [ 86.819129][ T4233] infiniband sz1: added lo [ 86.825202][ T23] lo speed is unknown, defaulting to 1000 [ 86.844051][ T28] audit: type=1326 audit(3932535838.206:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201807de99 code=0x7ffc0000 [ 86.848174][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 86.887428][ T4233] RDS/IB: sz1: added [ 86.891680][ T4233] smc: adding ib device sz1 with port count 1 [ 86.898224][ T4233] smc: ib device sz1 port 1 has no pnetid [ 86.905270][ T4233] lo speed is unknown, defaulting to 1000 [ 86.913756][ T28] audit: type=1326 audit(3932535838.206:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f201807dc02 code=0x7ffc0000 [ 86.940102][ T28] audit: type=1326 audit(3932535838.206:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f201807dc97 code=0x7ffc0000 [ 86.965867][ T28] audit: type=1326 audit(3932535838.206:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.3.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f201803ab91 code=0x7ffc0000 [ 87.020762][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.022738][ T3397] lo speed is unknown, defaulting to 1000 [ 87.046704][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.055309][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.090886][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.140955][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.150383][ T3397] IPVS: starting estimator thread 0... [ 87.186591][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.201956][ T4245] IPVS: Scheduler module ip_vs_ not found [ 87.203031][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.216643][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.228211][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.238393][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.247360][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.255796][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.274120][ T4233] lo speed is unknown, defaulting to 1000 [ 87.296723][ T4248] IPVS: using max 2256 ests per chain, 112800 per kthread [ 87.348519][ T4235] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 87.357724][ T4235] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 87.396431][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.440949][ T4233] lo speed is unknown, defaulting to 1000 [ 87.450366][ T4254] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.579332][ T4233] lo speed is unknown, defaulting to 1000 [ 87.853976][ T4233] lo speed is unknown, defaulting to 1000 [ 87.945587][ T4263] loop0: detected capacity change from 0 to 512 [ 87.967947][ T4263] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.154: corrupted xattr block 95: invalid header [ 87.985743][ T4263] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.986289][ T4263] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 87.995537][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 87.995559][ C0] EXT4-fs (loop0): initial error at time 3932535840: ext4_expand_extra_isize_ea:2810: inode 11 [ 87.995590][ C0] EXT4-fs (loop0): last error at time 3932535840: ext4_expand_extra_isize_ea:2810: inode 11 [ 88.038619][ T4263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.154: bg 0: block 7: invalid block bitmap [ 88.051757][ T4263] loop0: lost filesystem error report for type 5 error -117 [ 88.055570][ T4263] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 88.071761][ T4263] loop0: lost filesystem error report for type 5 error -117 [ 88.071962][ T4263] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.154: corrupted xattr block 95: invalid header [ 88.093366][ T4263] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.093731][ T4263] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 88.102533][ T4266] pim6reg: entered allmulticast mode [ 88.123629][ T4263] EXT4-fs (loop0): 1 orphan inode deleted [ 88.125138][ T4267] pim6reg: left allmulticast mode [ 88.137627][ T4263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.172876][ T4257] loop2: detected capacity change from 0 to 512 [ 88.291169][ T4261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4261 comm=syz.0.154 [ 88.321057][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.361504][ T4257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.423152][ T4276] netlink: 68 bytes leftover after parsing attributes in process `syz.0.157'. [ 88.432208][ T4276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.157'. [ 88.451743][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.470579][ T4276] bridge0: port 3(macvlan2) entered blocking state [ 88.477555][ T4276] bridge0: port 3(macvlan2) entered disabled state [ 88.484484][ T4276] macvlan2: entered allmulticast mode [ 88.490393][ T4276] ip6gretap0: entered allmulticast mode [ 88.500151][ T4276] macvlan2: entered promiscuous mode [ 88.518964][ T4276] bridge0: port 3(macvlan2) entered blocking state [ 88.525636][ T4276] bridge0: port 3(macvlan2) entered forwarding state [ 88.643459][ T4282] loop4: detected capacity change from 0 to 512 [ 88.650840][ T4282] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.858552][ T4282] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.864975][ T4282] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 88.874903][ T4282] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.156: attempt to clear invalid blocks 2 len 1 [ 88.887818][ T4282] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 88.888892][ T4282] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 88.898098][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 88.898118][ C1] EXT4-fs (loop4): initial error at time 3932535841: ext4_clear_blocks:876: inode 13 [ 88.898146][ C1] EXT4-fs (loop4): last error at time 3932535841: ext4_clear_blocks:876: inode 13 [ 88.931671][ T4282] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 88.940097][ T4282] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.156: invalid indirect mapped block 1819239214 (level 0) [ 88.954009][ T4282] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 88.957773][ T4282] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.156: invalid indirect mapped block 1819239214 (level 1) [ 88.980786][ T4282] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 88.981765][ T4282] EXT4-fs (loop4): 1 truncate cleaned up [ 88.997793][ T4282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.011231][ T4282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.031269][ T4278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.688465][ T4288] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.160'. [ 90.296477][ T4296] tmpfs: Bad value for 'mpol' [ 90.478410][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 90.478427][ T28] audit: type=1400 audit(3932535842.536:580): avc: denied { read } for pid=4291 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 90.670596][ T28] audit: type=1400 audit(3932535842.816:581): avc: denied { ioctl } for pid=4297 comm="syz.4.163" path="socket:[6144]" dev="sockfs" ino=6144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.698699][ T28] audit: type=1400 audit(3932535842.846:582): avc: denied { bind } for pid=4297 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.769050][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 90.801891][ T28] audit: type=1400 audit(3932535842.946:583): avc: denied { connect } for pid=4300 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.958875][ T28] audit: type=1400 audit(3932535842.996:584): avc: denied { accept } for pid=4302 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.129213][ T28] audit: type=1400 audit(3932535843.266:585): avc: denied { write } for pid=4300 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.084895][ T4309] loop1: detected capacity change from 0 to 4096 [ 92.101111][ T4309] EXT4-fs: Ignoring removed orlov option [ 92.256969][ T4309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.450182][ T4309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.495882][ T28] audit: type=1400 audit(3932535845.626:586): avc: denied { write } for pid=4302 comm="syz.1.165" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.014750][ T28] audit: type=1400 audit(3932535845.626:587): avc: denied { read } for pid=4302 comm="syz.1.165" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.290347][ T28] audit: type=1326 audit(3932535846.156:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.0.167" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6a9d0de99 code=0x0 [ 94.318232][ T4315] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 94.630985][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.487410][ T4340] loop2: detected capacity change from 0 to 128 [ 95.850746][ T28] audit: type=1400 audit(3932535847.996:589): avc: denied { ioctl } for pid=4335 comm="syz.1.171" path="socket:[8278]" dev="sockfs" ino=8278 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.827101][ T28] audit: type=1400 audit(3932535848.076:591): avc: denied { create } for pid=4342 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.851170][ T28] audit: type=1400 audit(3932535848.076:590): avc: denied { ioctl } for pid=4335 comm="syz.1.171" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7224 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.946554][ T28] audit: type=1400 audit(3932535848.086:592): avc: denied { write } for pid=4342 comm="syz.4.175" path="socket:[7226]" dev="sockfs" ino=7226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.978855][ T4348] netlink: 'syz.0.174': attribute type 29 has an invalid length. [ 96.999066][ T4340] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 98.666747][ T4340] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 98.739119][ T4349] lo speed is unknown, defaulting to 1000 [ 98.762105][ T4356] tipc: Started in network mode [ 98.774480][ T4356] tipc: Node identity ac14140f, cluster identity 4711 [ 98.789395][ T4356] tipc: New replicast peer: 172.30.0.2 [ 98.802550][ T4356] tipc: Enabled bearer , priority 10 [ 98.895096][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'. [ 98.920642][ T28] audit: type=1400 audit(3932535851.056:593): avc: denied { read } for pid=4359 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.944449][ T4356] tipc: Disabling bearer [ 99.019510][ T4363] batman_adv: batadv0: Adding interface: vlan2 [ 99.041154][ T4363] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.079458][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.097851][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.107972][ T4363] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 99.159613][ T3397] IPVS: starting estimator thread 0... [ 99.206185][ T28] audit: type=1400 audit(3932535851.346:594): avc: denied { name_bind } for pid=4370 comm="syz.2.180" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 99.258776][ T4372] IPVS: using max 1872 ests per chain, 93600 per kthread [ 99.267634][ T28] audit: type=1400 audit(3932535851.396:596): avc: denied { map } for pid=4359 comm="syz.3.178" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.325193][ T28] audit: type=1400 audit(3932535851.396:597): avc: denied { read write } for pid=4359 comm="syz.3.178" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.386262][ T28] audit: type=1400 audit(3932535851.416:598): avc: denied { create } for pid=4368 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 99.418016][ T28] audit: type=1400 audit(3932535851.386:595): avc: denied { read } for pid=4359 comm="syz.3.178" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.759865][ T4371] tipc: Resetting bearer [ 100.377883][ T68] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.391903][ T4391] loop2: detected capacity change from 0 to 128 [ 100.399613][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.440556][ T4391] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.472140][ T4391] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.526694][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.544240][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.568468][ T4398] smc: net device lo applied user defined pnetid SYZ2 [ 100.627627][ T4394] smc: net device lo erased user defined pnetid SYZ2 [ 100.680764][ T4396] loop3: detected capacity change from 0 to 1024 [ 100.690720][ T3296] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.715042][ T4396] EXT4-fs: Ignoring removed orlov option [ 100.797363][ T4404] loop0: detected capacity change from 0 to 4096 [ 100.833232][ T4404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.882039][ T4404] tmpfs: Bad value for 'size' [ 100.887938][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 100.887952][ T28] audit: type=1400 audit(3932535853.026:605): avc: denied { mounton } for pid=4403 comm="syz.0.188" path="/39/file2" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.995221][ T4396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.067777][ T4415] loop4: detected capacity change from 0 to 128 [ 101.763738][ T4415] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.776873][ T4415] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.777892][ T28] audit: type=1400 audit(3932535853.906:606): avc: denied { write } for pid=4403 comm="syz.0.188" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 102.129788][ T28] audit: type=1400 audit(3932535853.986:608): avc: denied { write } for pid=4405 comm="syz.4.189" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.341989][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 102.351201][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 102.407165][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.103600][ T28] audit: type=1400 audit(3932535853.906:607): avc: denied { open } for pid=4403 comm="syz.0.188" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.144087][ T4425] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 103.165795][ T28] audit: type=1400 audit(3932535854.266:609): avc: denied { ioctl } for pid=4395 comm="syz.3.186" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.191590][ T28] audit: type=1400 audit(3932535854.746:610): avc: denied { write } for pid=4403 comm="syz.0.188" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.247141][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 103.271153][ T4425] bond1 (unregistering): Released all slaves [ 103.675129][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.705329][ T4431] netlink: 'syz.4.193': attribute type 29 has an invalid length. [ 103.754071][ T4433] lo speed is unknown, defaulting to 1000 [ 104.585106][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 104.645731][ T4438] loop4: detected capacity change from 0 to 128 [ 104.982227][ T4450] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 104.982227][ T4450] program syz.1.199 not setting count and/or reply_len properly [ 105.875811][ T4438] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.669852][ T4438] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.774456][ T4452] smc: net device lo applied user defined pnetid SYZ2 [ 106.799001][ T4454] smc: net device lo erased user defined pnetid SYZ2 [ 106.827509][ T28] audit: type=1400 audit(3932535858.966:611): avc: denied { write } for pid=4437 comm="syz.4.198" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.899319][ T4459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'. [ 106.908510][ T28] audit: type=1400 audit(3932535859.046:612): avc: denied { write } for pid=4437 comm="syz.4.198" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.935501][ T4459] 9p: Bad value for 'wfdno' [ 107.716180][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.752393][ T4457] Set syz1 is full, maxelem 65536 reached [ 107.792617][ T4477] loop0: detected capacity change from 0 to 4096 [ 107.810037][ T4477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.841382][ T4479] netlink: 'syz.4.205': attribute type 10 has an invalid length. [ 107.842685][ T4477] tmpfs: Bad value for 'size' [ 107.860196][ T4475] loop2: detected capacity change from 0 to 4096 [ 107.877041][ T4479] batman_adv: batadv0: Adding interface: dummy0 [ 107.883631][ T4479] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.884238][ T4472] loop1: detected capacity change from 0 to 1024 [ 107.909352][ T4479] batman_adv: batadv0: Interface activated: dummy0 [ 107.950963][ T28] audit: type=1400 audit(3932535860.076:613): avc: denied { allowed } for pid=4481 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.974461][ T4482] netlink: 'syz.3.207': attribute type 10 has an invalid length. [ 107.978383][ T4472] EXT4-fs: Ignoring removed orlov option [ 108.024172][ T4475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.047716][ T4482] team0: Port device dummy0 added [ 108.126263][ T4475] tmpfs: Bad value for 'size' [ 108.145261][ T28] audit: type=1400 audit(3932535860.286:614): avc: denied { write } for pid=4476 comm="syz.0.206" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.185523][ T4486] loop4: detected capacity change from 0 to 4096 [ 108.187944][ T4472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.209874][ T28] audit: type=1400 audit(3932535860.336:615): avc: denied { write } for pid=4474 comm="syz.2.204" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.240672][ T4482] netlink: 'syz.3.207': attribute type 10 has an invalid length. [ 108.278051][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.304607][ T4482] team0: Port device dummy0 removed [ 108.311853][ T4486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.338980][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 108.352153][ T4482] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.364509][ T4486] tmpfs: Bad value for 'size' [ 108.370170][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 108.408233][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.417831][ T28] audit: type=1400 audit(3932535860.556:616): avc: denied { write } for pid=4484 comm="syz.4.208" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.472608][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.482150][ T4493] loop0: detected capacity change from 0 to 4096 [ 108.522878][ T4495] loop1: detected capacity change from 0 to 4096 [ 108.523411][ T4493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.579416][ T4495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.642751][ T4493] tmpfs: Bad value for 'size' [ 108.656455][ T4495] tmpfs: Bad value for 'size' [ 108.692315][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.765765][ T28] audit: type=1400 audit(3932535860.906:617): avc: denied { write } for pid=4494 comm="syz.1.210" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.788888][ T28] audit: type=1400 audit(3932535860.916:618): avc: denied { write } for pid=4492 comm="syz.0.209" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.960488][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.144747][ T4510] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 109.144747][ T4510] program syz.4.212 not setting count and/or reply_len properly [ 109.957217][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.994111][ T4509] loop1: detected capacity change from 0 to 4096 [ 110.968007][ T4509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.001668][ T4509] tmpfs: Bad value for 'size' [ 111.996924][ T4518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 112.136975][ T4518] 9p: Bad value for 'wfdno' [ 112.228878][ T4512] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 112.422242][ T4512] bond1 (unregistering): Released all slaves [ 112.761109][ T28] audit: type=1400 audit(3932535864.906:619): avc: denied { write } for pid=4508 comm="syz.1.223" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.858648][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.464923][ T4532] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 113.854641][ T4536] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 113.922280][ T4540] loop0: detected capacity change from 0 to 4096 [ 114.022573][ T4530] lo speed is unknown, defaulting to 1000 [ 114.065860][ T4540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.078704][ T4536] dummy0: left promiscuous mode [ 114.085646][ T4536] batman_adv: batadv0: Adding interface: dummy0 [ 114.180861][ T4536] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.250353][ T4540] tmpfs: Bad value for 'size' [ 114.422778][ T4536] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 114.486265][ T28] audit: type=1400 audit(3932535866.626:620): avc: denied { write } for pid=4538 comm="syz.0.219" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.630836][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.661206][ T4552] loop2: detected capacity change from 0 to 4096 [ 114.709501][ T4552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.719028][ T4554] loop0: detected capacity change from 0 to 4096 [ 114.781296][ T4554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.786482][ T4552] tmpfs: Bad value for 'size' [ 114.820759][ T4554] tmpfs: Bad value for 'size' [ 114.981221][ T28] audit: type=1400 audit(3932535867.126:621): avc: denied { write } for pid=4551 comm="syz.2.221" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.136922][ T28] audit: type=1400 audit(3932535867.276:622): avc: denied { write } for pid=4553 comm="syz.0.222" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.200371][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.307417][ T4569] loop3: detected capacity change from 0 to 128 [ 115.322072][ T4569] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.335763][ T4569] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.406350][ T28] audit: type=1400 audit(3932535867.526:623): avc: denied { write } for pid=4565 comm="syz.3.226" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.697659][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.789230][ T4574] loop2: detected capacity change from 0 to 4096 [ 116.066485][ T4574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.264556][ T4574] tmpfs: Bad value for 'size' [ 117.016606][ T4579] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 117.016606][ T4579] program syz.0.228 not setting count and/or reply_len properly [ 117.307195][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 117.523155][ T72] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.545176][ T72] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.559484][ T28] audit: type=1400 audit(3932535869.686:624): avc: denied { write } for pid=4573 comm="syz.2.227" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.616061][ T72] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.774366][ T72] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.805016][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.566521][ T28] audit: type=1400 audit(3932535870.706:625): avc: denied { create } for pid=4585 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.606590][ T4591] netlink: 'syz.3.230': attribute type 10 has an invalid length. [ 118.811059][ T4591] bond0: (slave dummy0): Releasing backup interface [ 118.831528][ T4591] batman_adv: batadv0: Adding interface: dummy0 [ 118.853115][ T4591] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.613339][ T4591] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 119.842381][ T28] audit: type=1400 audit(3932535871.726:626): avc: denied { bind } for pid=4592 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 120.203741][ T4601] batman_adv: batadv0: Interface deactivated: dummy0 [ 120.210638][ T4601] batman_adv: batadv0: Removing interface: dummy0 [ 120.224575][ T4601] bridge_slave_0: left allmulticast mode [ 120.231526][ T4601] bridge_slave_0: left promiscuous mode [ 120.242199][ T4602] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 120.253023][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.263902][ T4601] bridge_slave_1: left allmulticast mode [ 120.279828][ T4601] bridge_slave_1: left promiscuous mode [ 120.285759][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.297142][ T4601] bond0: (slave bond_slave_0): Releasing backup interface [ 120.319540][ T4605] netlink: 44 bytes leftover after parsing attributes in process `syz.4.234'. [ 120.330336][ T4601] bond0: (slave bond_slave_1): Releasing backup interface [ 120.354631][ T4601] team0: Port device team_slave_0 removed [ 120.377887][ T4601] team0: Port device team_slave_1 removed [ 120.392973][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.409551][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.425414][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.434007][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.448257][ T4601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.494447][ T4607] team0: Port device xfrm0 added [ 120.551843][ T4601] tipc: Started in network mode [ 120.556966][ T4601] tipc: Node identity ead4faf345f6, cluster identity 4711 [ 120.564308][ T4601] tipc: Enabled bearer , priority 0 [ 120.620588][ T28] audit: type=1400 audit(3932535872.766:627): avc: denied { setopt } for pid=4609 comm="syz.0.235" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.628220][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 120.701052][ T4616] netlink: 'syz.1.236': attribute type 27 has an invalid length. [ 120.713621][ T4613] tipc: Started in network mode [ 120.718956][ T4613] tipc: Node identity ac14140f, cluster identity 4711 [ 120.749595][ T4613] tipc: New replicast peer: 172.30.0.4 [ 120.756872][ T4619] binfmt_misc: register: failed to install interpreter file ./file2 [ 120.786151][ T4613] tipc: Enabled bearer , priority 10 [ 120.788493][ T28] audit: type=1400 audit(3932535872.926:628): avc: denied { connect } for pid=4608 comm="syz.1.236" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.802626][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 120.826684][ T4620] tipc: Disabling bearer [ 120.843693][ T4621] loop2: detected capacity change from 0 to 512 [ 120.876076][ T4621] EXT4-fs: test_dummy_encryption option not supported [ 120.920235][ T4619] bridge0: port 3(gretap0) entered blocking state [ 120.926924][ T4619] bridge0: port 3(gretap0) entered forwarding state [ 120.931517][ T4615] loop4: detected capacity change from 0 to 512 [ 120.943207][ T4619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.952000][ T4619] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.962040][ T4619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.988662][ T4619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.997982][ T4619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.009262][ T4619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.011911][ T4615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.019840][ T4619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.021750][ T4619] veth1_vlan: left promiscuous mode [ 121.022276][ T4619] veth0_vlan: left promiscuous mode [ 121.026174][ T4619] veth0_vlan: entered promiscuous mode [ 121.036471][ T4615] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.047175][ T4619] veth1_vlan: entered promiscuous mode [ 121.078505][ T28] audit: type=1400 audit(3932535873.206:629): avc: denied { write } for pid=4614 comm="syz.4.238" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.099846][ T4619] veth1_macvtap: left promiscuous mode [ 121.100898][ T28] audit: type=1400 audit(3932535873.206:630): avc: denied { write } for pid=4614 comm="syz.4.238" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.116443][ T4619] veth0_macvtap: left promiscuous mode [ 121.130273][ T28] audit: type=1400 audit(3932535873.206:631): avc: denied { rename } for pid=4614 comm="syz.4.238" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.153163][ T4619] veth0_macvtap: entered promiscuous mode [ 121.161786][ T4619] veth1_macvtap: entered promiscuous mode [ 121.170547][ T4619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.179923][ T4619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.188935][ T4619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.197868][ T4619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.206884][ T4619] batman_adv: batadv0: Interface activated: vlan2 [ 121.214779][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.236424][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.255497][ T3397] lo speed is unknown, defaulting to 1000 [ 121.263222][ T3397] sz1: Port: 1 Link ACTIVE [ 121.314248][ T4613] batman_adv: batadv0: Adding interface: vlan2 [ 121.320787][ T4613] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.366908][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.377799][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.388847][ T4613] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 121.701740][ T4623] bridge0: port 3(macvlan2) entered disabled state [ 121.708513][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.715728][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.815649][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.828397][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.938272][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.945421][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.986092][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.993255][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.013362][ T28] audit: type=1400 audit(3932535874.156:632): avc: denied { read } for pid=4644 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.060939][ T4643] loop2: detected capacity change from 0 to 4096 [ 122.203962][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.214742][ T4643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.227505][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.236965][ T4644] uprobe: syz.3.243:4644 failed to unregister, leaking uprobe [ 122.253566][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.263527][ T3397] lo speed is unknown, defaulting to 1000 [ 122.307826][ T4652] loop0: detected capacity change from 0 to 128 [ 122.336638][ T3410] tipc: Node number set to 2938305267 [ 122.363229][ T4643] tmpfs: Bad value for 'size' [ 122.400623][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.464247][ T4652] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 122.477742][ T4652] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.539649][ T28] audit: type=1400 audit(3932535874.666:633): avc: denied { write } for pid=4646 comm="syz.0.241" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.603723][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.753995][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.866853][ T28] audit: type=1400 audit(3932535874.776:634): avc: denied { write } for pid=4642 comm="syz.2.242" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.099183][ T4656] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4656 comm=syz.1.244 [ 123.113600][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.325881][ T4665] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 124.063335][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 124.110653][ T4669] loop1: detected capacity change from 0 to 512 [ 124.162891][ T4669] EXT4-fs (loop1): 1 orphan inode deleted [ 124.169851][ T4669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.208158][ T4669] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 124.219119][ T4669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.370107][ T28] audit: type=1400 audit(3932535876.516:635): avc: denied { create } for pid=4672 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.419379][ T28] audit: type=1400 audit(3932535876.536:636): avc: denied { read } for pid=4672 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.476162][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.553872][ T28] audit: type=1400 audit(3932535876.696:637): avc: denied { load_policy } for pid=4678 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.562055][ T4677] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 124.616673][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.637737][ T4677] batman_adv: batadv0: Adding interface: dummy0 [ 124.652049][ T28] audit: type=1400 audit(3932535876.786:638): avc: denied { ioctl } for pid=4672 comm="syz.0.248" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.656734][ T4677] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.708539][ T4677] batman_adv: batadv0: Interface activated: dummy0 [ 124.720474][ T4679] loop3: detected capacity change from 0 to 512 [ 124.730765][ T4679] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 124.742066][ T28] audit: type=1400 audit(3932535876.886:639): avc: denied { write } for pid=4672 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.784876][ T4684] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 124.794512][ T4679] msdos filesystem being mounted at /50/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 124.873148][ T4684] team0: Device dummy0 is of different type [ 124.883779][ T4687] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 124.917504][ T28] audit: type=1326 audit(3932535877.046:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.3.250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f201807de99 code=0x0 [ 124.946006][ T4687] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.978378][ T4157] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 125.000244][ T4692] loop3: detected capacity change from 0 to 256 [ 125.495728][ T4695] loop2: detected capacity change from 0 to 1024 [ 125.920794][ T4699] loop2: detected capacity change from 0 to 4096 [ 125.947309][ T4701] loop0: detected capacity change from 0 to 4096 [ 125.973644][ T4692] vfat filesystem being mounted at /51/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 125.988062][ T4701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.017946][ T4699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.049651][ T4699] tmpfs: Bad value for 'size' [ 126.053767][ T4701] tmpfs: Bad value for 'size' [ 126.165840][ T28] audit: type=1400 audit(3932535878.306:641): avc: denied { write } for pid=4698 comm="syz.2.255" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.214062][ T28] audit: type=1400 audit(3932535878.356:642): avc: denied { watch watch_reads } for pid=4691 comm="syz.3.253" path="/51/file0/file2" dev="loop3" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 126.271993][ T28] audit: type=1400 audit(3932535878.366:643): avc: denied { write } for pid=4700 comm="syz.0.256" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.288623][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 126.383597][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.419219][ T4712] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.259'. [ 126.431394][ T4708] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4708 comm=syz.4.257 [ 126.457945][ T4717] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 126.489125][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.586430][ T28] audit: type=1400 audit(3932535878.726:644): avc: denied { setopt } for pid=4720 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.731188][ T4727] loop0: detected capacity change from 0 to 512 [ 126.761910][ T4727] EXT4-fs (loop0): 1 orphan inode deleted [ 126.769804][ T4727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.811545][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 126.954146][ T4727] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 126.965791][ T4727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.103137][ T4733] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 127.313939][ T4739] lo speed is unknown, defaulting to 1000 [ 127.632201][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.305035][ T4749] loop1: detected capacity change from 0 to 1024 [ 128.778538][ T4739] ALSA: seq fatal error: cannot create timer (-22) [ 129.267665][ T4765] loop1: detected capacity change from 0 to 128 [ 129.312157][ T4765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 129.326628][ T4765] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.392337][ T28] audit: type=1400 audit(3932535881.516:645): avc: denied { write } for pid=4761 comm="syz.1.279" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.734306][ T4770] loop0: detected capacity change from 0 to 4096 [ 129.782059][ T4770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.989496][ T4770] tmpfs: Bad value for 'size' [ 130.094270][ T4775] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 130.109598][ T4763] loop4: detected capacity change from 0 to 512 [ 130.115994][ T4773] loop2: detected capacity change from 0 to 4096 [ 130.134101][ T4763] EXT4-fs: test_dummy_encryption option not supported [ 130.154904][ T4773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.229987][ T28] audit: type=1400 audit(3932535882.366:646): avc: denied { write } for pid=4769 comm="syz.0.271" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.271406][ T4773] tmpfs: Bad value for 'size' [ 130.359670][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.395929][ T28] audit: type=1400 audit(3932535882.536:647): avc: denied { write } for pid=4772 comm="syz.2.272" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.493755][ T4781] loop4: detected capacity change from 0 to 512 [ 130.512937][ T4781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.538252][ T4781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.552381][ T4781] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.625268][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.735455][ T28] audit: type=1400 audit(3932535882.866:648): avc: denied { bind } for pid=4784 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.769393][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.780811][ T4789] loop2: detected capacity change from 0 to 1024 [ 130.799067][ T4787] netlink: 'syz.3.277': attribute type 10 has an invalid length. [ 130.808463][ T4789] EXT4-fs: Ignoring removed orlov option [ 130.862874][ T4789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.912484][ T4795] program syz.0.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.275586][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 131.936347][ T4804] loop3: detected capacity change from 0 to 1024 [ 132.114427][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.809251][ T4824] loop3: detected capacity change from 0 to 128 [ 133.816630][ T4824] msdos: Bad value for 'allow_utime' [ 134.475455][ T4826] loop1: detected capacity change from 0 to 4096 [ 134.515670][ T4826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.538842][ T4828] loop0: detected capacity change from 0 to 4096 [ 134.597151][ T4828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.714941][ T4826] tmpfs: Bad value for 'size' [ 134.738421][ T4828] tmpfs: Bad value for 'size' [ 134.750372][ T28] audit: type=1400 audit(3932535886.896:649): avc: denied { getopt } for pid=4810 comm="syz.2.282" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.844377][ T4815] loop2: detected capacity change from 0 to 128 [ 134.857734][ T28] audit: type=1400 audit(3932535886.996:650): avc: denied { write } for pid=4825 comm="syz.1.286" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.960906][ T28] audit: type=1400 audit(3932535887.066:651): avc: denied { write } for pid=4827 comm="syz.0.287" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.022381][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.077515][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.100915][ T4836] loop4: detected capacity change from 0 to 4096 [ 135.290702][ T4836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.534773][ T4843] netlink: 'syz.1.289': attribute type 10 has an invalid length. [ 135.608099][ T4851] tmpfs: Bad value for 'size' [ 135.638530][ T4849] pim6reg: entered allmulticast mode [ 135.764262][ T4841] pim6reg: left allmulticast mode [ 135.877972][ T28] audit: type=1400 audit(3932535888.026:652): avc: denied { write } for pid=4835 comm="syz.4.290" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.904408][ T4853] loop0: detected capacity change from 0 to 512 [ 135.958633][ T4853] EXT4-fs: test_dummy_encryption option not supported [ 136.175514][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.565941][ T4862] netlink: 'syz.3.295': attribute type 2 has an invalid length. [ 136.573723][ T4862] netlink: 'syz.3.295': attribute type 8 has an invalid length. [ 136.606740][ T4862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.295'. [ 137.003545][ T4866] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 137.038551][ T4866] bond0: (slave dummy0): Releasing backup interface [ 137.064754][ T4866] team0: Port device dummy0 added [ 137.292042][ T4876] loop3: detected capacity change from 0 to 4096 [ 137.300095][ T4866] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 137.322455][ T4876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.530601][ T4876] tmpfs: Bad value for 'size' [ 137.713615][ T4866] team0: Port device dummy0 removed [ 137.825642][ T4866] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.844155][ T4880] loop4: detected capacity change from 0 to 4096 [ 137.865764][ T28] audit: type=1400 audit(3932535889.996:653): avc: denied { write } for pid=4874 comm="syz.3.298" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.866905][ T4880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.953010][ T4880] tmpfs: Bad value for 'size' [ 138.157888][ T28] audit: type=1400 audit(3932535890.276:654): avc: denied { write } for pid=4879 comm="syz.4.299" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.229216][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.334762][ T4890] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 138.813364][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.876154][ T4894] loop4: detected capacity change from 0 to 512 [ 138.958253][ T4894] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 138.989445][ T4894] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 139.001331][ T4898] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.024838][ T4894] EXT4-fs (loop4): 1 truncate cleaned up [ 139.040157][ T4894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.062210][ T28] audit: type=1400 audit(3932535891.196:655): avc: denied { bind } for pid=4896 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.214443][ T4904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.424972][ T4910] loop3: detected capacity change from 0 to 4096 [ 139.460044][ T4910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.515664][ T4910] tmpfs: Bad value for 'size' [ 139.556619][ T4906] loop2: detected capacity change from 0 to 512 [ 139.682695][ T28] audit: type=1400 audit(3932535891.826:656): avc: denied { write } for pid=4909 comm="syz.3.307" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.753807][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.032802][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.049114][ T4917] loop1: detected capacity change from 0 to 512 [ 140.065649][ T4906] EXT4-fs (loop2): 1 orphan inode deleted [ 140.116527][ T4917] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 140.124039][ T4906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.126222][ T4921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'. [ 140.164434][ T4917] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 140.191130][ T4917] EXT4-fs (loop1): 1 truncate cleaned up [ 140.207743][ T4917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.227133][ T4921] loop0: detected capacity change from 0 to 128 [ 140.278466][ T4921] vfat filesystem being mounted at /63/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 140.823571][ T4924] loop3: detected capacity change from 0 to 512 [ 140.836012][ T4830] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 140.857456][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.862710][ T4924] EXT4-fs: test_dummy_encryption option not supported [ 141.042209][ T4933] loop4: detected capacity change from 0 to 4096 [ 141.051013][ T4933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.100049][ T4933] tmpfs: Bad value for 'size' [ 141.337078][ T28] audit: type=1400 audit(3932535893.446:657): avc: denied { write } for pid=4932 comm="syz.4.313" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.367354][ T4937] loop1: detected capacity change from 0 to 4096 [ 141.579465][ T4758] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.618985][ T361] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.637065][ T361] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.642575][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.651099][ T361] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.664978][ T4937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.688492][ T4937] tmpfs: Bad value for 'size' [ 141.784456][ T4947] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 141.793148][ T4947] batman_adv: batadv0: Removing interface: dummy0 [ 141.823180][ T4947] team0: Device dummy0 is of different type [ 141.831554][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.876849][ T28] audit: type=1400 audit(3932535894.006:658): avc: denied { write } for pid=4936 comm="syz.1.312" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.988950][ T4947] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 142.006814][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.023963][ T4947] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.172167][ T4960] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 142.616152][ T4964] loop1: detected capacity change from 0 to 128 [ 142.631117][ T4964] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.647421][ T4964] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.663047][ T4964] vfat filesystem being mounted at /62/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 142.687153][ T4966] loop3: detected capacity change from 0 to 4096 [ 142.784211][ T4966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.859969][ T4966] tmpfs: Bad value for 'size' [ 142.960082][ T28] audit: type=1400 audit(3932535895.106:659): avc: denied { write } for pid=4965 comm="syz.3.319" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.069920][ T4977] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 143.535836][ T4980] loop1: detected capacity change from 0 to 512 [ 143.542720][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.558396][ T4980] EXT4-fs: Ignoring removed nobh option [ 143.569210][ T4980] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #3: comm syz.1.322: corrupted inode contents [ 143.582257][ T4980] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 143.582482][ T4980] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #3: comm syz.1.322: mark_inode_dirty error [ 143.591660][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 143.591689][ C0] EXT4-fs (loop1): initial error at time 3932535895: ext4_do_update_inode:5742: inode 3 [ 143.591719][ C0] EXT4-fs (loop1): last error at time 3932535895: ext4_do_update_inode:5742: inode 3 [ 143.695786][ T4980] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 143.724972][ T4980] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #3: comm syz.1.322: corrupted inode contents [ 143.736213][ T4989] netlink: 68 bytes leftover after parsing attributes in process `syz.3.324'. [ 143.936491][ T4992] loop0: detected capacity change from 0 to 512 [ 143.980812][ T28] audit: type=1400 audit(3932535896.066:660): avc: denied { write } for pid=4986 comm="syz.2.326" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.042166][ T4992] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 144.058068][ T4992] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.323: invalid block [ 144.071321][ T4992] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 144.076912][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 144.094541][ C1] EXT4-fs (loop0): initial error at time 3932535896: ext4_get_branch:178: inode 13: block 1024 [ 144.107483][ C1] EXT4-fs (loop0): last error at time 3932535896: ext4_get_branch:178: inode 13: block 1024 [ 144.124013][ T4992] EXT4-fs (loop0): 1 truncate cleaned up [ 144.144092][ T4992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.182198][ T4994] pimreg: entered allmulticast mode [ 144.361677][ T4996] pimreg: left allmulticast mode [ 144.435547][ T4980] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 144.436443][ T4980] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.322: mark_inode_dirty error [ 144.482820][ T4991] loop4: detected capacity change from 0 to 4096 [ 144.582046][ T4991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.633777][ T4980] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 144.634428][ T4980] Quota error (device loop1): write_blk: dquota write failed [ 144.717298][ T4998] syzkaller0: entered promiscuous mode [ 144.722907][ T4998] syzkaller0: entered allmulticast mode [ 144.746425][ T4830] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 144.825308][ T4830] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 144.854082][ T4991] tmpfs: Bad value for 'size' [ 144.873386][ T4993] loop2: detected capacity change from 0 to 512 [ 144.887613][ T4980] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 145.002381][ T4980] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.322: Failed to acquire dquot type 0 [ 145.049890][ T5006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.328'. [ 145.091481][ T4993] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 145.106428][ T4980] loop1: lost filesystem error report for type 5 error -117 [ 145.157690][ T4980] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.322: corrupted inode contents [ 145.158721][ T28] audit: type=1400 audit(3932535897.296:661): avc: denied { write } for pid=4990 comm="syz.4.327" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.165061][ T4980] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.297773][ T4980] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.322: mark_inode_dirty error [ 145.458666][ T4980] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.459517][ T4980] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.322: corrupted inode contents [ 145.490157][ T5004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.328'. [ 145.534363][ T4980] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.534664][ T4980] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.322: mark_inode_dirty error [ 145.559121][ T4980] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.559700][ T4980] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.322: corrupted inode contents [ 145.581961][ T4980] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.582483][ T4980] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 145.601715][ T4980] loop1: lost filesystem error report for type 5 error -117 [ 145.602077][ T4980] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.322: corrupted inode contents [ 145.622191][ T4980] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.322: mark_inode_dirty error [ 145.636043][ T4980] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 145.645735][ T4980] loop1: lost filesystem error report for type 5 error -117 [ 145.646871][ T4980] EXT4-fs (loop1): 1 truncate cleaned up [ 145.662529][ T4980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.676571][ T4980] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.852053][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.872706][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.881900][ T28] audit: type=1400 audit(3932535898.016:662): avc: denied { create } for pid=5010 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 145.951733][ T5015] loop4: detected capacity change from 0 to 4096 [ 145.963584][ T5015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.982410][ T5015] tmpfs: Bad value for 'size' [ 145.990524][ T5011] loop1: detected capacity change from 0 to 8192 [ 146.022980][ T28] audit: type=1400 audit(3932535898.166:663): avc: denied { write } for pid=5014 comm="syz.4.329" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.063713][ T5011] loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 146.102343][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.256543][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.265400][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.277756][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.287066][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.368584][ T28] audit: type=1400 audit(3932535898.516:664): avc: denied { mounton } for pid=5017 comm="syz.3.332" path="/69/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.022948][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.085069][ T5035] loop4: detected capacity change from 0 to 512 [ 147.149295][ T5035] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 147.177239][ T5035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.197050][ T5035] block device autoloading is deprecated and will be removed. [ 147.209944][ T5037] loop0: detected capacity change from 0 to 4096 [ 147.217115][ T5035] EXT4-fs (loop4): couldn't read superblock of external journal [ 147.232826][ T5037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.283394][ T5037] tmpfs: Bad value for 'size' [ 147.338246][ T28] audit: type=1400 audit(3932535899.476:665): avc: denied { write } for pid=5036 comm="syz.0.335" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.360461][ T28] audit: type=1400 audit(3932535899.486:666): avc: denied { sqpoll } for pid=5030 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 147.545215][ T28] audit: type=1400 audit(3932535899.686:667): avc: denied { create } for pid=5047 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 147.621867][ T28] audit: type=1400 audit(3932535899.686:668): avc: denied { bind } for pid=5047 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 147.690465][ T5057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'. [ 147.694966][ T28] audit: type=1400 audit(3932535899.716:669): avc: denied { bind } for pid=5047 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.724750][ T5056] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 147.752060][ T28] audit: type=1400 audit(3932535899.836:670): avc: denied { write } for pid=5049 comm="syz.3.339" path="socket:[9606]" dev="sockfs" ino=9606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 147.782572][ T5056] batman_adv: batadv0: Interface deactivated: dummy0 [ 147.824087][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.838939][ T5028] udevd[5028]: inotify_add_watch(7, /dev/loop1p70, 10) failed: No such file or directory [ 147.840047][ T5024] udevd[5024]: inotify_add_watch(7, /dev/loop1p66, 10) failed: No such file or directory [ 147.858403][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop1p60, 10) failed: No such file or directory [ 147.869209][ T5027] udevd[5027]: inotify_add_watch(7, /dev/loop1p62, 10) failed: No such file or directory [ 147.882299][ T5056] batman_adv: batadv0: Removing interface: dummy0 [ 147.903777][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p67, 10) failed: No such file or directory [ 147.906783][ T5023] udevd[5023]: inotify_add_watch(7, /dev/loop1p59, 10) failed: No such file or directory [ 147.925420][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop1p65, 10) failed: No such file or directory [ 147.928157][ T5026] udevd[5026]: inotify_add_watch(7, /dev/loop1p69, 10) failed: No such file or directory [ 147.943328][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p61, 10) failed: No such file or directory [ 147.957175][ T5029] udevd[5029]: inotify_add_watch(7, /dev/loop1p64, 10) failed: No such file or directory [ 148.008354][ T5056] team0: Port device dummy0 added [ 148.015176][ T5063] loop0: detected capacity change from 0 to 4096 [ 148.017510][ T5052] loop4: detected capacity change from 0 to 512 [ 148.031322][ T5063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.061955][ T5056] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 148.074946][ T5063] tmpfs: Bad value for 'size' [ 148.203268][ T5050] loop3: detected capacity change from 0 to 1024 [ 148.206420][ T5056] team0: Port device dummy0 removed [ 148.233048][ T3284] ================================================================== [ 148.241201][ T3284] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 148.242667][ T5052] EXT4-fs: test_dummy_encryption option not supported [ 148.248185][ T3284] [ 148.248195][ T3284] write to 0xffff8881042db1e4 of 4 bytes by task 5026 on cpu 0: [ 148.248214][ T3284] shmem_mknod+0x143/0x170 [ 148.248251][ T3284] shmem_create+0x34/0x50 [ 148.248285][ T3284] path_openat+0xcfb/0x2000 [ 148.248325][ T3284] do_file_open+0x16c/0x290 [ 148.248366][ T3284] do_sys_openat2+0xa0/0x130 [ 148.248402][ T3284] __x64_sys_openat+0xf2/0x120 [ 148.248438][ T3284] x64_sys_call+0x1e39/0x3020 [ 148.248470][ T3284] do_syscall_64+0x136/0x3c0 [ 148.248495][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.248520][ T3284] [ 148.248527][ T3284] read to 0xffff8881042db1e4 of 4 bytes by task 3284 on cpu 1: [ 148.248546][ T3284] fill_mg_cmtime+0x5b/0x240 [ 148.248575][ T3284] generic_fillattr+0x24d/0x340 [ 148.248606][ T3284] shmem_getattr+0x181/0x200 [ 148.248641][ T3284] vfs_getattr_nosec+0x146/0x1e0 [ 148.248673][ T3284] vfs_getattr+0x48/0x60 [ 148.248701][ T3284] vfs_statx_path+0x28/0x140 [ 148.248735][ T3284] vfs_statx+0xc4/0x170 [ 148.248762][ T3284] vfs_fstatat+0x118/0x170 [ 148.248790][ T3284] __se_sys_newfstatat+0x55/0x3e0 [ 148.248819][ T3284] __x64_sys_newfstatat+0x55/0x70 [ 148.248850][ T3284] x64_sys_call+0x2c64/0x3020 [ 148.248880][ T3284] do_syscall_64+0x136/0x3c0 [ 148.248907][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.248934][ T3284] [ 148.248939][ T3284] value changed: 0x170093ac -> 0x1705c375 [ 148.248954][ T3284] [ 148.248960][ T3284] Reported by Kernel Concurrency Sanitizer on: [ 148.248978][ T3284] CPU: 1 UID: 0 PID: 3284 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 148.249020][ T3284] Tainted: [W]=WARN [ 148.249029][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.249046][ T3284] ================================================================== [ 148.253005][ T28] audit: type=1400 audit(3932535900.396:671): avc: denied { write } for pid=5062 comm="syz.0.342" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.381194][ T5056] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.655732][ T5050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.728827][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.776908][ T28] audit: type=1400 audit(3932535900.906:672): avc: denied { write } for pid=5049 comm="syz.3.339" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.844632][ T28] audit: type=1400 audit(3932535900.986:673): avc: denied { write } for pid=5049 comm="syz.3.339" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.896841][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.