last executing test programs: 7.056916916s ago: executing program 3 (id=586): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000000000000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="213e38413de103adb7749f94306c4869c2577055c6bb", @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) syslog(0x3, &(0x7f0000002ac0)=""/148, 0x94) pipe2(&(0x7f00000003c0), 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="2401000012000501000000000000000005001900"], 0x124}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000800) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x47, 0x3a, '#! ', 0x3a, '\a\x00\x8aH\xef\xe8\xafM\x85\xcfS\xe4\x11\x1e\xc5\xb8\x88\x1a\f{vLm\xd2_\x03\xcdm\xf19+\x19\x87\xd0.\xa27?\xdagE\xdd\xcf\xed\xc8\xef\xdc\x9f\x86\xfe\xc6jcj\xdbM\x127)\x8b\xc6\x10\xe7G\v\xcf', 0x3a, './file1'}, 0x6c) socket(0x3, 0x4, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x19, 0x116d) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf7aa}}, './file0\x00'}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001b40)}, 0x90) 6.463350747s ago: executing program 4 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xae7, 0x2}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x22020400) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x80, 0xfe, 0x0, 0x0, 0x200, 0x10200, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0xc08c, 0x200004, 0x1, 0x1, 0x6, 0x35, 0x6f88, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8) read(r3, &(0x7f0000000000)=""/65, 0x41) 6.062071174s ago: executing program 1 (id=594): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x8, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0xc6d, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r6, 0x3516, 0xa00100, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) unshare(0x2000400) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) cachestat(r8, 0x0, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffc93}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x3, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd27, 0x3378}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd26, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9}, 0x94) 5.790851053s ago: executing program 4 (id=596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000240)={0x11, 0x800, 0x0, 0x1, 0xfc, 0x6, @multicast}, 0x14) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c674f22200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x50, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x500, 0x0, 0x1, 0x0, @multicast2, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) sendto$inet6(r0, &(0x7f0000000300)="a6a7", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) 5.523321551s ago: executing program 2 (id=597): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000003040)={@broadcast, @remote, @local}, 0x47) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002f80), &(0x7f0000003000)=0x68) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r6, r6, 0x0, 0x548) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x13}], 0x1}}], 0x400000000000126, 0x20000800) pause() shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000010080)) r7 = creat(&(0x7f0000000080)='./bus\x00', 0xad) fcntl$setstatus(r7, 0x4, 0x46100) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) 5.482648394s ago: executing program 3 (id=598): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x40c020, &(0x7f0000000700)={[{@nouid32}, {@data_err_abort}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}], [{@fsname={'fsname', 0x3d, '/dev/sg#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63460ba0002c060000000000000000000000000000000d4d00000000000000000000000000240000000a00006e2200004e24000000000000000200000001000000040000000100"/84], 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) r6 = add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e00, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r8 = getpgrp(0x0) syz_pidfd_open(r8, 0x0) 5.24643901s ago: executing program 3 (id=599): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40240, 0x104) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x4000000, {0x7, 0x0, 0x0, r6, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.622750023s ago: executing program 2 (id=601): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 4.3685472s ago: executing program 3 (id=602): socket(0xa, 0x3, 0x87) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c000180"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) socket(0x400000000010, 0x3, 0x0) 4.298359835s ago: executing program 3 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x128, 0x1f8, 0x490, 0x0, 0x128, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x2, 0x78}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2]}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000300)={@local, 0x0, r5}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="cc", 0x1}], 0x1}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x16, 0x0, 0x0, 0x8000}, 0x48004) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r9) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)={0x24, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x19, 0x0, 0x0, @uid}, @nested={0xc, 0x5c, 0x0, 0x1, [@nested={0x8, 0xbd, 0x0, 0x1, [@nested={0x4, 0x3b}]}]}]}, 0x24}], 0x1}, 0x0) 3.196730001s ago: executing program 2 (id=605): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x404}, 0x4004014) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r2, 0x10, 0x100, 0x5) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioprio_set$pid(0x2, r3, 0x2007) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x88}}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 3.052581981s ago: executing program 0 (id=607): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 2.556271505s ago: executing program 2 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xae7, 0x2}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x22020400) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x80, 0xfe, 0x0, 0x0, 0x200, 0x10200, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0xc08c, 0x200004, 0x1, 0x1, 0x6, 0x35, 0x6f88, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8) read(r3, &(0x7f0000000000)=""/65, 0x41) syz_emit_ethernet(0xaf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @remote, 0x7ff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d700000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) 2.210520769s ago: executing program 1 (id=609): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0/../file0\x00'}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)}], 0x1) fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', r0, 0x0, 0x400) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r5, 0x3, &(0x7f00000015c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x8e0, r4, 0x0, 0x0, 0x4}, 0x0, 0x0]) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2008005, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/197, 0xc5}], 0x1, 0x8f, 0x6b8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00000, &(0x7f00000007c0), 0x1, 0x579, &(0x7f0000000880)="$eJzs3U1rG0cfAPD/ylLenyd+IISnPRRDDk0JkWO7Lyn0kBxLGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPTe3nMqoV+gnyLQBEIJpj304rLyrl8iyXIc1Xaj3w9kzWhWmv1rdkYzWskKYGCNpH8KEa9ExFdJxNGISLKyYmSFIyvbLT29OZleklhe/vj3pLVdms8fK7/f4Szz/4j45YuIU4X2ehsLizOVWq06l+VHm7PXRhsLi6evzFamq9PVq+MTE2ffmhh/9523+xbrGxf//PajB++f/fLE0jc/PS7eTeJcHMnK1sfxAm6tz4zESPaclOLcMxuOrVz1o849IdntHWBbhrJ+Xop0DDgaQ1mvB15+n0fEMjCgkh79f182UuzU/gA7JZ8H5Gv7Pq2D/zWenF9ZALXHX1x5byQOtNZGh5aSDSujdL073If60zruP7p3N71E/96HAOjp1u2IOFMs5mPf01JekmTj3/ad2cI2z9Zh/IOd8+D8yqymff5TWJ3/RIf5z+EOfXc7evf/wuM+VNNVOv97r0v8meGhLPef1pyvlFy+UqumY9t/I+JklPan+bFN6ji79HC5W9n6+d/9R/vvpvXnc8FsPx4X92+8z1SlWXmRmNd7cjvi1Y7z32S1/ZMO7Z8+Hxe3WMfx6r3XupWtxR/F9Lo9/n/W8g8Rr3ds/7UzWsnm5ydHW8fDaH5UtPvjzvFfu9W/sf13Pv60/Q9tHv9wsv58beP56/j+wF/VbmUb4o9O8Xc+/vcln7TS+btTNyrN5txYxL7kw/bbx9fum+fz7dP4T57YfPxbO/5/Xn2cgxHx6Rbjv3Psx6Etxb9L7T/1XO3//ImHH3z2Xbf6e8eftv+brdTJ7JatjH899qsU2z6aAQAAAAAAYO8qRMSRSArl1XShUC6vfL7jWBwq1OqN5qnL9fmrU9H6ruxwlAr5me6j6z4PMZZ9HjbPjz+Tn4iI/0XE10MHW/nyZL02tdvBAwAAAAAAAAAAAAAAAAAAwB5xuMv3/1O/df2v5cBLw09+w+Dq2f/78UtPwJ7k9R8Gl/4Pg0v/h8Gl/8Pg0v9hcG2h/5d2Yj+Anef1HwaX/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAB9dfHChfSyvPT05mSan7q+MD9Tv356qtqYKc/OT5Yn63PXytP1+nStWp6sz/Z6vFq9fm1sPOZvjDarjeZoY2Hx0mx9/mrz0pXZynT1UtXvCAAAAAAAAAAAAAAAAAAAAEC7xsLiTKVWq85JSGwrUdwbuyHR58Ruj0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObvAAAA//9q/Swd") symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/16], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) socket$nl_netfilter(0x10, 0x3, 0xc) 2.089707637s ago: executing program 0 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x13, 0x4, 0x2, 0x2a, 0x4c, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x56, [@rand_addr=0x64010101, @loopback, @empty, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x100}], 0x1, 0x0, 0x0, 0x0) unshare(0x6a040000) 2.04257313s ago: executing program 4 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) socket(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) 2.030222911s ago: executing program 1 (id=612): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e21, 0x659, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x7ff, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)="00865ca61f4f34fba71210e7d56408f49c3b23b312d49075e437c60daae32944e4b8644e809fcbfc1615a03e512b2cef70c8c36faa020b776259b24ffc50b20ce9a15f34c7", 0x45}, {0x0}], 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040)="1cce1b8e775c38b76397df876a40ec2c6d0ba79b2676016155e958cfe580211ff89bcebe50dd2428078464236330a62cd272a7e30d1300815239", 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYRES64=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) lseek(r7, 0x1000000007f, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x2103}, {r8, 0x2}], 0x2, &(0x7f0000000080)={r9, r10+10000000}, &(0x7f00000000c0), 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.966969955s ago: executing program 4 (id=613): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40240, 0x104) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x4000000, {0x7, 0x0, 0x0, r6, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.966113345s ago: executing program 1 (id=614): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r7, &(0x7f0000000000)=""/34, 0x22) getdents(r7, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r5, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) preadv2(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 1.902459999s ago: executing program 1 (id=615): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 1.432515072s ago: executing program 2 (id=616): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x1a0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f7, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x50) 1.092703765s ago: executing program 0 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4004) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r6, 0x4040099d}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x80, 0x3, 0x0, 0x0, 0x0, 0x8, 0x40386, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x1400, 0x4, 0x7f, 0x1, 0xaf, 0x7fff, 0x7, 0x0, 0xdef9, 0x0, 0x9}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x2, 0x9}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 536.843873ms ago: executing program 2 (id=618): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 531.640874ms ago: executing program 4 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x205, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r7, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f00000000c0)={0x0, 0x62c4, 0x200, 0x1, 0x7}, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) pipe2(&(0x7f0000000100), 0x84800) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r10 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc5ec3, 0x0) flock(r11, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r12, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb31}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000001c0)={[{@overriderock}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@nocompress}, {@session={'session', 0x3d, 0x2}}]}, 0xff, 0x55a, &(0x7f0000000940)="$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") ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @remote}) 370.494375ms ago: executing program 3 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x13, 0x4, 0x2, 0x2a, 0x4c, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x56, [@rand_addr=0x64010101, @loopback, @empty, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0) unshare(0x6a040000) 192.705727ms ago: executing program 4 (id=621): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, 0x0, 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 139.90964ms ago: executing program 0 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x74bd29, 0x10080, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xb7, 0x1, 0x4, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20009, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x75, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000400)='./file0\x00', 0x4000423) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r3) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x1fc}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="28000e008c18ac0f000000000000322e981dd4e9e4dccd4600eabeb57bc804087e7f29329facfd29aec61b1500fab9062d"], 0x44}}, 0x4000000) 45.881727ms ago: executing program 0 (id=623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) socket(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d6b63591fccb765a9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x4d2f02, 0x0) 522.4µs ago: executing program 0 (id=624): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000003040)={@broadcast, @remote, @local}, 0x47) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002f80), &(0x7f0000003000)=0x68) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r6, r6, 0x0, 0x548) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x13}], 0x1}}], 0x400000000000126, 0x20000800) pause() shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000010080)) r7 = creat(&(0x7f0000000080)='./bus\x00', 0xad) fcntl$setstatus(r7, 0x4, 0x46100) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) 0s ago: executing program 1 (id=625): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r1, 0x40305828, &(0x7f0000000300)={0x60, 0x3, &(0x7f000091f000/0x2000)=nil, &(0x7f00001f5000/0x2000)=nil, 0x10000, 0x0, 0x0, 0x2, 0x6a, 0x2, 0x51, 0x20}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000009000000000c00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_emit_ethernet(0x82, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac1414bb000000000000000000000000ac1414000000000000000000000000000000d6e4bca505694bec0ed78052fbf267bd5ff5a36586ecf2e2f879de754f7f5d123890f4001873b6cf"], 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000006c0)={r5, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000000a00)="c7", 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) sendmsg$IPVS_CMD_GET_SERVICE(r4, 0x0, 0x20040000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x1c, r8, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r8, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x53}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0xbdab4a864e46607e}, 0x0) kernel console output (not intermixed with test programs): text=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.996389][ T4152] netlink: 'syz.1.142': attribute type 17 has an invalid length. [ 78.007953][ T4156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 78.022992][ T4157] loop2: detected capacity change from 0 to 512 [ 78.502301][ T28] audit: type=1400 audit(1775315100.489:465): avc: denied { read } for pid=4151 comm="syz.1.142" path="socket:[7068]" dev="sockfs" ino=7068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.782288][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.664875][ T28] audit: type=1400 audit(1775315101.619:466): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.990559][ T4152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.669938][ T4175] loop0: detected capacity change from 0 to 128 [ 80.702929][ T4175] vfat: Unknown parameter 'ÿ' [ 80.728147][ T4183] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 80.734722][ T4183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.748436][ T4183] vhci_hcd vhci_hcd.0: Device attached [ 80.787407][ T28] audit: type=1400 audit(1775315102.769:467): avc: denied { mount } for pid=4182 comm="syz.1.145" name="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.814505][ T4183] loop1: detected capacity change from 0 to 512 [ 80.840663][ T28] audit: type=1400 audit(1775315102.799:468): avc: denied { search } for pid=4182 comm="syz.1.145" name="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.851889][ T4181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.914968][ T28] audit: type=1400 audit(1775315102.799:469): avc: denied { read open } for pid=4182 comm="syz.1.145" path="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.923104][ T4183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.953426][ T4192] loop2: detected capacity change from 0 to 512 [ 81.373174][ T3415] usb 4-1: SetAddress Request (2) to port 0 [ 81.630081][ T3415] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.677642][ T4183] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.145: bad orphan inode 131083 [ 81.708210][ T4183] loop1: lost filesystem error report for type 5 error -117 [ 81.709294][ T4183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.895870][ T4198] loop4: detected capacity change from 0 to 512 [ 81.933641][ T4198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.080810][ T4198] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.086430][ T28] audit: type=1400 audit(1775315105.349:470): avc: denied { create } for pid=4197 comm="syz.4.147" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.184317][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.185561][ T4184] vhci_hcd: connection reset by peer [ 84.208530][ T12] vhci_hcd vhci_hcd.1: stop threads [ 84.219214][ T12] vhci_hcd vhci_hcd.1: release socket [ 84.231070][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 84.311265][ T28] audit: type=1326 audit(1775315106.299:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 84.348518][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.363420][ T4212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 84.386740][ T28] audit: type=1326 audit(1775315106.299:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 84.415543][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 84.445856][ T28] audit: type=1326 audit(1775315106.299:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 84.472558][ T28] audit: type=1326 audit(1775315106.329:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 84.506525][ T28] audit: type=1326 audit(1775315106.329:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 84.542754][ T28] audit: type=1326 audit(1775315106.329:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 84.548254][ T4218] loop7: detected capacity change from 0 to 16384 [ 84.577478][ T4221] loop3: detected capacity change from 0 to 128 [ 84.585047][ T4221] msdos: Bad value for 'uid' [ 84.587692][ T28] audit: type=1326 audit(1775315106.329:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 84.614762][ T4221] msdos: Bad value for 'uid' [ 84.852554][ T4220] loop1: detected capacity change from 0 to 512 [ 84.980462][ T4227] loop3: detected capacity change from 0 to 1024 [ 85.031863][ T4227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 85.042638][ T4227] System zones: 0-1, 3-36 [ 85.053944][ T4220] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.151: invalid indirect mapped block 256 (level 2) [ 85.072193][ T4227] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.152: bad orphan inode 134217728 [ 85.083373][ T4227] loop3: lost filesystem error report for type 5 error -117 [ 85.101865][ T4227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.507040][ T4220] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.507581][ T4220] EXT4-fs (loop1): 2 truncates cleaned up [ 85.516871][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 85.516889][ C0] EXT4-fs (loop1): initial error at time 1775315107: ext4_free_branches:1023: inode 11 [ 85.516938][ C0] EXT4-fs (loop1): last error at time 1775315107: ext4_free_branches:1023: inode 11 [ 85.563947][ T28] audit: type=1326 audit(1775315106.329:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 85.587804][ T28] audit: type=1326 audit(1775315106.329:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.4.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 85.678508][ T4220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.746326][ T4234] loop4: detected capacity change from 0 to 512 [ 85.760635][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.794735][ T4234] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.809878][ T4234] EXT4-fs (loop4): mount failed [ 85.866018][ T4233] netlink: 68 bytes leftover after parsing attributes in process `syz.0.154'. [ 86.039243][ T4233] netlink: 64 bytes leftover after parsing attributes in process `syz.0.154'. [ 86.242505][ T4214] syzkaller0: entered promiscuous mode [ 86.248208][ T4214] syzkaller0: entered allmulticast mode [ 87.660950][ T4250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 87.670147][ T3415] usb 4-1: device descriptor read/8, error -110 [ 87.788422][ T3415] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 88.174969][ T4255] loop2: detected capacity change from 0 to 1024 [ 88.486964][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.526039][ T4255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 88.537059][ T4255] System zones: 0-1, 3-36 [ 88.556550][ T4255] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.156: bad orphan inode 134217728 [ 88.572704][ T4255] loop2: lost filesystem error report for type 5 error -117 [ 88.592314][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.758445][ T3415] usb 4-1: enqueue for inactive port 0 [ 88.764161][ T3415] usb 4-1: enqueue for inactive port 0 [ 88.769764][ T3415] usb 4-1: enqueue for inactive port 0 [ 88.988424][ T4265] loop0: detected capacity change from 0 to 512 [ 89.441889][ T4265] EXT4-fs (loop0): failed to initialize system zone (-117) [ 89.638369][ T4274] loop1: detected capacity change from 0 to 512 [ 89.874914][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.528073][ T4265] EXT4-fs (loop0): mount failed [ 90.876986][ T4279] loop2: detected capacity change from 0 to 128 [ 90.887468][ T4279] vfat: Unknown parameter 'ÿ' [ 91.234710][ T28] kauditd_printk_skb: 255 callbacks suppressed [ 91.234731][ T28] audit: type=1400 audit(1775315113.029:735): avc: denied { write } for pid=4271 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.110044][ T28] audit: type=1400 audit(1775315113.029:736): avc: denied { connect } for pid=4271 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.040120][ T3415] usb usb4-port1: attempt power cycle [ 93.419756][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 94.279191][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.316550][ T4265] bridge_slave_1 (unregistering): left allmulticast mode [ 94.358873][ T4265] bridge_slave_1 (unregistering): left promiscuous mode [ 94.376548][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.450235][ T4299] loop4: detected capacity change from 0 to 512 [ 94.468952][ T28] audit: type=1400 audit(1775315116.459:737): avc: denied { listen } for pid=4300 comm="syz.2.166" lport=39496 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.531724][ T4299] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 94.544785][ T28] audit: type=1400 audit(1775315116.489:738): avc: denied { accept } for pid=4300 comm="syz.2.166" lport=39496 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.544875][ T28] audit: type=1400 audit(1775315116.499:739): avc: denied { setopt } for pid=4300 comm="syz.2.166" lport=39496 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.544964][ T28] audit: type=1400 audit(1775315116.499:740): avc: denied { create } for pid=4302 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.544991][ T28] audit: type=1400 audit(1775315116.499:741): avc: denied { write } for pid=4302 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.656667][ T4301] loop2: detected capacity change from 0 to 2048 [ 94.693290][ T3305] udevd[3305]: incorrect ext4 checksum on /dev/loop2 [ 94.716219][ T28] audit: type=1400 audit(1775315116.689:742): avc: denied { create } for pid=4300 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 94.785193][ T4299] EXT4-fs (loop4): 1 truncate cleaned up [ 94.844007][ T28] audit: type=1400 audit(1775315116.689:743): avc: denied { sys_admin } for pid=4300 comm="syz.2.166" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 94.870876][ T4313] loop2: detected capacity change from 0 to 512 [ 94.881447][ T28] audit: type=1400 audit(1775315116.759:744): avc: denied { execute } for pid=4309 comm="syz.2.170" name="file0" dev="tmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.933549][ T4299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.986978][ T4313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.000047][ T4313] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.044855][ T4314] loop3: detected capacity change from 0 to 8192 [ 95.064660][ T4316] loop0: detected capacity change from 0 to 128 [ 95.102117][ T4316] FAT-fs (loop0): bogus number of reserved sectors [ 95.115529][ T4316] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 95.126712][ T4316] FAT-fs (loop0): Can't find a valid FAT filesystem [ 95.238535][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.294183][ T4314] loop3: detected capacity change from 0 to 128 [ 95.305635][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.908818][ T3415] usb usb4-port1: unable to enumerate USB device [ 96.645011][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 96.645038][ T28] audit: type=1400 audit(1775315118.609:748): avc: denied { map } for pid=4335 comm="syz.0.175" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.799594][ T28] audit: type=1400 audit(1775315118.619:749): avc: denied { read write } for pid=4335 comm="syz.0.175" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.825412][ T28] audit: type=1400 audit(1775315118.709:751): avc: denied { execstack } for pid=4346 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 96.847776][ T28] audit: type=1400 audit(1775315118.709:750): avc: denied { read } for pid=4339 comm="syz.4.176" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.876759][ T4347] loop3: detected capacity change from 0 to 128 [ 96.957329][ T4355] netlink: 'syz.0.179': attribute type 13 has an invalid length. [ 96.987910][ T28] audit: type=1400 audit(1775315118.719:752): avc: denied { open } for pid=4339 comm="syz.4.176" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.007624][ T4355] netlink: 'syz.0.179': attribute type 17 has an invalid length. [ 97.078066][ T4348] loop4: detected capacity change from 0 to 8192 [ 97.157591][ T3305] loop4: p1 < > p2 p4 < p5 > [ 97.157605][ T3305] loop4: partition table partially beyond EOD, truncated [ 97.157676][ T3305] loop4: p1 start 134217728 is beyond EOD, truncated [ 97.157693][ T3305] loop4: p2 size 591360 extends beyond EOD, truncated [ 97.157896][ T4351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 97.160150][ T28] audit: type=1400 audit(1775315119.119:753): avc: denied { create } for pid=4349 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 97.169979][ T3305] loop4: p5 size 591360 extends beyond EOD, truncated [ 97.261456][ T4348] loop4: p1 < > p2 p4 < p5 > [ 97.261474][ T4348] loop4: partition table partially beyond EOD, truncated [ 97.261619][ T4348] loop4: p1 start 134217728 is beyond EOD, truncated [ 97.261642][ T4348] loop4: p2 size 591360 extends beyond EOD, truncated [ 97.264842][ T4348] loop4: p5 size 591360 extends beyond EOD, truncated [ 97.300238][ T28] audit: type=1400 audit(1775315119.179:754): avc: denied { setopt } for pid=4339 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.943178][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943178][ T36] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 97.943273][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943273][ T36] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 97.943377][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943377][ T36] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 97.943489][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943489][ T36] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 97.943529][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943529][ T36] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 97.943565][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943565][ T36] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 97.943601][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943601][ T36] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 97.943634][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943634][ T36] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 97.943741][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943741][ T36] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 97.943778][ T36] kworker/u8:2: attempt to access beyond end of device [ 97.943778][ T36] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 98.120964][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.212660][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.298953][ T28] audit: type=1400 audit(1775315121.269:755): avc: denied { ioctl } for pid=4381 comm="syz.3.182" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.361372][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.385692][ T28] audit: type=1400 audit(1775315121.369:756): avc: denied { bind } for pid=4381 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.626169][ T4390] loop4: detected capacity change from 0 to 512 [ 99.639981][ T4390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.822097][ T4355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.831351][ T4355] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.842356][ T4355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.873501][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.907870][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.128271][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.179914][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.263600][ T4410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 101.151949][ T4410] netlink: 'syz.1.185': attribute type 2 has an invalid length. [ 101.161898][ T28] audit: type=1400 audit(1775315123.149:757): avc: denied { nlmsg_write } for pid=4417 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 101.241611][ T4423] process 'syz.1.185' launched '/dev/fd/11' with NULL argv: empty string added [ 101.252779][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.284937][ T4410] netlink: 'syz.1.185': attribute type 2 has an invalid length. [ 101.298497][ T4410] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 101.306591][ T4410] netlink: 176 bytes leftover after parsing attributes in process `syz.1.185'. [ 101.363957][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 101.770976][ T4433] loop4: detected capacity change from 0 to 256 [ 102.586366][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.599678][ T4443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 103.609495][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.572989][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.582143][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.959196][ T4446] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 104.972956][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 104.972972][ T28] audit: type=1400 audit(1775315126.949:759): avc: denied { mac_admin } for pid=4437 comm="syz.3.193" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.003751][ T4433] FAT-fs (loop4): Directory bread(block 64) failed [ 105.010608][ T4433] FAT-fs (loop4): Directory bread(block 65) failed [ 105.017533][ T4433] FAT-fs (loop4): Directory bread(block 66) failed [ 105.024495][ T4433] FAT-fs (loop4): Directory bread(block 67) failed [ 105.031523][ T4433] FAT-fs (loop4): Directory bread(block 68) failed [ 105.038434][ T4433] FAT-fs (loop4): Directory bread(block 69) failed [ 105.045672][ T4433] FAT-fs (loop4): Directory bread(block 70) failed [ 105.052579][ T4433] FAT-fs (loop4): Directory bread(block 71) failed [ 105.059575][ T4433] FAT-fs (loop4): Directory bread(block 72) failed [ 105.065316][ T28] audit: type=1400 audit(1775315127.009:760): avc: denied { relabelto } for pid=4437 comm="syz.3.193" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 105.066317][ T4433] FAT-fs (loop4): Directory bread(block 73) failed [ 105.179765][ T28] audit: type=1400 audit(1775315127.009:761): avc: denied { associate } for pid=4437 comm="syz.3.193" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 105.338396][ T28] audit: type=1400 audit(1775315127.009:762): avc: denied { write } for pid=4437 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.358166][ T28] audit: type=1400 audit(1775315127.109:763): avc: denied { bind } for pid=4449 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.130372][ T4450] bridge_slave_0: left allmulticast mode [ 106.130393][ T4450] bridge_slave_0: left promiscuous mode [ 106.133216][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.135043][ T4450] bond0: (slave bond_slave_0): Releasing backup interface [ 106.136262][ T4450] bond0: (slave bond_slave_1): Releasing backup interface [ 106.138293][ T4450] team0: Port device team_slave_0 removed [ 106.161373][ T4463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 106.242635][ T4450] team0: Port device team_slave_1 removed [ 106.243156][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.254292][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.255473][ T4453] 9pnet_fd: p9_fd_create_unix (4453): problem connecting socket: ./file0: -2 [ 106.258702][ T4450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.573343][ T28] audit: type=1326 audit(1775315129.559:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.0.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff5fa7c819 code=0x0 [ 107.931773][ T4482] loop0: detected capacity change from 0 to 2048 [ 107.961680][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.987515][ T28] audit: type=1400 audit(1775315129.959:765): avc: denied { getopt } for pid=4474 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.022832][ T28] audit: type=1400 audit(1775315130.009:766): avc: denied { connect } for pid=4479 comm="syz.1.201" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.085886][ T4491] loop4: detected capacity change from 0 to 512 [ 108.175741][ T28] audit: type=1400 audit(1775315130.159:767): avc: denied { remount } for pid=4483 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 108.220789][ T28] audit: type=1400 audit(1775315130.209:768): avc: denied { create } for pid=4483 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.257822][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 108.257847][ T4490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 108.257863][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 108.258068][ T4490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 108.258084][ T4490] netlink: 'syz.1.201': attribute type 6 has an invalid length. [ 108.438708][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.804543][ T4499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 108.930014][ T4506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 110.013074][ T4510] syz.1.207 (4510) used greatest stack depth: 8752 bytes left [ 113.426275][ T4542] loop0: detected capacity change from 0 to 512 [ 113.733783][ T4546] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 113.744972][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 113.744999][ T28] audit: type=1400 audit(1775315135.719:770): avc: denied { read write } for pid=4537 comm="syz.2.212" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 113.856539][ T4542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.213684][ T28] audit: type=1400 audit(1775315135.719:771): avc: denied { open } for pid=4537 comm="syz.2.212" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 114.284049][ T28] audit: type=1400 audit(1775315135.719:772): avc: denied { relabelfrom } for pid=4537 comm="syz.2.212" name="UNIX" dev="sockfs" ino=7750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 114.327474][ T4553] loop4: detected capacity change from 0 to 512 [ 114.333875][ T28] audit: type=1400 audit(1775315135.739:773): avc: denied { relabelto } for pid=4537 comm="syz.2.212" name="UNIX" dev="sockfs" ino=7750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 114.339681][ T4542] EXT4-fs (loop0): 1 truncate cleaned up [ 114.363149][ T28] audit: type=1326 audit(1775315135.769:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.3.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1149b5c819 code=0x0 [ 114.372898][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.391539][ T28] audit: type=1400 audit(1775315135.839:775): avc: denied { getopt } for pid=4537 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.419507][ T4542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.433009][ T4553] EXT4-fs (loop4): failed to initialize system zone (-117) [ 114.440734][ T4553] EXT4-fs (loop4): mount failed [ 114.674807][ T4549] loop3: detected capacity change from 0 to 2048 [ 114.675857][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.694466][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.792802][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 114.825008][ T28] audit: type=1400 audit(1775315136.799:776): avc: denied { name_bind } for pid=4541 comm="syz.0.213" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 115.202819][ T28] audit: type=1400 audit(1775315136.909:777): avc: denied { add_name } for pid=4541 comm="syz.0.213" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.253283][ T4548] netlink: 'syz.2.212': attribute type 29 has an invalid length. [ 115.351491][ T4549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.367033][ T4569] loop2: detected capacity change from 0 to 128 [ 115.428836][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.438196][ T3507] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.457029][ T3507] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.517466][ T4571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 115.545231][ T4569] mmap: syz.2.216 (4569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.613202][ T3507] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.641374][ T3507] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.845167][ T4583] loop2: detected capacity change from 0 to 512 [ 115.912101][ T4583] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.953616][ T4583] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.987470][ T4583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 116.011873][ T4583] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.019542][ T4583] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.216: bg 0: block 361: padding at end of block bitmap is not set [ 116.019578][ T4583] loop2: lost filesystem error report for type 5 error -117 [ 116.020652][ T4583] EXT4-fs (loop2): Remounting filesystem read-only [ 116.020992][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.021598][ T4583] EXT4-fs (loop2): 1 truncate cleaned up [ 116.022310][ T4583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 116.103184][ T4586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 116.121122][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.162242][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.171588][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.266219][ T3503] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.266335][ T3503] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.266374][ T3503] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.266507][ T3503] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.315888][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 116.452914][ T4601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'. [ 116.511080][ T4604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4604 comm=syz.4.224 [ 116.511745][ T28] audit: type=1326 audit(1775315138.499:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 116.512422][ T28] audit: type=1326 audit(1775315138.499:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba50c819 code=0x7ffc0000 [ 118.471543][ T4620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.226'. [ 119.396015][ T4626] loop2: detected capacity change from 0 to 4096 [ 120.481032][ T4626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.485384][ T4633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'. [ 120.756155][ T4638] loop4: detected capacity change from 0 to 1024 [ 120.772898][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 120.772988][ T28] audit: type=1400 audit(1775315142.699:814): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.781025][ T4638] EXT4-fs: test_dummy_encryption option not supported [ 121.481748][ T4640] loop4: detected capacity change from 0 to 512 [ 121.549726][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.905491][ T4647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 122.545337][ T4640] EXT4-fs (loop4): 1 orphan inode deleted [ 122.557202][ T4640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.560955][ T4640] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.781615][ T4655] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 124.288849][ T3503] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.288932][ T3503] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 124.392156][ T3418] IPVS: starting estimator thread 0... [ 124.538482][ T4660] IPVS: using max 2496 ests per chain, 124800 per kthread [ 124.561754][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.585289][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'. [ 124.778908][ T28] audit: type=1400 audit(1775315146.769:815): avc: denied { name_bind } for pid=4677 comm="syz.3.241" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 125.358641][ T4690] netlink: 764 bytes leftover after parsing attributes in process `syz.3.243'. [ 125.372667][ T4684] loop0: detected capacity change from 0 to 2048 [ 125.475528][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 125.494904][ T4694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 126.231007][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 126.262918][ T4684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.727234][ T4698] loop1: detected capacity change from 0 to 128 [ 126.736127][ T4698] FAT-fs (loop1): bogus number of reserved sectors [ 126.742878][ T4698] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 126.752337][ T4698] FAT-fs (loop1): Can't find a valid FAT filesystem [ 126.775876][ T4684] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.851100][ T28] audit: type=1400 audit(1775315148.829:816): avc: denied { getopt } for pid=4701 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.126831][ T4706] loop4: detected capacity change from 0 to 4096 [ 128.434902][ T4706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.493460][ T4690] macvlan2: entered promiscuous mode [ 128.618491][ T4690] macvlan2: entered allmulticast mode [ 128.708415][ T4690] veth0_virt_wifi: entered allmulticast mode [ 129.035532][ T28] audit: type=1400 audit(1775315150.999:817): avc: denied { ioctl } for pid=4714 comm="syz.3.247" path="socket:[8962]" dev="sockfs" ino=8962 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.061156][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 129.073800][ T4717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 129.442644][ T4697] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 129.469122][ T4697] EXT4-fs (loop0): Remounting filesystem read-only [ 129.572484][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.620472][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 129.784973][ T4717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 129.834674][ T4717] netlink: 'syz.3.247': attribute type 6 has an invalid length. [ 131.009732][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.180605][ T4748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.252'. [ 131.195645][ T4749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 131.199184][ T28] audit: type=1400 audit(1775315153.189:818): avc: denied { bind } for pid=4751 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.277817][ T28] audit: type=1400 audit(1775315153.209:819): avc: denied { bind } for pid=4751 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.504925][ T4760] netlink: 48 bytes leftover after parsing attributes in process `syz.1.256'. [ 131.613558][ T28] audit: type=1400 audit(1775315153.599:820): avc: denied { load_policy } for pid=4751 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.618275][ T4752] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 131.694383][ T4752] SELinux: failed to load policy [ 131.726369][ T28] audit: type=1400 audit(1775315153.709:821): avc: denied { mount } for pid=4765 comm="syz.1.260" name="/" dev="rpc_pipefs" ino=9094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 131.756540][ T4752] 9pnet_virtio: no channels available for device /selinux/load [ 131.796279][ T4764] loop3: detected capacity change from 0 to 128 [ 131.836148][ T4764] FAT-fs (loop3): bogus number of reserved sectors [ 131.908452][ T4764] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 131.931344][ T4764] FAT-fs (loop3): Can't find a valid FAT filesystem [ 132.121541][ T4786] loop4: detected capacity change from 0 to 4096 [ 132.186360][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 132.213375][ T4785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.263'. [ 132.226484][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 132.246582][ T4785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.263'. [ 132.260669][ T4785] netlink: 'syz.0.263': attribute type 6 has an invalid length. [ 132.293151][ T4786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.421557][ T28] audit: type=1400 audit(1775315156.369:822): avc: denied { create } for pid=4794 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 134.466783][ T28] audit: type=1326 audit(1775315156.449:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 134.469332][ T4801] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.265'. [ 135.449221][ T28] audit: type=1326 audit(1775315156.449:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 135.474166][ T28] audit: type=1326 audit(1775315156.449:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 136.046326][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.059180][ T28] audit: type=1326 audit(1775315156.449:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 136.348433][ T28] audit: type=1326 audit(1775315156.449:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 136.398726][ T28] audit: type=1326 audit(1775315156.449:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 136.448398][ T28] audit: type=1326 audit(1775315156.449:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 136.498234][ T28] audit: type=1326 audit(1775315156.449:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 136.547127][ T28] audit: type=1326 audit(1775315156.449:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f527456c819 code=0x7ffc0000 [ 136.960764][ T4823] loop1: detected capacity change from 0 to 128 [ 137.030795][ T4833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 137.137406][ T4827] loop4: detected capacity change from 0 to 512 [ 137.241949][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.257124][ T4827] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.260524][ T4823] loop1: detected capacity change from 0 to 512 [ 137.283791][ T4823] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.305432][ T4823] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 137.390783][ T4823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 137.407360][ T4823] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.417899][ T4823] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.269: bg 0: block 361: padding at end of block bitmap is not set [ 137.429474][ T4827] netlink: 52 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.444029][ T4823] loop1: lost filesystem error report for type 5 error -117 [ 137.448327][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 137.449105][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.456330][ C0] EXT4-fs (loop1): initial error at time 1775315159: ext4_validate_block_bitmap:441 [ 137.464169][ T4827] netlink: 52 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.472540][ C0] [ 137.472788][ C0] EXT4-fs (loop1): last error at time 1775315159: ext4_validate_block_bitmap:441 [ 137.489376][ T4823] EXT4-fs (loop1): Remounting filesystem read-only [ 137.493544][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.493824][ T4827] netlink: 52 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.547523][ T4823] EXT4-fs (loop1): 1 truncate cleaned up [ 137.600310][ T4823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 137.664300][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.688086][ T4845] lo speed is unknown, defaulting to 1000 [ 137.696821][ T4845] lo speed is unknown, defaulting to 1000 [ 137.728080][ T4849] loop4: detected capacity change from 0 to 512 [ 137.734727][ T4845] lo speed is unknown, defaulting to 1000 [ 137.742633][ T4849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.763138][ T4849] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.275: bad orphan inode 131083 [ 137.774034][ T4849] loop4: lost filesystem error report for type 5 error -117 [ 137.778967][ T4849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.823601][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 137.848115][ T4850] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 137.877122][ T4845] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.977741][ T4845] lo speed is unknown, defaulting to 1000 [ 137.997650][ T4845] lo speed is unknown, defaulting to 1000 [ 138.075815][ T4845] lo speed is unknown, defaulting to 1000 [ 138.139384][ T4866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'. [ 138.221633][ T4845] lo speed is unknown, defaulting to 1000 [ 138.247862][ T4845] lo speed is unknown, defaulting to 1000 [ 138.960591][ T4879] loop2: detected capacity change from 0 to 512 [ 138.969494][ T4879] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.198637][ T4879] EXT4-fs (loop2): 1 truncate cleaned up [ 139.205984][ T4879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.179447][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 140.179468][ T28] audit: type=1400 audit(1775315161.999:854): avc: denied { setopt } for pid=4881 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.398958][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.221414][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.909026][ T4899] lo speed is unknown, defaulting to 1000 [ 141.943295][ T4906] lo speed is unknown, defaulting to 1000 [ 141.988636][ T4899] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 141.991577][ T28] audit: type=1400 audit(1775315163.979:855): avc: denied { getopt } for pid=4893 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.425137][ T4918] bridge_slave_0: left allmulticast mode [ 142.431006][ T4918] bridge_slave_0: left promiscuous mode [ 142.437604][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.203272][ T4930] loop0: detected capacity change from 0 to 512 [ 143.288831][ T4930] FAT-fs (loop0): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 143.780320][ T4918] bond0: (slave bond_slave_0): Releasing backup interface [ 143.800660][ T28] audit: type=1400 audit(1775315165.789:856): avc: denied { associate } for pid=4915 comm="syz.4.288" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 143.827382][ T4918] bond0: (slave bond_slave_1): Releasing backup interface [ 143.841236][ T4918] team0: Port device team_slave_0 removed [ 143.851314][ T4918] team0: Port device team_slave_1 removed [ 143.858939][ T4918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.866456][ T4918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.876560][ T4918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.884748][ T4918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.895379][ T4918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.453849][ T4944] ipt_REJECT: ECHOREPLY no longer supported. [ 144.545733][ T28] audit: type=1400 audit(1775315166.529:857): avc: denied { create } for pid=4950 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.565612][ T28] audit: type=1400 audit(1775315166.529:858): avc: denied { setopt } for pid=4950 comm="syz.1.295" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.588366][ T28] audit: type=1400 audit(1775315166.529:859): avc: denied { write } for pid=4950 comm="syz.1.295" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.271432][ T4960] loop4: detected capacity change from 0 to 1024 [ 145.282988][ T28] audit: type=1400 audit(1775315167.269:860): avc: denied { write } for pid=4943 comm="syz.2.292" path="socket:[9370]" dev="sockfs" ino=9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.286934][ T4962] loop3: detected capacity change from 0 to 1024 [ 145.315398][ T4960] EXT4-fs: test_dummy_encryption option not supported [ 145.634960][ T4965] IPVS: length: 1152 != 8 [ 145.854605][ T4962] EXT4-fs: Mount option(s) incompatible with ext2 [ 145.974352][ T4962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51217 sclass=netlink_route_socket pid=4962 comm=syz.3.297 [ 148.645922][ T4983] lo speed is unknown, defaulting to 1000 [ 148.683948][ T4986] lo speed is unknown, defaulting to 1000 [ 148.859223][ T28] audit: type=1400 audit(1775315170.759:861): avc: denied { allowed } for pid=4987 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 149.254760][ T4984] lo speed is unknown, defaulting to 1000 [ 149.293435][ T28] audit: type=1400 audit(1775315171.279:862): avc: denied { write } for pid=4985 comm="syz.4.311" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.329034][ T4986] lo speed is unknown, defaulting to 1000 [ 149.335206][ T4986] lo speed is unknown, defaulting to 1000 [ 149.341353][ T28] audit: type=1400 audit(1775315171.279:863): avc: denied { open } for pid=4985 comm="syz.4.311" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.372601][ T28] audit: type=1400 audit(1775315171.279:864): avc: denied { create } for pid=4985 comm="syz.4.311" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.573239][ T28] audit: type=1400 audit(1775315171.429:865): avc: denied { getopt } for pid=5002 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.593969][ T28] audit: type=1400 audit(1775315171.549:866): avc: denied { write } for pid=4985 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.043208][ T5017] loop3: detected capacity change from 0 to 1024 [ 151.050675][ T5017] EXT4-fs: Ignoring removed nobh option [ 151.056349][ T5017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.928786][ T5016] lo speed is unknown, defaulting to 1000 [ 152.475032][ T4986] infiniband lyz2: set active [ 152.479899][ T3418] lo speed is unknown, defaulting to 1000 [ 152.698525][ T4986] infiniband lyz2: added lo [ 152.709519][ T4986] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 152.709770][ T4986] infiniband lyz2: Couldn't open port 1 [ 152.758369][ T5017] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 152.921825][ T28] audit: type=1400 audit(1775315174.909:867): avc: denied { map } for pid=5006 comm="syz.0.305" path="/proc/248/numa_maps" dev="proc" ino=10480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 152.990425][ T5026] loop1: detected capacity change from 0 to 256 [ 153.900014][ T4986] RDS/IB: lyz2: added [ 153.928211][ T4986] smc: adding ib device lyz2 with port count 1 [ 153.935009][ T4986] smc: ib device lyz2 port 1 has no pnetid [ 153.941760][ T3415] lo speed is unknown, defaulting to 1000 [ 153.953881][ T28] audit: type=1400 audit(1775315175.909:868): avc: denied { create } for pid=5006 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.747343][ T5026] FAT-fs (loop1): Directory bread(block 64) failed [ 154.754484][ T5026] FAT-fs (loop1): Directory bread(block 65) failed [ 154.761367][ T5026] FAT-fs (loop1): Directory bread(block 66) failed [ 154.767995][ T5026] FAT-fs (loop1): Directory bread(block 67) failed [ 154.775158][ T5026] FAT-fs (loop1): Directory bread(block 68) failed [ 154.781936][ T5026] FAT-fs (loop1): Directory bread(block 69) failed [ 154.788815][ T5026] FAT-fs (loop1): Directory bread(block 70) failed [ 154.795483][ T5026] FAT-fs (loop1): Directory bread(block 71) failed [ 154.802232][ T5026] FAT-fs (loop1): Directory bread(block 72) failed [ 154.808903][ T5026] FAT-fs (loop1): Directory bread(block 73) failed [ 154.898006][ T4986] lo speed is unknown, defaulting to 1000 [ 154.919699][ T28] audit: type=1400 audit(1775315176.869:869): avc: denied { create } for pid=5006 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 155.474013][ T4986] lo speed is unknown, defaulting to 1000 [ 155.531653][ T4986] lo speed is unknown, defaulting to 1000 [ 155.577775][ T4986] lo speed is unknown, defaulting to 1000 [ 155.606480][ T5040] xt_policy: output policy not valid in PREROUTING and INPUT [ 155.610027][ T4986] lo speed is unknown, defaulting to 1000 [ 155.668020][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 156.098817][ T5045] loop1: detected capacity change from 0 to 256 [ 156.213323][ T5051] blktrace: Concurrent blktraces are not allowed on loop4 [ 156.267674][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 156.284610][ T5048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.312'. [ 156.409421][ T4986] lo speed is unknown, defaulting to 1000 [ 156.472378][ T4986] lo speed is unknown, defaulting to 1000 [ 156.556086][ T5065] netlink: 764 bytes leftover after parsing attributes in process `syz.0.315'. [ 157.171191][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 157.586811][ T5065] macvlan0: entered promiscuous mode [ 157.586962][ T5065] macvlan0: entered allmulticast mode [ 157.587142][ T5065] veth0_virt_wifi: entered allmulticast mode [ 157.776686][ T5072] lo speed is unknown, defaulting to 1000 [ 157.777240][ T5072] lo speed is unknown, defaulting to 1000 [ 158.150096][ T5078] lo speed is unknown, defaulting to 1000 [ 158.152365][ T5078] lo speed is unknown, defaulting to 1000 [ 158.354030][ T28] audit: type=1400 audit(1775315180.329:870): avc: denied { getopt } for pid=5086 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.258490][ T5107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 160.375877][ T5104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.325'. [ 160.687946][ T5122] syzkaller0: entered promiscuous mode [ 160.789208][ T5122] syzkaller0: entered allmulticast mode [ 160.926734][ T5129] lo speed is unknown, defaulting to 1000 [ 160.931880][ T5129] lo speed is unknown, defaulting to 1000 [ 161.173634][ T5131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 161.529823][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 161.599565][ T5140] hub 8-0:1.0: USB hub found [ 161.604934][ T5140] hub 8-0:1.0: 8 ports detected [ 162.779688][ T5142] lo speed is unknown, defaulting to 1000 [ 162.786028][ T5142] lo speed is unknown, defaulting to 1000 [ 164.680184][ T5174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 164.793846][ T5176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.342'. [ 164.918191][ T5182] lo speed is unknown, defaulting to 1000 [ 164.919560][ T5182] lo speed is unknown, defaulting to 1000 [ 165.669120][ T5197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.346'. [ 166.182342][ T5189] 9pnet_virtio: no channels available for device /selinux/load [ 166.340890][ T5204] lo speed is unknown, defaulting to 1000 [ 166.349976][ T5204] lo speed is unknown, defaulting to 1000 [ 166.644185][ T5186] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 166.684272][ T5186] SELinux: failed to load policy [ 169.319873][ T5218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.349'. [ 170.908365][ T28] audit: type=1400 audit(1775315192.759:871): avc: denied { setopt } for pid=5211 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.690596][ T5236] bridge_slave_0: left allmulticast mode [ 171.718457][ T5236] bridge_slave_0: left promiscuous mode [ 171.725486][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.758775][ T5236] bridge_slave_1: left allmulticast mode [ 171.940337][ T5236] bridge_slave_1: left promiscuous mode [ 171.969743][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.005925][ T5236] bond0: (slave bond_slave_0): Releasing backup interface [ 172.109393][ T5236] bond0: (slave bond_slave_1): Releasing backup interface [ 172.145527][ T5236] team0: Port device team_slave_0 removed [ 172.151230][ T5236] team0: Port device team_slave_1 removed [ 172.152298][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.152316][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.153966][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.153979][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.157234][ T5236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.234273][ T5246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 172.818610][ T28] audit: type=1400 audit(1775315194.779:872): avc: denied { create } for pid=5249 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.818663][ T28] audit: type=1400 audit(1775315194.779:873): avc: denied { connect } for pid=5249 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.906010][ T5254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 172.995734][ T5261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'. [ 173.555004][ T5277] lo speed is unknown, defaulting to 1000 [ 173.564044][ T5277] lo speed is unknown, defaulting to 1000 [ 173.983649][ T5281] syz.2.362: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 173.998549][ T5281] CPU: 0 UID: 0 PID: 5281 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT(full) [ 173.998576][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.998590][ T5281] Call Trace: [ 173.998597][ T5281] [ 173.998606][ T5281] __dump_stack+0x1d/0x30 [ 173.998688][ T5281] dump_stack_lvl+0x95/0xd0 [ 173.998715][ T5281] dump_stack+0x15/0x1b [ 173.998742][ T5281] warn_alloc+0x145/0x1c0 [ 173.998770][ T5281] ? __schedule+0x93c/0xd40 [ 173.998839][ T5281] ? __rcu_read_unlock+0x4e/0x70 [ 173.998862][ T5281] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 173.998889][ T5281] ? __futex_wait+0x1fd/0x260 [ 173.998934][ T5281] ? __pfx_futex_wake_mark+0x10/0x10 [ 173.999033][ T5281] ? __rcu_read_unlock+0x4e/0x70 [ 173.999059][ T5281] ? avc_has_perm_noaudit+0xab/0x130 [ 173.999096][ T5281] vmalloc_user_noprof+0x7d/0xb0 [ 173.999202][ T5281] ? xskq_create+0x80/0xe0 [ 173.999231][ T5281] xskq_create+0x80/0xe0 [ 173.999259][ T5281] xsk_init_queue+0x70/0xb0 [ 173.999283][ T5281] xsk_setsockopt+0x3f5/0x640 [ 173.999305][ T5281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.999336][ T5281] __sys_setsockopt+0x184/0x200 [ 173.999376][ T5281] __x64_sys_setsockopt+0x64/0x80 [ 173.999409][ T5281] x64_sys_call+0x2327/0x3020 [ 173.999467][ T5281] do_syscall_64+0x12c/0x370 [ 173.999498][ T5281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.999523][ T5281] RIP: 0033:0x7fa2383cc819 [ 173.999542][ T5281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.999576][ T5281] RSP: 002b:00007fa236dfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.999597][ T5281] RAX: ffffffffffffffda RBX: 00007fa238646090 RCX: 00007fa2383cc819 [ 173.999615][ T5281] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 173.999631][ T5281] RBP: 00007fa238462c91 R08: 0000000000000004 R09: 0000000000000000 [ 173.999667][ T5281] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.999684][ T5281] R13: 00007fa238646128 R14: 00007fa238646090 R15: 00007fffab1d86b8 [ 173.999707][ T5281] [ 173.999720][ T5281] Mem-Info: [ 174.259209][ T5281] active_anon:48572 inactive_anon:0 isolated_anon:0 [ 174.259209][ T5281] active_file:22731 inactive_file:2356 isolated_file:0 [ 174.259209][ T5281] unevictable:0 dirty:256 writeback:0 [ 174.259209][ T5281] slab_reclaimable:3532 slab_unreclaimable:49460 [ 174.259209][ T5281] mapped:43342 shmem:41165 pagetables:5572 [ 174.259209][ T5281] sec_pagetables:0 bounce:0 [ 174.259209][ T5281] kernel_misc_reclaimable:0 [ 174.259209][ T5281] free:1622977 free_pcp:16184 free_cma:0 [ 174.306281][ T5281] Node 0 active_anon:194288kB inactive_anon:0kB active_file:90924kB inactive_file:9424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173368kB dirty:1024kB writeback:0kB shmem:164660kB kernel_stack:3728kB pagetables:22288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.335549][ T5281] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.367106][ T5281] lowmem_reserve[]: 0 2879 7857 7857 [ 174.372664][ T5281] Node 0 DMA32 free:2944508kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948136kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 174.405608][ T5281] lowmem_reserve[]: 0 0 4978 4978 [ 174.411091][ T5281] Node 0 Normal free:3532040kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:194288kB inactive_anon:0kB active_file:90924kB inactive_file:9424kB unevictable:0kB writepending:1024kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:61100kB local_pcp:33076kB free_cma:0kB [ 174.446080][ T5281] lowmem_reserve[]: 0 0 0 0 [ 174.450921][ T5281] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.464494][ T5281] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944508kB [ 174.481622][ T5281] Node 0 Normal: 3*4kB (UM) 1*8kB (U) 2*16kB (UE) 1*32kB (U) 2*64kB (UE) 2*128kB (UE) 3*256kB (UME) 2*512kB (U) 3*1024kB (UME) 0*2048kB 861*4096kB (UM) = 3531988kB [ 174.499901][ T5281] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 174.509748][ T5281] 66244 total pagecache pages [ 174.514607][ T5281] 0 pages in swap cache [ 174.519172][ T5281] Free swap = 124996kB [ 174.523767][ T5281] Total swap = 124996kB [ 174.528827][ T5281] 2097051 pages RAM [ 174.532949][ T5281] 0 pages HighMem/MovableOnly [ 174.538401][ T5281] 81617 pages reserved [ 175.555957][ T28] audit: type=1400 audit(1775315197.539:874): avc: denied { connect } for pid=5305 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.694370][ T5307] lo speed is unknown, defaulting to 1000 [ 175.701090][ T5307] lo speed is unknown, defaulting to 1000 [ 175.743478][ T5314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.368'. [ 175.879285][ T5318] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 175.972952][ T5320] netlink: 277 bytes leftover after parsing attributes in process `syz.0.371'. [ 176.017929][ T5320] hub 8-0:1.0: USB hub found [ 176.023023][ T5320] hub 8-0:1.0: 8 ports detected [ 176.097879][ T5318] lo speed is unknown, defaulting to 1000 [ 176.190728][ T28] audit: type=1400 audit(1775315198.179:875): avc: denied { mount } for pid=5315 comm="syz.3.370" name="/" dev="ramfs" ino=10049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 176.215289][ T5318] lo speed is unknown, defaulting to 1000 [ 176.244131][ T5321] loop3: detected capacity change from 0 to 512 [ 176.424377][ T5321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.646542][ T5331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.372'. [ 176.693281][ T5313] SELinux: ebitmap start bit (32768) is beyond the end of the bitmap (1088) [ 176.732137][ T5313] SELinux: failed to load policy [ 176.869429][ T5325] 9pnet_virtio: no channels available for device elfrom [ 177.059541][ T5338] loop2: detected capacity change from 0 to 1024 [ 177.062316][ T5338] EXT4-fs: test_dummy_encryption option not supported [ 178.739428][ T5343] IPVS: length: 1152 != 8 [ 179.926448][ T5350] loop4: detected capacity change from 0 to 1024 [ 180.326259][ T5350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.745957][ T5350] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.860046][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.999564][ T28] audit: type=1400 audit(1775315202.919:876): avc: denied { remove_name } for pid=5348 comm="syz.4.377" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.024166][ T28] audit: type=1400 audit(1775315202.919:877): avc: denied { rename } for pid=5348 comm="syz.4.377" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.948123][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.377'. [ 181.979816][ T5369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 182.008530][ T28] audit: type=1400 audit(1775315203.949:878): avc: denied { connect } for pid=5348 comm="syz.4.377" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.261553][ T5378] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 182.269991][ T5378] bridge_slave_0: default FDB implementation only supports local addresses [ 182.765180][ T5380] lo speed is unknown, defaulting to 1000 [ 182.776421][ T5380] lo speed is unknown, defaulting to 1000 [ 183.147489][ T5386] xt_policy: output policy not valid in PREROUTING and INPUT [ 183.204946][ T5388] loop2: detected capacity change from 0 to 512 [ 183.222664][ T5388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.282748][ T5388] siw: device registration error -23 [ 183.331111][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.615789][ T5400] lo speed is unknown, defaulting to 1000 [ 183.628868][ T5400] lo speed is unknown, defaulting to 1000 [ 183.698372][ T28] audit: type=1326 audit(1775315205.659:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2383cc819 code=0x7ffc0000 [ 183.698408][ T28] audit: type=1326 audit(1775315205.659:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2383cc819 code=0x7ffc0000 [ 183.698510][ T28] audit: type=1326 audit(1775315205.659:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2383cc819 code=0x7ffc0000 [ 183.698539][ T28] audit: type=1326 audit(1775315205.659:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2383cc819 code=0x7ffc0000 [ 183.698567][ T28] audit: type=1326 audit(1775315205.659:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2383cc819 code=0x7ffc0000 [ 183.698658][ T28] audit: type=1326 audit(1775315205.679:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa23838d04e code=0x7ffc0000 [ 183.698686][ T28] audit: type=1326 audit(1775315205.679:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa23838d04e code=0x7ffc0000 [ 183.698784][ T28] audit: type=1326 audit(1775315205.679:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2383cc819 code=0x7ffc0000 [ 183.698886][ T28] audit: type=1326 audit(1775315205.679:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2383cc819 code=0x7ffc0000 [ 183.830115][ T5406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.388'. [ 184.790153][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.024443][ T5415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 185.125666][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 185.239338][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 185.243200][ T5421] loop2: detected capacity change from 0 to 128 [ 185.287221][ T5413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.390'. [ 185.591541][ T5427] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 185.591988][ T5427] bridge_slave_0: default FDB implementation only supports local addresses [ 186.111287][ T5434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 186.365802][ T5438] lo speed is unknown, defaulting to 1000 [ 186.369038][ T5438] lo speed is unknown, defaulting to 1000 [ 186.715764][ T5441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.715779][ T5441] IPv6: NLM_F_CREATE should be set when creating new route [ 186.724734][ T5441] lo: entered allmulticast mode [ 186.727479][ T5441] tunl0: entered allmulticast mode [ 186.733440][ T5441] gre0: entered allmulticast mode [ 186.855005][ T5441] gretap0: entered allmulticast mode [ 186.862632][ T5441] erspan0: entered allmulticast mode [ 186.864512][ T5441] ip_vti0: entered allmulticast mode [ 186.923616][ T5441] ip6_vti0: entered allmulticast mode [ 186.924537][ T5450] netlink: 64 bytes leftover after parsing attributes in process `syz.4.399'. [ 186.927597][ T5441] sit0: entered allmulticast mode [ 186.930672][ T5441] ip6tnl0: entered allmulticast mode [ 186.932865][ T5441] ip6gre0: entered allmulticast mode [ 186.934476][ T5441] syz_tun: entered allmulticast mode [ 186.935819][ T5441] ip6gretap0: entered allmulticast mode [ 186.937620][ T5441] bridge0: entered allmulticast mode [ 186.939426][ T5441] vcan0: entered allmulticast mode [ 186.941139][ T5441] bond0: entered allmulticast mode [ 186.943897][ T5441] team0: entered allmulticast mode [ 186.945513][ T5441] dummy0: entered allmulticast mode [ 186.947319][ T5441] nlmon0: entered allmulticast mode [ 186.948700][ T5441] caif0: entered allmulticast mode [ 186.948799][ T5441] batadv0: entered allmulticast mode [ 186.951519][ T5441] vxcan0: entered allmulticast mode [ 186.952597][ T5441] vxcan1: entered allmulticast mode [ 186.954131][ T5441] veth0: entered allmulticast mode [ 186.955898][ T5441] veth1: entered allmulticast mode [ 186.958375][ T5441] wg0: entered allmulticast mode [ 186.960202][ T5441] wg1: entered allmulticast mode [ 186.962095][ T5441] wg2: entered allmulticast mode [ 186.963253][ T5441] veth0_to_bridge: entered allmulticast mode [ 186.964862][ T5441] bridge_slave_0: entered allmulticast mode [ 186.965989][ T5441] veth1_to_bridge: entered allmulticast mode [ 186.969185][ T5441] bridge_slave_1: entered allmulticast mode [ 186.970856][ T5441] veth0_to_bond: entered allmulticast mode [ 186.972279][ T5441] bond_slave_0: entered allmulticast mode [ 186.972530][ T5441] veth1_to_bond: entered allmulticast mode [ 186.974150][ T5441] bond_slave_1: entered allmulticast mode [ 186.974567][ T5441] veth0_to_team: entered allmulticast mode [ 186.976558][ T5441] team_slave_0: entered allmulticast mode [ 187.011204][ T5441] veth1_to_team: entered allmulticast mode [ 187.013180][ T5441] team_slave_1: entered allmulticast mode [ 187.082871][ T5453] loop2: detected capacity change from 0 to 512 [ 187.088190][ T5441] veth0_to_batadv: entered allmulticast mode [ 187.095502][ T5453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.307643][ T5441] batadv_slave_0: entered allmulticast mode [ 187.311799][ T5441] veth1_to_batadv: entered allmulticast mode [ 187.315192][ T5441] batadv_slave_1: entered allmulticast mode [ 187.327131][ T5441] xfrm0: entered allmulticast mode [ 187.330086][ T5441] veth0_to_hsr: entered allmulticast mode [ 187.340921][ T5441] hsr_slave_0: entered allmulticast mode [ 187.343526][ T5441] veth1_to_hsr: entered allmulticast mode [ 187.346434][ T5441] hsr_slave_1: entered allmulticast mode [ 187.350176][ T5441] hsr0: entered allmulticast mode [ 187.360855][ T5441] veth1_virt_wifi: entered allmulticast mode [ 187.370967][ T5441] veth0_virt_wifi: entered allmulticast mode [ 187.373724][ T5441] veth1_vlan: entered allmulticast mode [ 187.376637][ T5441] veth0_vlan: entered allmulticast mode [ 187.394543][ T5441] vlan0: entered allmulticast mode [ 187.394952][ T5441] vlan1: entered allmulticast mode [ 187.406495][ T5441] macvlan0: entered allmulticast mode [ 187.409494][ T5441] macvlan1: entered allmulticast mode [ 187.412910][ T5441] ipvlan0: entered allmulticast mode [ 187.413238][ T5441] ipvlan1: entered allmulticast mode [ 187.413623][ T5441] veth1_macvtap: entered allmulticast mode [ 187.416463][ T5441] veth0_macvtap: entered allmulticast mode [ 187.420566][ T5441] macvtap0: entered allmulticast mode [ 187.423133][ T5441] macsec0: entered allmulticast mode [ 187.427355][ T5441] geneve0: entered allmulticast mode [ 187.431426][ T5441] geneve1: entered allmulticast mode [ 187.434558][ T5441] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 187.448524][ T5441] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 187.452658][ T5441] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 187.456019][ T5441] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 187.457681][ T5441] batadv0.5: entered allmulticast mode [ 187.457903][ T5441] ip6tnl1: entered allmulticast mode [ 187.458255][ T5441] veth2: entered allmulticast mode [ 187.459319][ T5441] veth3: entered allmulticast mode [ 187.459579][ T5441] veth4: entered allmulticast mode [ 187.460272][ T5441] veth5: entered allmulticast mode [ 187.460345][ T5441] veth6: entered allmulticast mode [ 187.460569][ T5441] veth7: entered allmulticast mode [ 187.460833][ T5441] veth8: entered allmulticast mode [ 187.460908][ T5441] veth9: entered allmulticast mode [ 187.461097][ T5441] veth10: entered allmulticast mode [ 187.461454][ T5441] veth11: entered allmulticast mode [ 187.462038][ T5441] veth12: entered allmulticast mode [ 187.462281][ T5441] veth13: entered allmulticast mode [ 187.462922][ T5441] ipvlan2: entered allmulticast mode [ 187.464895][ T5441] veth14: entered allmulticast mode [ 187.465331][ T5441] veth15: entered allmulticast mode [ 187.604993][ T5447] lo speed is unknown, defaulting to 1000 [ 187.605942][ T5447] lo speed is unknown, defaulting to 1000 [ 187.699383][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.699512][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.700372][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.700447][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.700575][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.700626][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.700670][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.700771][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.764297][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.401: corrupted inode contents [ 187.764327][ T5453] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.764501][ T5453] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 187.764519][ T5453] loop2: lost filesystem error report for type 5 error -117 [ 187.764685][ T5453] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.401: corrupted inode contents [ 187.764713][ T5453] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.768360][ T5453] EXT4-fs error (device loop2): ext4_evict_inode:313: inode #15: comm syz.2.401: mark_inode_dirty error [ 187.768442][ T5453] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.779514][ C1] EXT4-fs (loop2): error count since last fsck: 4 [ 187.779594][ C1] EXT4-fs (loop2): initial error at time 1775315209: ext4_do_update_inode:5602: inode 15 [ 187.779863][ C1] EXT4-fs (loop2): last error at time 1775315209: ext4_evict_inode:313: inode 15 [ 187.783332][ T5453] EXT4-fs (loop2): 1 orphan inode deleted [ 187.784126][ T5453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.047128][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.223065][ T5461] loop4: detected capacity change from 0 to 512 [ 188.224551][ T5461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.862918][ T5468] 8021q: VLANs not supported on wg2 [ 188.869639][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 188.869655][ T28] audit: type=1400 audit(1775315210.849:891): avc: denied { ioctl } for pid=5467 comm="syz.0.405" path="socket:[11360]" dev="sockfs" ino=11360 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.064473][ T5468] loop0: detected capacity change from 0 to 512 [ 189.093752][ T5468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.135339][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 189.155789][ T5463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'. [ 189.189629][ T5468] EXT4-fs (loop0): 1 truncate cleaned up [ 189.189962][ T5468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.277696][ T5461] EXT4-fs (loop4): 1 truncate cleaned up [ 189.288895][ T28] audit: type=1400 audit(1775315211.269:892): avc: denied { watch } for pid=5477 comm="syz.1.406" path="/84" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.338212][ T5461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.351801][ T5480] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 189.492815][ T5478] loop1: detected capacity change from 0 to 512 [ 190.369168][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.408'. [ 190.604112][ T5478] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.406: invalid indirect mapped block 4294967295 (level 1) [ 190.682723][ T5478] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 190.685045][ T5478] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.406: invalid indirect mapped block 4294967295 (level 1) [ 190.694918][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 190.695117][ C1] EXT4-fs (loop1): initial error at time 1775315212: ext4_free_branches:1023: inode 11 [ 190.695259][ C1] EXT4-fs (loop1): last error at time 1775315212: ext4_free_branches:1023: inode 11 [ 190.697479][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.710633][ T5478] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 190.782798][ T5478] EXT4-fs (loop1): 2 truncates cleaned up [ 190.880149][ T5478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.947988][ T28] audit: type=1400 audit(1775315212.929:893): avc: denied { write } for pid=5497 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.980421][ T28] audit: type=1400 audit(1775315212.969:894): avc: denied { watch watch_reads } for pid=5499 comm="syz.3.412" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 191.009776][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.024888][ T5502] pimreg: entered allmulticast mode [ 191.236531][ T5508] lo speed is unknown, defaulting to 1000 [ 191.249303][ T5508] lo speed is unknown, defaulting to 1000 [ 191.495235][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.499017][ T28] audit: type=1400 audit(1775315213.479:895): avc: denied { bind } for pid=5510 comm="syz.0.413" lport=11 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.552179][ T5511] loop0: detected capacity change from 0 to 4096 [ 191.558987][ T5511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.565815][ T5511] EXT4-fs: Ignoring removed i_version option [ 191.581330][ T5511] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 191.615700][ T5516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 191.624887][ T28] audit: type=1404 audit(1775315213.599:896): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 191.641057][ T28] audit: type=1400 audit(1775315213.619:897): avc: denied { create } for pid=5515 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.642073][ T28] audit: type=1400 audit(1775315213.619:898): avc: denied { create } for pid=5515 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 191.642582][ T28] audit: type=1400 audit(1775315213.619:899): avc: denied { create } for pid=5515 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.642763][ T28] audit: type=1400 audit(1775315213.619:900): avc: denied { create } for pid=5515 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.838126][ T5525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 191.875361][ T5529] lo speed is unknown, defaulting to 1000 [ 191.881844][ T5529] lo speed is unknown, defaulting to 1000 [ 192.216636][ T5542] lo speed is unknown, defaulting to 1000 [ 192.239585][ T5542] lo speed is unknown, defaulting to 1000 [ 192.721524][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.425'. [ 192.867640][ T5532] syz.1.421 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 192.905993][ T5532] CPU: 1 UID: 0 PID: 5532 Comm: syz.1.421 Not tainted syzkaller #0 PREEMPT(full) [ 192.906027][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.906041][ T5532] Call Trace: [ 192.906048][ T5532] [ 192.906058][ T5532] __dump_stack+0x1d/0x30 [ 192.906112][ T5532] dump_stack_lvl+0x95/0xd0 [ 192.906134][ T5532] dump_stack+0x15/0x1b [ 192.906202][ T5532] dump_header+0x80/0x240 [ 192.906293][ T5532] oom_kill_process+0x295/0x350 [ 192.906316][ T5532] out_of_memory+0x97d/0xb80 [ 192.906337][ T5532] try_charge_memcg+0x62e/0xa10 [ 192.906376][ T5532] obj_cgroup_charge_pages+0x23/0xc0 [ 192.906464][ T5532] obj_cgroup_charge_account+0x73/0x1a0 [ 192.906502][ T5532] __memcg_slab_post_alloc_hook+0x392/0x540 [ 192.906557][ T5532] kmem_cache_alloc_noprof+0x1e2/0x400 [ 192.906665][ T5532] ? alloc_buffer_head+0x35/0x1f0 [ 192.906753][ T5532] alloc_buffer_head+0x35/0x1f0 [ 192.906810][ T5532] folio_alloc_buffers+0x149/0x310 [ 192.906842][ T5532] create_empty_buffers+0x2c/0x200 [ 192.906927][ T5532] __block_write_begin_int+0x1d4/0xf90 [ 192.906997][ T5532] ? __ext4_mark_inode_dirty+0x2fc/0x400 [ 192.907083][ T5532] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 192.907101][ T5532] ? __list_add_valid_or_report+0x38/0xe0 [ 192.907124][ T5532] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 192.907169][ T5532] ? __mark_inode_dirty+0x49d/0x7d0 [ 192.907195][ T5532] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 192.907214][ T5532] block_page_mkwrite+0x1a8/0x3c0 [ 192.907250][ T5532] ext4_page_mkwrite+0x859/0xb90 [ 192.907279][ T5532] ? folio_unlock+0xfe/0x150 [ 192.907327][ T5532] handle_mm_fault+0x1904/0x3020 [ 192.907372][ T5532] do_user_addr_fault+0x3fd/0x1050 [ 192.907410][ T5532] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 192.907588][ T5532] exc_page_fault+0x62/0xa0 [ 192.907608][ T5532] asm_exc_page_fault+0x26/0x30 [ 192.907629][ T5532] RIP: 0033:0x7f527453eed0 [ 192.907649][ T5532] Code: fa 10 7d 16 83 fa 08 7d 21 83 fa 04 7d 2c 83 fa 01 7f 37 7c 03 40 88 37 c3 90 c5 fa 7f 07 c5 fa 7f 44 17 f0 c3 0f 1f 44 00 00 f9 d6 07 c5 f9 d6 44 17 f8 c3 0f 1f 44 00 00 c5 f9 7e 07 c5 f9 [ 192.907668][ T5532] RSP: 002b:00007fff7515f2a8 EFLAGS: 00010202 [ 192.907686][ T5532] RAX: 0000001b33c23db6 RBX: 00007f5275315720 RCX: ffffffff859cbe62 [ 192.907726][ T5532] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000001b33c23db6 [ 192.907742][ T5532] RBP: 000000000000000a R08: 0000000000000008 R09: 0000000000000006 [ 192.907755][ T5532] R10: 0000000000000006 R11: 0000000000000004 R12: 0000000000000240 [ 192.907826][ T5532] R13: 0000000000000230 R14: 000000000000000a R15: 0000000000000000 [ 192.907886][ T5532] ? xas_create+0xba2/0xbe0 [ 192.907917][ T5532] [ 192.908010][ T5532] memory: usage 307200kB, limit 307200kB, failcnt 475 [ 193.339900][ T5532] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 193.380740][ T5532] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 193.389471][ T5562] bridge_slave_0: left allmulticast mode [ 193.402663][ T5532] Memory cgroup stats for /syz1: [ 193.403077][ T5532] cache 4096 [ 193.412179][ T5562] bridge_slave_0: left promiscuous mode [ 193.424595][ T5562] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.434276][ T5532] rss 0 [ 193.441490][ T5532] shmem 0 [ 193.446916][ T5532] mapped_file 0 [ 193.454633][ T5532] dirty 0 [ 193.461151][ T5532] writeback 0 [ 193.468836][ T5532] workingset_refault_anon 50 [ 193.480651][ T5532] workingset_refault_file 424 [ 193.489891][ T5532] swap 393216 [ 193.497757][ T5532] swapcached 598016 [ 193.521593][ T5532] pgpgin 151369 [ 193.527333][ T5532] pgpgout 151368 [ 193.534505][ T5532] pgfault 148028 [ 193.542618][ T5532] pgmajfault 19 [ 193.548526][ T5532] inactive_anon 0 [ 193.554692][ T5532] active_anon 0 [ 193.561532][ T5532] inactive_file 0 [ 193.568788][ T5562] bond0: (slave bond_slave_0): Releasing backup interface [ 193.577786][ T5562] bond0: (slave bond_slave_1): Releasing backup interface [ 193.590015][ T5562] team0: Port device team_slave_0 removed [ 193.600188][ T5532] active_file 4096 [ 193.604986][ T5562] team0: Port device team_slave_1 removed [ 193.611273][ T5532] unevictable 0 [ 193.615140][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.622738][ T5532] hierarchical_memory_limit 314572800 [ 193.628498][ T5532] hierarchical_memsw_limit 9223372036854771712 [ 193.635205][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.643263][ T5532] total_cache 4096 [ 193.643591][ T5562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.664121][ T5532] total_rss 0 [ 193.667541][ T5532] total_shmem 0 [ 193.671346][ T5532] total_mapped_file 0 [ 193.675705][ T5532] total_dirty 0 [ 193.700070][ T5532] total_writeback 0 [ 193.704003][ T5532] total_workingset_refault_anon 50 [ 193.729791][ T3408] syz!: Port: 1 Link DOWN [ 193.743956][ T5568] lo speed is unknown, defaulting to 1000 [ 193.758692][ T5532] total_workingset_refault_file 424 [ 193.764002][ T5532] total_swap 393216 [ 193.767824][ T5532] total_swapcached 598016 [ 193.799158][ T5568] lo speed is unknown, defaulting to 1000 [ 193.821791][ T5532] total_pgpgin 151369 [ 193.828532][ T5532] total_pgpgout 151368 [ 193.832658][ T5532] total_pgfault 148028 [ 193.867118][ T5532] total_pgmajfault 19 [ 193.871304][ T5532] total_inactive_anon 0 [ 193.875477][ T5532] total_active_anon 0 [ 193.908707][ T5532] total_inactive_file 0 [ 193.918571][ T5532] total_active_file 4096 [ 193.922838][ T5532] total_unevictable 0 [ 193.937093][ T5532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.421,pid=5532,uid=0 [ 193.962243][ T5532] Memory cgroup out of memory: Killed process 5532 (syz.1.421) total-vm:94296kB, anon-rss:1224kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 194.063921][ T5536] syz.1.421 (5536) used greatest stack depth: 8744 bytes left [ 194.111453][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 194.111470][ T28] audit: type=1400 audit(1775315216.099:1030): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.214995][ T28] audit: type=1400 audit(1775315216.149:1031): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.273663][ T28] audit: type=1400 audit(1775315216.179:1032): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.346074][ T28] audit: type=1400 audit(1775315216.179:1033): avc: denied { name_bind } for pid=5577 comm="syz.1.432" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 194.372562][ T28] audit: type=1400 audit(1775315216.179:1034): avc: denied { create } for pid=5577 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 194.434651][ T28] audit: type=1400 audit(1775315216.199:1035): avc: denied { create } for pid=5579 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 194.513894][ T28] audit: type=1400 audit(1775315216.229:1036): avc: denied { execmem } for pid=5579 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 194.573553][ T28] audit: type=1400 audit(1775315216.249:1037): avc: denied { prog_load } for pid=5566 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.608351][ T28] audit: type=1400 audit(1775315216.249:1038): avc: denied { map_create } for pid=5566 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.659230][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 194.661207][ T5597] binfmt_misc: register: failed to install interpreter file ./file0 [ 194.679461][ T5597] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 194.702656][ T28] audit: type=1400 audit(1775315216.289:1039): avc: denied { open } for pid=5577 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 194.867164][ T5585] netlink: 'syz.1.432': attribute type 12 has an invalid length. [ 195.426195][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 195.436580][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 195.448451][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 195.458312][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 195.716519][ T5609] lo speed is unknown, defaulting to 1000 [ 195.729510][ T5609] lo speed is unknown, defaulting to 1000 [ 195.991721][ T5614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 196.441560][ T5619] lo speed is unknown, defaulting to 1000 [ 196.488550][ T5619] lo speed is unknown, defaulting to 1000 [ 197.043924][ T5625] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 197.079732][ T5625] bond1 (unregistering): Released all slaves [ 197.521378][ T5629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 198.590726][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 198.776833][ T5653] lo speed is unknown, defaulting to 1000 [ 198.822918][ T5653] lo speed is unknown, defaulting to 1000 [ 198.942246][ T5659] lo speed is unknown, defaulting to 1000 [ 198.993444][ T5660] lo speed is unknown, defaulting to 1000 [ 199.055590][ T5659] lo speed is unknown, defaulting to 1000 [ 199.146131][ T5660] lo speed is unknown, defaulting to 1000 [ 199.454891][ T28] kauditd_printk_skb: 175 callbacks suppressed [ 199.454912][ T28] audit: type=1400 audit(1775315221.329:1215): avc: denied { prog_load } for pid=5646 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.499599][ T28] audit: type=1400 audit(1775315221.329:1216): avc: denied { map_create } for pid=5646 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.522226][ T28] audit: type=1400 audit(1775315221.489:1217): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 199.634874][ T28] audit: type=1400 audit(1775315221.609:1218): avc: denied { create } for pid=5664 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 199.634910][ T28] audit: type=1400 audit(1775315221.609:1219): avc: denied { prog_load } for pid=5664 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.634933][ T28] audit: type=1400 audit(1775315221.609:1220): avc: denied { prog_load } for pid=5664 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.634993][ T28] audit: type=1400 audit(1775315221.609:1221): avc: denied { open } for pid=5664 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 199.635016][ T28] audit: type=1400 audit(1775315221.609:1222): avc: denied { create } for pid=5664 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 199.635039][ T28] audit: type=1400 audit(1775315221.609:1223): avc: denied { open } for pid=5664 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 199.635064][ T28] audit: type=1400 audit(1775315221.609:1224): avc: denied { prog_load } for pid=5664 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.709164][ T5672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 199.748699][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 199.852206][ T5675] bond1: entered promiscuous mode [ 199.852227][ T5675] bond1: entered allmulticast mode [ 199.852393][ T5675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.358725][ T5692] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 200.358725][ T5692] The task syz.3.463 (5692) triggered the difference, watch for misbehavior. [ 200.494116][ T5698] lo speed is unknown, defaulting to 1000 [ 200.500848][ T5698] lo speed is unknown, defaulting to 1000 [ 201.076222][ T5710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.470'. [ 201.220816][ T5723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 201.246259][ T5724] netlink: 280 bytes leftover after parsing attributes in process `syz.1.474'. [ 201.381359][ T5729] bond1: entered allmulticast mode [ 201.491790][ T5731] lo speed is unknown, defaulting to 1000 [ 201.550930][ T5731] lo speed is unknown, defaulting to 1000 [ 201.622611][ T5738] lo speed is unknown, defaulting to 1000 [ 201.899159][ T5738] lo speed is unknown, defaulting to 1000 [ 202.121236][ T5740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.481'. [ 202.158348][ T5740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.481'. [ 202.276446][ T5743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'. [ 202.895545][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'. [ 202.983781][ T5757] lo speed is unknown, defaulting to 1000 [ 202.999713][ T5757] lo speed is unknown, defaulting to 1000 [ 203.066321][ T5758] netlink: 'syz.0.488': attribute type 13 has an invalid length. [ 203.093947][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.102828][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.114067][ T5758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.754790][ T5770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'. [ 204.023965][ T5774] lo speed is unknown, defaulting to 1000 [ 204.030343][ T5774] lo speed is unknown, defaulting to 1000 [ 204.505385][ T28] kauditd_printk_skb: 376 callbacks suppressed [ 204.505447][ T28] audit: type=1400 audit(1775315226.489:1601): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.558743][ T5780] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 204.559278][ T5784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.574001][ T5784] IPv6: NLM_F_CREATE should be set when creating new route [ 204.574313][ T28] audit: type=1400 audit(1775315226.529:1602): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.607478][ T5780] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 204.664351][ T5784] lo: entered allmulticast mode [ 204.685589][ T5784] tunl0: entered allmulticast mode [ 204.705232][ T5784] gre0: entered allmulticast mode [ 204.881023][ T5784] gretap0: entered allmulticast mode [ 204.892018][ T28] audit: type=1400 audit(1775315226.539:1603): avc: denied { create } for pid=5779 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 205.099063][ T5784] erspan0: entered allmulticast mode [ 205.105765][ T28] audit: type=1400 audit(1775315226.539:1604): avc: denied { open } for pid=5781 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 205.109685][ T5784] ip_vti0: entered allmulticast mode [ 205.151909][ T5784] ip6_vti0: entered allmulticast mode [ 205.158305][ T28] audit: type=1400 audit(1775315226.539:1605): avc: denied { open } for pid=5779 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 205.168203][ T5784] sit0: entered allmulticast mode [ 205.190886][ T5784] ip6tnl0: entered allmulticast mode [ 205.207498][ T5784] ip6gre0: entered allmulticast mode [ 205.217031][ T28] audit: type=1400 audit(1775315226.539:1606): avc: denied { prog_load } for pid=5781 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.252454][ T5784] syz_tun: entered allmulticast mode [ 205.261541][ T5784] ip6gretap0: entered allmulticast mode [ 205.265891][ T28] audit: type=1400 audit(1775315226.539:1607): avc: denied { prog_load } for pid=5779 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.286857][ T5784] bridge0: entered allmulticast mode [ 205.299260][ T5784] vcan0: entered allmulticast mode [ 205.307798][ T5793] __nla_validate_parse: 1 callbacks suppressed [ 205.307818][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'. [ 205.322780][ T28] audit: type=1400 audit(1775315226.539:1608): avc: denied { open } for pid=5781 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 205.344109][ T5784] bond0: entered allmulticast mode [ 205.350309][ T5784] team0: entered allmulticast mode [ 205.356186][ T5784] dummy0: entered allmulticast mode [ 205.362751][ T5784] nlmon0: entered allmulticast mode [ 205.369185][ T5784] caif0: entered allmulticast mode [ 205.374740][ T28] audit: type=1400 audit(1775315226.539:1609): avc: denied { open } for pid=5781 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 205.382487][ T5795] SET target dimension over the limit! [ 205.401393][ T5784] batadv0: entered allmulticast mode [ 205.416988][ T28] audit: type=1400 audit(1775315226.539:1610): avc: denied { open } for pid=5781 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 205.426347][ T5784] vxcan0: entered allmulticast mode [ 205.443096][ T5784] vxcan1: entered allmulticast mode [ 205.448593][ T5784] veth0: entered allmulticast mode [ 205.455122][ T5784] veth1: entered allmulticast mode [ 205.460594][ T5784] wg0: entered allmulticast mode [ 205.470227][ T5784] wg1: entered allmulticast mode [ 205.475537][ T5784] wg2: entered allmulticast mode [ 205.481240][ T5784] veth0_to_bridge: entered allmulticast mode [ 205.488046][ T5784] bridge_slave_0: entered allmulticast mode [ 205.494652][ T5784] veth0_to_bond: entered allmulticast mode [ 205.500718][ T5784] bond_slave_0: entered allmulticast mode [ 205.509242][ T5784] veth1_to_bond: entered allmulticast mode [ 205.515521][ T5784] bond_slave_1: entered allmulticast mode [ 205.522554][ T5784] veth0_to_team: entered allmulticast mode [ 205.528981][ T5784] team_slave_0: entered allmulticast mode [ 205.535225][ T5784] veth1_to_team: entered allmulticast mode [ 205.541708][ T5784] team_slave_1: entered allmulticast mode [ 205.547943][ T5784] veth0_to_batadv: entered allmulticast mode [ 205.554677][ T5784] batadv_slave_0: entered allmulticast mode [ 205.561105][ T5784] veth1_to_batadv: entered allmulticast mode [ 205.567217][ T5784] batadv_slave_1: entered allmulticast mode [ 205.589358][ T5784] xfrm0: entered allmulticast mode [ 205.594773][ T5784] veth0_to_hsr: entered allmulticast mode [ 205.600937][ T5784] hsr_slave_0: entered allmulticast mode [ 205.608079][ T5784] veth1_to_hsr: entered allmulticast mode [ 205.614377][ T5784] hsr_slave_1: entered allmulticast mode [ 205.620459][ T5784] hsr0: entered allmulticast mode [ 205.625956][ T5784] veth1_virt_wifi: entered allmulticast mode [ 205.632557][ T5784] veth1_macvtap: entered allmulticast mode [ 205.644257][ T5784] veth0_macvtap: entered allmulticast mode [ 205.650542][ T5784] macvtap0: entered allmulticast mode [ 205.656270][ T5784] macsec0: entered allmulticast mode [ 205.662088][ T5784] geneve0: entered allmulticast mode [ 205.671508][ T5784] geneve1: entered allmulticast mode [ 205.680852][ T5784] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 205.689501][ T5784] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 205.697232][ T5784] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 205.705115][ T5784] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 205.713891][ T5784] ip6tnl1: entered allmulticast mode [ 205.719907][ T5784] vlan2: left promiscuous mode [ 205.724804][ T5784] bridge0: left promiscuous mode [ 205.730477][ T5784] vlan2: entered allmulticast mode [ 205.736046][ T5784] batadv0.5: entered allmulticast mode [ 205.741833][ T5784] ipvlan0: entered allmulticast mode [ 205.747444][ T5784] gre1: entered allmulticast mode [ 205.752769][ T5784] ipvlan1: entered allmulticast mode [ 205.758407][ T5784] veth2: entered allmulticast mode [ 205.763632][ T5784] veth3: entered allmulticast mode [ 205.769124][ T5784] veth4: entered allmulticast mode [ 205.774540][ T5784] veth5: entered allmulticast mode [ 205.780033][ T5784] veth6: entered allmulticast mode [ 205.785429][ T5784] veth7: entered allmulticast mode [ 205.798482][ T5784] macvlan0: left promiscuous mode [ 205.804414][ T5784] bridge1: entered allmulticast mode [ 205.811036][ T5784] veth8: entered allmulticast mode [ 205.816340][ T5784] veth9: entered allmulticast mode [ 205.821583][ T5784] veth10: entered allmulticast mode [ 205.826977][ T5784] veth11: entered allmulticast mode [ 205.838386][ T5784] bond1: left promiscuous mode [ 205.848615][ T5784] veth12: entered allmulticast mode [ 205.854126][ T5784] veth13: entered allmulticast mode [ 205.863529][ T5785] lo speed is unknown, defaulting to 1000 [ 205.869919][ T5785] lo speed is unknown, defaulting to 1000 [ 205.918037][ T5800] lo speed is unknown, defaulting to 1000 [ 205.933763][ T309] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.970357][ T309] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.000566][ T309] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.023348][ T309] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.074292][ T5800] lo speed is unknown, defaulting to 1000 [ 206.111364][ T5819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.505'. [ 206.232542][ T5822] lo speed is unknown, defaulting to 1000 [ 206.249370][ T5822] lo speed is unknown, defaulting to 1000 [ 206.510544][ T5829] lo speed is unknown, defaulting to 1000 [ 206.517371][ T5829] lo speed is unknown, defaulting to 1000 [ 206.664665][ T5832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.511'. [ 206.702161][ T5830] netlink: 'syz.3.510': attribute type 16 has an invalid length. [ 206.720066][ T5830] netlink: 'syz.3.510': attribute type 3 has an invalid length. [ 206.729075][ T5830] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.510'. [ 206.754439][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 206.897916][ T5844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 207.389506][ T5852] lo speed is unknown, defaulting to 1000 [ 207.416740][ T5852] lo speed is unknown, defaulting to 1000 [ 207.675606][ T5865] bridge0: port 1(gretap0) entered blocking state [ 207.696818][ T5865] bridge0: port 1(gretap0) entered disabled state [ 207.712309][ T5865] gretap0: entered allmulticast mode [ 207.727029][ T5865] gretap0: entered promiscuous mode [ 207.939787][ T5868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 208.495367][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.527'. [ 209.572307][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 209.677309][ T28] kauditd_printk_skb: 236 callbacks suppressed [ 209.677327][ T28] audit: type=1400 audit(1775315231.659:1847): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.731182][ T28] audit: type=1400 audit(1775315231.719:1848): avc: denied { prog_load } for pid=5902 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 209.762413][ T28] audit: type=1400 audit(1775315231.739:1849): avc: denied { create } for pid=5902 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 209.795970][ T5903] netlink: 'syz.2.534': attribute type 13 has an invalid length. [ 209.816510][ T28] audit: type=1400 audit(1775315231.799:1850): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.843078][ T5903] netlink: 'syz.2.534': attribute type 17 has an invalid length. [ 209.873443][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'. [ 209.886826][ T28] audit: type=1400 audit(1775315231.829:1851): avc: denied { create } for pid=5902 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 209.928560][ T28] audit: type=1400 audit(1775315231.829:1852): avc: denied { create } for pid=5902 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 209.929074][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.950030][ T28] audit: type=1400 audit(1775315231.829:1853): avc: denied { create } for pid=5902 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 209.976705][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.977469][ T28] audit: type=1400 audit(1775315231.849:1854): avc: denied { create } for pid=5905 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 210.011252][ T5903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.038370][ T28] audit: type=1400 audit(1775315231.849:1855): avc: denied { prog_load } for pid=5905 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 210.073313][ T28] audit: type=1400 audit(1775315231.849:1856): avc: denied { prog_load } for pid=5905 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 210.310238][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 210.385764][ T5925] lo speed is unknown, defaulting to 1000 [ 210.396441][ T5925] lo speed is unknown, defaulting to 1000 [ 211.259276][ T5944] binfmt_misc: register: failed to install interpreter file ./file0 [ 211.278134][ T5944] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 211.314010][ T5944] bridge_slave_0: default FDB implementation only supports local addresses [ 211.910192][ T5953] lo speed is unknown, defaulting to 1000 [ 211.918860][ T5953] lo speed is unknown, defaulting to 1000 [ 212.095951][ T5954] netlink: 'syz.4.548': attribute type 13 has an invalid length. [ 212.101430][ T5951] lo speed is unknown, defaulting to 1000 [ 212.182559][ T5954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.212428][ T3415] lo speed is unknown, defaulting to 1000 [ 212.251484][ T5951] lo speed is unknown, defaulting to 1000 [ 212.640721][ T5974] lo speed is unknown, defaulting to 1000 [ 212.653629][ T5974] lo speed is unknown, defaulting to 1000 [ 212.983863][ T5984] team0: Device vxcan3 is of different type [ 213.360520][ T5992] geneve0: left allmulticast mode [ 213.526884][ T6001] lo speed is unknown, defaulting to 1000 [ 213.533825][ T6001] lo speed is unknown, defaulting to 1000 [ 213.558656][ T6002] binfmt_misc: register: failed to install interpreter file ./file0 [ 213.598689][ T6002] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 213.638304][ T6002] bridge_slave_0: default FDB implementation only supports local addresses [ 214.119480][ T6009] batadv0: entered promiscuous mode [ 214.126209][ T6009] batadv0: left promiscuous mode [ 214.416892][ T6017] lo speed is unknown, defaulting to 1000 [ 214.423701][ T6017] lo speed is unknown, defaulting to 1000 [ 214.753348][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.569'. [ 214.805593][ T28] kauditd_printk_skb: 525 callbacks suppressed [ 214.805610][ T28] audit: type=1400 audit(1775315236.789:2382): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 214.861722][ T28] audit: type=1400 audit(1775315236.849:2383): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 214.900076][ T28] audit: type=1400 audit(1775315236.869:2384): avc: denied { map_create } for pid=6023 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 214.932445][ T6024] netlink: 'syz.0.571': attribute type 13 has an invalid length. [ 214.976088][ T28] audit: type=1400 audit(1775315236.869:2385): avc: denied { create } for pid=6021 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 215.007381][ T28] audit: type=1400 audit(1775315236.879:2386): avc: denied { prog_load } for pid=6023 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.048108][ T28] audit: type=1400 audit(1775315236.889:2387): avc: denied { read write } for pid=6023 comm="syz.0.571" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.083627][ T28] audit: type=1400 audit(1775315236.909:2388): avc: denied { read write } for pid=6023 comm="syz.0.571" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.142606][ T28] audit: type=1400 audit(1775315236.919:2389): avc: denied { execmem } for pid=6023 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 215.174537][ T28] audit: type=1400 audit(1775315236.919:2390): avc: denied { create } for pid=6023 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 215.211721][ T9] IPVS: starting estimator thread 0... [ 215.237725][ T28] audit: type=1400 audit(1775315236.929:2391): avc: denied { create } for pid=6023 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 215.298329][ T6036] IPVS: using max 2448 ests per chain, 122400 per kthread [ 215.526325][ T6043] netlink: 128 bytes leftover after parsing attributes in process `syz.3.577'. [ 215.535773][ T6043] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.805072][ T6053] lo speed is unknown, defaulting to 1000 [ 215.828154][ T6053] lo speed is unknown, defaulting to 1000 [ 216.396705][ T6065] binfmt_misc: register: failed to install interpreter file ./file0 [ 216.418814][ T6065] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 216.433215][ T6065] bridge_slave_0: default FDB implementation only supports local addresses [ 216.529203][ T6068] lo speed is unknown, defaulting to 1000 [ 216.554056][ T6068] lo speed is unknown, defaulting to 1000 [ 216.732089][ T6071] netlink: 'syz.3.584': attribute type 13 has an invalid length. [ 216.873246][ T6071] bridge0: port 1(gretap0) entered blocking state [ 216.879986][ T6071] bridge0: port 1(gretap0) entered forwarding state [ 216.895862][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.909288][ T6071] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.920939][ T6071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.937276][ T3415] lo speed is unknown, defaulting to 1000 [ 216.943183][ T3415] syz2: Port: 1 Link ACTIVE [ 217.212820][ T6084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27167 sclass=netlink_route_socket pid=6084 comm=syz.4.587 [ 217.299237][ T6091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 217.328945][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'. [ 218.241533][ T6113] lo speed is unknown, defaulting to 1000 [ 218.258660][ T6113] lo speed is unknown, defaulting to 1000 [ 218.271254][ T6078] netlink: 'syz.3.586': attribute type 10 has an invalid length. [ 218.289656][ T6078] team0: Port device netdevsim1 added [ 218.734549][ T3408] IPVS: starting estimator thread 0... [ 218.828337][ T6122] IPVS: using max 2400 ests per chain, 120000 per kthread [ 218.913214][ T6126] binfmt_misc: register: failed to install interpreter file ./file0 [ 218.968109][ T6126] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 219.008747][ T6126] bridge_slave_0: default FDB implementation only supports local addresses [ 219.253858][ T6129] netlink: 'syz.0.600': attribute type 4 has an invalid length. [ 219.268333][ T6129] netlink: 17 bytes leftover after parsing attributes in process `syz.0.600'. [ 219.795749][ T6138] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 219.845193][ T28] kauditd_printk_skb: 241 callbacks suppressed [ 219.845281][ T28] audit: type=1400 audit(1775315241.829:2633): avc: denied { open } for pid=6136 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 219.908329][ T28] audit: type=1400 audit(1775315241.879:2634): avc: denied { read write } for pid=6136 comm="syz.3.603" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.099157][ T28] audit: type=1400 audit(1775315242.089:2635): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.183492][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.604'. [ 220.375490][ T28] audit: type=1400 audit(1775315242.359:2636): avc: denied { prog_load } for pid=6131 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 220.433892][ T28] audit: type=1400 audit(1775315242.389:2637): avc: denied { map_create } for pid=6131 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 220.877341][ T28] audit: type=1400 audit(1775315242.859:2638): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.938293][ T28] audit: type=1400 audit(1775315242.919:2639): avc: denied { read } for pid=6145 comm="syz.2.605" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 220.985502][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.606'. [ 220.998401][ T28] audit: type=1400 audit(1775315242.929:2640): avc: denied { open } for pid=6145 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 221.058341][ T28] audit: type=1400 audit(1775315242.929:2641): avc: denied { create } for pid=6145 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 221.118307][ T28] audit: type=1400 audit(1775315242.929:2642): avc: denied { create } for pid=6145 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 222.155692][ T6174] lo speed is unknown, defaulting to 1000 [ 222.184217][ T6174] lo speed is unknown, defaulting to 1000 [ 222.332460][ T6181] binfmt_misc: register: failed to install interpreter file ./file0 [ 222.473005][ T6181] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 222.503907][ T6179] bridge_slave_0: default FDB implementation only supports local addresses [ 222.821939][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'. [ 223.185325][ T309] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.194659][ T309] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.223068][ T309] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.256236][ T6191] netlink: 'syz.0.617': attribute type 29 has an invalid length. [ 223.277599][ T309] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.843467][ T6195] ªªªªª»: renamed from bond_slave_0 [ 223.912560][ T6204] lo speed is unknown, defaulting to 1000 [ 223.935763][ T6204] lo speed is unknown, defaulting to 1000 [ 224.205365][ T6216] ================================================================== [ 224.213507][ T6216] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 224.222317][ T6216] [ 224.224668][ T6216] write to 0xffff88810b101828 of 8 bytes by task 6212 on cpu 0: [ 224.232282][ T6218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6218 comm=syz.1.625 [ 224.232487][ T6216] shmem_file_splice_read+0x470/0x600 [ 224.250364][ T6216] splice_direct_to_actor+0x26e/0x670 [ 224.255759][ T6216] do_splice_direct+0x119/0x1a0 [ 224.260637][ T6216] do_sendfile+0x382/0x650 [ 224.265082][ T6216] __x64_sys_sendfile64+0x105/0x150 [ 224.270388][ T6216] x64_sys_call+0x2dc4/0x3020 [ 224.275084][ T6216] do_syscall_64+0x12c/0x370 [ 224.279784][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.285692][ T6216] [ 224.288036][ T6216] write to 0xffff88810b101828 of 8 bytes by task 6216 on cpu 1: [ 224.296033][ T6216] shmem_file_splice_read+0x470/0x600 [ 224.301626][ T6216] splice_direct_to_actor+0x26e/0x670 [ 224.307027][ T6216] do_splice_direct+0x119/0x1a0 [ 224.311898][ T6216] do_sendfile+0x382/0x650 [ 224.316413][ T6216] __x64_sys_sendfile64+0x105/0x150 [ 224.321639][ T6216] x64_sys_call+0x2dc4/0x3020 [ 224.326356][ T6216] do_syscall_64+0x12c/0x370 [ 224.331071][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.336996][ T6216] [ 224.339333][ T6216] value changed: 0x0000000000000e02 -> 0x0000000000000e03 [ 224.346631][ T6216] [ 224.349052][ T6216] Reported by Kernel Concurrency Sanitizer on: [ 224.355389][ T6216] CPU: 1 UID: 0 PID: 6216 Comm: syz.1.625 Not tainted syzkaller #0 PREEMPT(full) [ 224.364867][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.375290][ T6216] ================================================================== [ 224.971998][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 224.972015][ T28] audit: type=1400 audit(1775315246.959:2786): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 225.026270][ T28] audit: type=1400 audit(1775315246.999:2787): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 225.085966][ T28] audit: type=1400 audit(1775315247.069:2788): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 225.118931][ T28] audit: type=1400 audit(1775315247.109:2789): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 225.153630][ T28] audit: type=1400 audit(1775315247.139:2790): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0