last executing test programs: 10m29.025106797s ago: executing program 32 (id=455): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0xc}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) capget(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)={0x0, 0x4, 0x1, 0x9, 0x9, 0x8}) 10m17.523566824s ago: executing program 33 (id=513): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") chroot(&(0x7f0000000100)='./file0\x00') r0 = inotify_init1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000300), &(0x7f0000000380)=0x6e) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000280)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1, r3, 0x0, 0x0, 0x5, 0x0, 0x3, r3}]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum={0x7}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffff, [{0x1, 0x1}]}]}, {0x0, [0x61, 0x2e, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x45}, 0x28) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) r4 = socket(0x1, 0x803, 0x0) getpeername$l2tp(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xb0}}, 0x0) 9m31.095610283s ago: executing program 34 (id=746): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x4, 0x22, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x6, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200"/48, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r1, @ANYBLOB="04"], 0xc4}}, 0x20004804) 9m16.57102519s ago: executing program 35 (id=948): socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x204002) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008851}, 0xbe2763db2f8a9c7d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 6m56.718627379s ago: executing program 36 (id=1564): socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7ffcfffc}]}) syz_pidfd_open(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3m44.778095307s ago: executing program 6 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x26121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x14) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "f45823b9"}, &(0x7f0000000080)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000066e204cc00008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\b\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="18090000879bf750000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000a76dac98340d252154763b89877d616732a8b4b91a02ec7b33744b9915b2ad334fa2a3d73cb8a1d7969232bde3f461d06b46fbafdeb0deb632623b298d6ef0d25a7a8de5868c96efd46fa012475f2ec7af922439fa9b78245762b7ac67d629f3a7f57afdff76af1effd34ecf8206e6c5ebea758cd1634605bffa0bc70d663ffea40765a595a8da4464d617"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r7, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) recvmmsg$unix(r7, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) 3m44.417180735s ago: executing program 6 (id=2804): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x40}, {r0, 0x3110}, {r0, 0x200}, {r0, 0x100}, {r0, 0x8053}, {r0}, {}, {r0, 0x1040}, {r0, 0x52}, {0xffffffffffffffff, 0x611}, {r0, 0x680}, {0xffffffffffffffff, 0x310}], 0xc, 0xfffffff9) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x1e, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) 3m41.993154672s ago: executing program 6 (id=2816): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "14102fdb2cd24844f55dca1df72d315e8ddf457ed45ce953da5e3161995993dc", "69d9218ff5f88d7c45daf84b1456b18d", {"a2b78098a0523d9b2bb52d847df9e85b", "67ce47310d7bd7bfd2d0161887a910da"}}}}}}}, 0x0) 3m41.801741396s ago: executing program 6 (id=2817): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 3m41.530073342s ago: executing program 6 (id=2821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000000)=ANY=[], 0xc2) 3m39.168738688s ago: executing program 6 (id=2831): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 3m24.033681119s ago: executing program 37 (id=2831): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 1m14.52701324s ago: executing program 8 (id=3959): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}}, 0x20000000) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000440)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_gt}, {@subj_user={'subj_user', 0x3d, '\''}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x35, 0x32, 0x38, 0x31, 0x66, 0x50, 0x66], 0x2d, [0x37, 0x35, 0x34, 0x32], 0x2d, [0x63, 0x66, 0x35, 0x62], 0x2d, [0x63, 0x63, 0x66, 0x33], 0x2d, [0x32, 0x33, 0x30, 0x36, 0x62, 0x34, 0x66, 0x66]}}}, {@dont_measure}]}, 0xff, 0x24e, &(0x7f00000009c0)="$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") 1m14.338933334s ago: executing program 8 (id=3961): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=ANY=[@ANYBLOB="42000000100039040000000000009df0ef0d0087", @ANYRES32=r6, @ANYBLOB="09580100000000002000128008000100677265001400028008000700ffffffff0500080080000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001c00070c2ebd7000fedbdf250a000000071f61d1cb00e328870f8feb560edca5", @ANYRES32=r6, @ANYBLOB="4000103214000100ff0100000000000000000000000000010a000200aaaaaaaaaabb0000"], 0x3c}}, 0x20024090) munmap$binder(0x0, 0x0) tkill(0x0, 0x0) socket(0xa, 0x3, 0xff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) 1m13.941373663s ago: executing program 8 (id=3962): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000200)="800034ca269bb7", 0x7, 0x2004c080, &(0x7f0000000380)={0xa, 0xfffd, 0xc9, @local}, 0x1c) 1m13.877511034s ago: executing program 8 (id=3965): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x80000f, @empty, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0xe9, 0x8, 0xff}, 0x9c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r5, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r6, 0x0, 0x1) ptrace$cont(0x18, r6, 0x0, 0x0) wait4(r6, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, r6, 0x58, &(0x7f0000000080)="010000000000000000000000000000000000000000000000000000000100"/96) sched_getaffinity(r6, 0x8, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x5, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1m13.078117472s ago: executing program 8 (id=3971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x1, 0x6c6, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xc378) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) getdents64(r4, &(0x7f00000003c0)=""/31, 0x1f) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000000180)={0x7ff, 0x0, '\x00', @zc_export={r2}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') readv(r5, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x6, 0x1}, {0x100, 0xfffff60c}], 0xffffffffffffffff}, 0x18, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x89901) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m12.661120102s ago: executing program 8 (id=3975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff06) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup2(r6, r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r7, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 1m12.541163844s ago: executing program 38 (id=3975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff06) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup2(r6, r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r7, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 54.345020587s ago: executing program 1 (id=4106): r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0) 54.262686429s ago: executing program 1 (id=4107): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, 0x0, 0x0) 54.262130199s ago: executing program 1 (id=4108): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x440840, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffa, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x4f, 0xfffffffe) preadv(r0, &(0x7f0000002d00)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x101, 0x9) ioctl$KDGKBTYPE(r0, 0x4b33, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = mq_open(&(0x7f00000006c0)='eth0\x00#\x13\xaeu\xe0\xfbu0\x00\x00\x00\x00\x00\x00\x00\x00\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\xfe\xff\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg3\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\v\x00\x00\x00\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0\x01\x00\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\\q\xf8\xb8D:\xaf\xdb\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8i\xad\xdd\n\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8qT\x021\x17)\xa7u\xe3\x806\xe1\xf7\xd7\xc2\x8e\x15\xf7\xd4\xdf\xf9\x12\x00\xdb\x9a\xf1\x1c\x10yo\xca\x95\xd2\x98\xa5d\xe1(@\xeb\xbej\xfb\xba\x11\x1f\b.c\xb7\xf0\xa6\xceQ+\xf7#\xdf%\xde\x81\x1d\xe2;\xb9\xe4\x052p\x9b\xad\x06\xdc\xf3\xfd<\x8dJ\xa5\x12<\xa2t\x1fC\x0e\x1a*\x94\xd3\x16@\xa43f\xd97;%\x1b\xf4\x95\xaa\xce<\xe0lN\xd8\x84y\xd0@\x13Ap2\xa6\xa2\xa0\tI\x14\xcdp\xfe\xf2U\x84\xc3\xc4p\xa7\xb2:\xf3\xb2?\x03\"N\xbc\xa9\xcf\xeah]\xd9\xda\x95\xd61\x12\xc0\xb0~\xa0\x01-P\xc8\x1d\xc0tQ\xfc\xb6\x9e\x1b\xb5\x1f\x9cU\xf0*q\x1c^\xbe\xf9\xbf\xf7\xc8\xcb\\\xa3\xf6B=\xa0\xe7\x92\x90\xa0\xd9\x87\xb2\xaeZ?\xce\xf8\xe9=\x90\x12\xb2\xb5v\xad\xda`\xfd\xfd_\xa9\xaf\xbf_\xce\xf9b\x00\x00\x80\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x1, 0x0) acct(0x0) 52.817656002s ago: executing program 1 (id=4116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x80000f, @empty, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0xe9, 0x8, 0xff}, 0x9c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r5, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r6, 0x0, 0x1) ptrace$cont(0x18, r6, 0x0, 0x0) wait4(r6, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, r6, 0x58, &(0x7f0000000080)="010000000000000000000000000000000000000000000000000000000100"/96) sched_getaffinity(r6, 0x8, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 49.714304593s ago: executing program 1 (id=4127): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=ANY=[@ANYBLOB="42000000100039040000000000009df0ef0d0087", @ANYRES32=r5, @ANYBLOB="09580100000000002000128008000100677265001400028008000700ffffffff0500080080000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001c00070c2ebd7000fedbdf250a000000071f61d1cb00e328870f8feb560edca5", @ANYRES32=r5, @ANYBLOB="4000103214000100ff0100000000000000000000000000010a000200aaaaaaaaaabb0000"], 0x3c}}, 0x20024090) munmap$binder(0x0, 0x0) tkill(0x0, 0x0) socket(0xa, 0x3, 0xff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 48.94687187s ago: executing program 1 (id=4135): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f00000000c0), 0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 48.137439378s ago: executing program 39 (id=4135): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f00000000c0), 0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a41c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78a57a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420800000000000000c1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2376fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1212e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b8393dee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 25.613227149s ago: executing program 4 (id=4232): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 24.131032102s ago: executing program 4 (id=4243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x26121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x14) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "f45823b9"}, &(0x7f0000000080)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000066e204cc00008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02000000000000000000000000006b12fe1c9c56", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\b\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="18090000879bf750000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000a76dac98340d252154763b89877d616732a8b4b91a02ec7b33744b9915b2ad334fa2a3d73cb8a1d7969232bde3f461d06b46fbafdeb0deb632623b298d6ef0d25a7a8de5868c96efd46fa012475f2ec7af922439fa9b78245762b7ac67d629f3a7f57afdff76af1effd34ecf8206e6c5ebea758cd1634605bffa0bc70d663ffea40765a595a8da4464d617"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r7, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) recvmmsg$unix(r7, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) 23.913165647s ago: executing program 4 (id=4245): pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) tee(0xffffffffffffffff, r2, 0x8f5, 0xb) write(r0, 0x0, 0x0) 23.886004428s ago: executing program 4 (id=4246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x80000f, @empty, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0xe9, 0x8, 0xff}, 0x9c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r5, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r6, 0x0, 0x1) ptrace$cont(0x18, r6, 0x0, 0x0) wait4(r6, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, r6, 0x58, &(0x7f0000000080)="010000000000000000000000000000000000000000000000000000000100"/96) sched_getaffinity(r6, 0x8, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 22.716044245s ago: executing program 4 (id=4256): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000acc2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000079743bea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="01000000", 0x4}, {&(0x7f0000000340)='\b', 0xfffffefe}], 0x2) 22.085154039s ago: executing program 4 (id=4261): socket$kcm(0x10, 0x3, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa480, 0xa5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0xfebc) 22.04054804s ago: executing program 40 (id=4261): socket$kcm(0x10, 0x3, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa480, 0xa5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0xfebc) 21.950213172s ago: executing program 5 (id=4265): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014"], 0x38}}, 0x0) 21.740311837s ago: executing program 5 (id=4270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) dup(r0) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x80000f, @empty, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0xe9, 0x8, 0xff}, 0x9c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r4, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 20.936857365s ago: executing program 5 (id=4277): io_setup(0x1202, &(0x7f0000000040)=0x0) io_getevents(r0, 0x800, 0x3, &(0x7f0000000080)=[{}, {}, {}], 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000008c000000030a01020000000000000000020000030900010073797a30000000006b000300fd7c400f2ffd10ac56a901205b56f46dc2de64dc"], 0xd4}}, 0x20040040) 20.668475431s ago: executing program 5 (id=4280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) dup(r0) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x80000f, @empty, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0xe9, 0x8, 0xff}, 0x9c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r4, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r5, 0x0, 0x1) ptrace$cont(0x18, r5, 0x0, 0x0) wait4(r5, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, r5, 0x58, &(0x7f0000000080)="010000000000000000000000000000000000000000000000000000000100"/96) sched_getaffinity(r5, 0x8, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) 20.078245495s ago: executing program 5 (id=4285): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r2, 0x8f5, 0xb) write(0xffffffffffffffff, 0x0, 0x0) 19.525308337s ago: executing program 5 (id=4291): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="01000cbd701004000000050000000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 19.457264469s ago: executing program 41 (id=4291): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="01000cbd701004000000050000000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 9.588263322s ago: executing program 7 (id=4380): recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000040)}, 0x100) 9.344640108s ago: executing program 7 (id=4383): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x1ff, 0x3ab, 0x6, 0x8, 0x9, "7a614124da7580127328eb5c32ccd8ac662280", 0x8, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8.662259644s ago: executing program 7 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 7.659716916s ago: executing program 7 (id=4393): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) dup(r0) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x80000f, @empty, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0xe9, 0x8, 0xff}, 0x9c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r4, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sched_getaffinity(r5, 0x8, &(0x7f00000000c0)) 5.877521807s ago: executing program 7 (id=4408): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7", 0x1}], 0x1, 0xa) 5.31610768s ago: executing program 3 (id=4409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x10) 5.232295921s ago: executing program 3 (id=4410): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a41c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78a57a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420800000000000000c1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2376fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1212e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b8393dee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 5.163184812s ago: executing program 9 (id=4411): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x188b9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@remote, @in6=@private0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xfffffffffffffe8c) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) r4 = creat(&(0x7f0000001c80)='./file0\x00', 0x23f) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000002c0)={0x1ff, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {{0xa, 0x4e1e, 0x1000dd, @local, 0x1}}}, 0x108) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de32e1738b8ef9c, @perf_config_ext={0x52, 0x9b7f}, 0x22d264327e9e8aaf, 0x4, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xcd, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"], 0x38}}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000001cc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)) geteuid() getgroups(0x1, &(0x7f0000001e00)=[0xee01]) openat$cgroup(0xffffffffffffffff, &(0x7f0000001e40)='syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000003400)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003440)) 4.591963766s ago: executing program 9 (id=4415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x4804) 4.535448327s ago: executing program 3 (id=4416): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000acc2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000079743bea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, 0x0, 0x0) 4.42150004s ago: executing program 9 (id=4418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff06) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r6, r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r7, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r8 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r8, 0x0, 0x9, 0x0) 4.360901371s ago: executing program 3 (id=4419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) dup(r0) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x80000f, @empty, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0xe9, 0x8, 0xff}, 0x9c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r4, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r5, 0x0, 0x1) ptrace$cont(0x18, r5, 0x0, 0x0) wait4(r5, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, r5, 0x58, &(0x7f0000000080)="010000000000000000000000000000000000000000000000000000000100"/96) sched_getaffinity(r5, 0x8, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) 2.473345744s ago: executing program 7 (id=4423): io_setup(0x1202, &(0x7f0000000040)=0x0) io_getevents(r0, 0x800, 0x3, &(0x7f0000000080)=[{}, {}, {}], 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 2.469408964s ago: executing program 9 (id=4424): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001803a641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x6}, 0x100800, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/246, 0xf6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8", 0x7}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) getdents(0xffffffffffffffff, 0x0, 0x0) 1.78527918s ago: executing program 42 (id=4423): io_setup(0x1202, &(0x7f0000000040)=0x0) io_getevents(r0, 0x800, 0x3, &(0x7f0000000080)=[{}, {}, {}], 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 1.176184153s ago: executing program 3 (id=4429): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000acc2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000079743bea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, 0x0, 0x0) 982.792098ms ago: executing program 9 (id=4430): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) 769.261492ms ago: executing program 0 (id=4434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x4804) 768.690223ms ago: executing program 0 (id=4435): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=ANY=[@ANYBLOB="42000000100039040000000000009df0ef0d0087", @ANYRES32=r5, @ANYBLOB="09580100000000002000128008000100677265001400028008000700ffffffff0500080080000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001c00070c2ebd7000fedbdf250a000000071f61d1cb00e328870f8feb560edca5", @ANYRES32=r5, @ANYBLOB="4000103214000100ff0100000000000000000000000000010a000200aaaaaaaaaabb0000"], 0x3c}}, 0x20024090) munmap$binder(0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 664.986215ms ago: executing program 3 (id=4436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff06) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r6, r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r7, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r8 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r8, 0x0, 0x9, 0x0) 664.765575ms ago: executing program 2 (id=4437): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 558.994737ms ago: executing program 43 (id=4436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff06) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r6, r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r7, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r8 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r8, 0x0, 0x9, 0x0) 531.324608ms ago: executing program 2 (id=4439): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e0817000700005425", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 514.130818ms ago: executing program 9 (id=4440): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001803a641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x6}, 0x100800, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8", 0x7}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) getdents(0xffffffffffffffff, 0x0, 0x0) 466.020419ms ago: executing program 0 (id=4441): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a41c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78a57a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420800000000000000c1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2376fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1212e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b8393dee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 452.77731ms ago: executing program 2 (id=4442): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) munmap$binder(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 303.412553ms ago: executing program 0 (id=4443): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7", 0x1}], 0x1, 0xa) 207.353345ms ago: executing program 2 (id=4444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) 161.410636ms ago: executing program 0 (id=4445): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000acc2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000079743bea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, 0x0, 0x0) 85.215658ms ago: executing program 2 (id=4446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x4804) 43.019159ms ago: executing program 2 (id=4447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x35dfdbfe, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1c, 0x5, 0x1, 0x7, 0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r7) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0xffffffe8, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x44084) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6, 0x56ff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000c00)={r2, 0x1ff, 0x40, 0x100, 0x9, 0x0, 0x8001, 0x351d, {r6, @in={{0x2, 0x4e23, @loopback}}, 0x9, 0x8, 0x5, 0x106, 0x5}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={r2, 0xd8, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}, 0x3}, @in6={0xa, 0x4e23, 0x1, @private0, 0x7}, @in6={0xa, 0x4e21, 0x8, @local, 0x6a2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}, @in6={0xa, 0x4e20, 0xd02, @loopback, 0x7}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x18, @private2, 0x800}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}]}, &(0x7f0000000340)=0x10) r9 = dup2(r0, r0) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000000440)={0x8000}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="22de2554c2ea31017cd43e5344abeae4a2639d310c82184093", 0x19}, {&(0x7f0000000500)="beb977fcc6573935b19f2188b392a8960ba9bc9796ed130c3d44c03312671a7344d3fdc85fffd32ed97f0239b1b3fb0934dc255cee068fd1f0cc048c2012b52eeaf684c2c1a54aa4f73ef307e7aeff088ca6c2a21bd2edb8a01273e8bcfce76c96b6bf1e07d964d18d567abc7cef953c62fa26ae159b27225ba7e674b364e2246c2dc3f412f7756daea674e3ddd1", 0x8e}, {&(0x7f00000005c0)="f83449a21b27b71f91ed481f4379cab416444ebf7e6363a421d0d38547e41bf300b4628bbc8af78e383d9446b7412274b2790bf386bf848eb74029fecfe22fd4c9804dc3e462a8538f55d3a43f704091b4a542df8c6c4fb062a40a10715e0ebc42e5f87b3a90c5a26f144d5837ad2ddd47583d3455e14292ccc25071ea1e147d465fee63ca0d99da899a1fb644df06de1f990fdad4127d8e2437cb77457d08be6b2b3cdcb5886a235e610beb4237a7f00d0a30be54eedd5789fc4b527dc610035129d1a5e0a4a47b2cb3272f5da44aaa8c", 0xd1}, {&(0x7f00000006c0)="c7e60d83777823ad4afa7acdaa57a53343a895c5273c1ea3a317c3d03f60da96344718c8a88d83096ad6825db81cb89cd8", 0x31}, {&(0x7f0000000700)="2f107cf5968d8e966d39d2f1da209d2127c72d9df5f038381b65484b6b14f9d92858d70a4e8758d6476c40c5a225c649521b647d77293c2aa60eb9ba58ef0ca5152327dba0104a9598a9ee4157d990d6f8edc4f0eda9ede4cfd9456c536c6efbef3dac15146c176a04586da3b61c2cb36d2c07cfaab1cb0724c5cc75f4692d5ca2ab8aa37baddf2973de0b15a9ec9c871e015f7281b918d5305cb223438571e5695f4d1d0081ba", 0xa7}, {&(0x7f00000007c0)="4d1a020a4b55555fdddf29967c52daf2ad935c86fb5f6fc98fc2100b84c97a4eef28df1555449cb466bad8f3b0f36724ac3644d4235144ab8b8bc7be3e4dca72b6a507718115c760edd19eac4c9ff59c4ee0260638e5cc35ad95be98c179e27add5de67d6a7b9a36f82bf49e1a34591054a4de92c0af940f832a856186eef83a6d22af3ca2", 0x85}, {&(0x7f0000000880)="d4c79f8be952fcf582dcedc5806d2fc6cfc85f9c9569ed9a21b02fc69eb31af900f8252de243cae24b0a690ff822c3410c0769b75e03291d98c4cfb7118fccc2c2f4f92f5f171f67e3292daeaa65f10272be10cc267e8130b9533578f8e59ccbaa5a86ab82a9a9c1a2f07852402bdcf2a69ee3c14bcc7a733c3f8f9336d389746fbe7c0e3dfcb6430088aac8acba6aa2b7148d5674c4ab172603759f18c722c03b7ae12488cb2869b1b93678efdedebb6bab99ded2cf8c77fe8149c26248891023d108d07daa78074f6b2e7194e076d24b3009459d5aa9265ba3cf035dc2e117882a5cce", 0xe4}, {&(0x7f0000000980)="b320be028bf8962fc26655d03e49a74ba2411c8bec163828b8bccd25ff2f31459e6eb0ca4502c98c718778de635b29b2d78cb724068d29fab3d0399fe1f94e85a536f9246c6dcec397ef9686b4c44f7c9cd4252a063020e9f1df01f8a1f07969726903d8c9903ae8a3cd117b5106a7845f2d864ef4f7fc81567feae84cf7cc8d3aeb1243411d0e08c4a74a6ad1401a539803faca08283819a1e29348d0a61aa5c0df", 0xa2}, {&(0x7f0000000a40)}], 0x9}, 0x40080) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r11 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) write$cgroup_int(r10, &(0x7f0000000480)=0xfe8e, 0x12) 0s ago: executing program 0 (id=4448): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 1.4026: couldn't read orphan inode 15 (err -117) [ 681.920639][T17544] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4027: Corrupt directory, running e2fsck is recommended [ 681.945098][T17536] loop1: lost filesystem error report for type 5 error -117 [ 681.950716][T17544] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 681.968759][T17536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.988588][T17544] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.4027: corrupted in-inode xattr: e_name out of bounds [ 682.005375][T17536] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.008940][T17559] loop7: detected capacity change from 0 to 512 [ 682.017788][T17544] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 682.025683][T17536] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 682.035045][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 682.035073][ C0] EXT4-fs (loop9): initial error at time 1786571125: ext4_iget_extra_inode:5180: inode 15 [ 682.035131][ C0] EXT4-fs (loop9): last error at time 1786571125: ext4_iget_extra_inode:5180: inode 15 [ 682.065644][T17559] EXT4-fs: Ignoring removed bh option [ 682.076345][T17544] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4027: couldn't read orphan inode 15 (err -117) [ 682.094215][T17544] loop9: lost filesystem error report for type 5 error -117 [ 682.097119][T17536] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4026: Corrupt directory, running e2fsck is recommended [ 682.123161][T17544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.161609][T17544] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.175443][T17544] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 682.176711][T17559] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.193262][T17544] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4027: Corrupt directory, running e2fsck is recommended [ 682.226398][T17559] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 682.237413][T17572] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.247306][T13724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.250022][T17559] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4028: Corrupt directory, running e2fsck is recommended [ 682.260214][T17572] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 682.293254][T17559] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 682.302871][ T28] audit: type=1400 audit(1786571126.216:17697): avc: denied { write } for pid=17547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.307486][T17559] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4028: corrupted in-inode xattr: e_name out of bounds [ 682.347418][T17559] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 682.347967][T17559] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4028: couldn't read orphan inode 15 (err -117) [ 682.357268][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 682.357293][ C0] EXT4-fs (loop7): initial error at time 1786571126: ext4_iget_extra_inode:5180: inode 15 [ 682.357327][ C0] EXT4-fs (loop7): last error at time 1786571126: ext4_iget_extra_inode:5180: inode 15 [ 682.408666][T17572] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4027: Corrupt directory, running e2fsck is recommended [ 682.460032][T17559] loop7: lost filesystem error report for type 5 error -117 [ 682.462094][T17559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.483970][T17544] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.543133][T17544] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 682.555481][ T28] audit: type=1400 audit(1786571126.436:17698): avc: denied { write } for pid=17578 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.633239][T17544] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4027: Corrupt directory, running e2fsck is recommended [ 682.666566][T17559] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.720746][T17580] loop1: detected capacity change from 0 to 128 [ 682.746956][T17559] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 682.748750][T17576] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.757445][T17559] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4028: Corrupt directory, running e2fsck is recommended [ 682.790251][T17587] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.813515][T17587] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 682.825087][T17587] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4028: Corrupt directory, running e2fsck is recommended [ 682.844983][T17307] veth0_vlan: entered promiscuous mode [ 682.853504][T17580] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 682.867210][T17580] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.882285][ T28] audit: type=1400 audit(1786571126.806:17699): avc: denied { write } for pid=17579 comm="syz.1.4030" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 682.912090][ T9725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.956292][T17307] veth1_vlan: entered promiscuous mode [ 682.994527][T16649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.065104][T13724] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 683.081905][T17307] veth0_macvtap: entered promiscuous mode [ 683.097069][T17307] veth1_macvtap: entered promiscuous mode [ 683.128869][T17307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.194462][T17307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.200155][T17592] loop9: detected capacity change from 0 to 128 [ 683.241907][ T4135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.250781][ T4135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.259599][ T4135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.268310][ T4135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.391663][T17592] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 683.440158][T17592] ext4 filesystem being mounted at /504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 683.702335][T17608] loop7: detected capacity change from 0 to 128 [ 683.995275][ T28] audit: type=1400 audit(1786571127.876:17700): avc: denied { write } for pid=17590 comm="syz.9.4031" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 684.108834][T17605] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 684.218506][T17615] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4035'. [ 684.243364][ T28] audit: type=1400 audit(1786571128.036:17701): avc: denied { write } for pid=17590 comm="syz.9.4031" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 684.290067][ T9725] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 684.364186][ T28] audit: type=1400 audit(1786571128.036:17702): avc: denied { write } for pid=17590 comm="syz.9.4031" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 684.426342][T17622] veth0: entered promiscuous mode [ 684.465371][ T28] audit: type=1400 audit(1786571128.036:17703): avc: denied { write } for pid=17590 comm="syz.9.4031" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 684.498420][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4038'. [ 684.687469][ T28] audit: type=1400 audit(1786571128.326:17704): avc: denied { write } for pid=17583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.816652][ T3370] IPVS: starting estimator thread 0... [ 684.823425][T17635] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4041'. [ 684.934835][T17636] IPVS: using max 2304 ests per chain, 115200 per kthread [ 685.025247][T17623] bridge0: port 4(vlan2) entered blocking state [ 685.035177][T17623] bridge0: port 4(vlan2) entered disabled state [ 685.042159][T17623] vlan2: entered allmulticast mode [ 685.049563][T17623] vlan2: entered promiscuous mode [ 685.054743][T17623] dummy0: entered promiscuous mode [ 685.237868][T17646] loop7: detected capacity change from 0 to 512 [ 685.267550][T17646] EXT4-fs: Ignoring removed bh option [ 685.308998][T17646] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 685.324739][T17654] loop9: detected capacity change from 0 to 512 [ 685.338206][T17646] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 685.349580][T17646] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4042: Corrupt directory, running e2fsck is recommended [ 685.390744][T17646] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 685.406589][T17646] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4042: corrupted in-inode xattr: e_name out of bounds [ 685.420726][T17646] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 685.423674][T17646] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4042: couldn't read orphan inode 15 (err -117) [ 685.446337][T17646] loop7: lost filesystem error report for type 5 error -117 [ 685.456685][T17646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.491144][T17646] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 685.504462][T17646] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 685.507508][T17654] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4043: bg 0: block 433: padding at end of block bitmap is not set [ 685.516161][T17646] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4042: Corrupt directory, running e2fsck is recommended [ 685.529004][T17654] loop9: lost filesystem error report for type 5 error -117 [ 685.569873][T17655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.581517][T17654] EXT4-fs (loop9): Remounting filesystem read-only [ 685.585843][T17655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.586093][T17669] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 685.592700][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 685.592729][ C0] EXT4-fs (loop9): initial error at time 1786571129: ext4_validate_block_bitmap:441 [ 685.592768][ C0] EXT4-fs (loop9): last error at time 1786571129: ext4_validate_block_bitmap:441 [ 685.593894][T17654] EXT4-fs (loop9): 1 truncate cleaned up [ 685.594836][T17654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.625053][ T4135] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 685.664763][T17654] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.683675][T17669] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 685.704378][ T4135] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 685.712947][T17669] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4042: Corrupt directory, running e2fsck is recommended [ 685.727745][ T4135] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 685.830846][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4043'. [ 685.848749][T16649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.976645][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4048'. [ 685.994710][T17654] can: request_module (can-proto-0) failed. [ 686.008620][T17688] hsr_slave_1 (unregistering): left promiscuous mode [ 686.021343][ T9725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.105925][T17695] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4049'. [ 686.338021][T17706] loop9: detected capacity change from 0 to 1024 [ 686.345884][T17706] EXT4-fs (loop9): can't mount with both data=journal and delalloc [ 686.398658][T17716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4053'. [ 686.440465][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 686.440585][ T28] audit: type=1400 audit(1786571130.366:17711): avc: denied { write } for pid=17718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.689746][T17737] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4061'. [ 686.790536][T17746] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4063'. [ 686.856087][ T28] audit: type=1400 audit(1786571130.736:17712): avc: denied { write } for pid=17721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.890601][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'. [ 686.938904][ T28] audit: type=1400 audit(1786571130.836:17713): avc: denied { write } for pid=17757 comm="syz.7.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 686.968176][T17760] loop4: detected capacity change from 0 to 512 [ 686.985924][ T28] audit: type=1400 audit(1786571130.896:17714): avc: denied { write } for pid=17759 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.040428][ T28] audit: type=1400 audit(1786571130.966:17715): avc: denied { create } for pid=17757 comm="syz.7.4065" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 687.079604][T17760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.095350][T17760] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.117907][ T28] audit: type=1400 audit(1786571131.036:17716): avc: denied { setattr } for pid=17756 comm="syz.4.4066" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 687.321660][ T28] audit: type=1400 audit(1786571131.246:17717): avc: denied { write } for pid=17770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.441240][ T28] audit: type=1400 audit(1786571131.366:17718): avc: denied { write } for pid=17787 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.682145][T17307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.771269][ T28] audit: type=1400 audit(1786571131.696:17719): avc: denied { write } for pid=17793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.863290][ T28] audit: type=1400 audit(1786571131.786:17720): avc: denied { write } for pid=17808 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.841752][T17847] loop7: detected capacity change from 0 to 128 [ 689.930483][T17854] loop9: detected capacity change from 0 to 128 [ 689.972045][ T7765] IPVS: starting estimator thread 0... [ 690.124983][T17856] IPVS: using max 2400 ests per chain, 120000 per kthread [ 690.176989][T17862] __nla_validate_parse: 5 callbacks suppressed [ 690.177011][T17862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4085'. [ 690.457061][T17870] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4088'. [ 690.563532][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4090'. [ 690.572214][T17878] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4089'. [ 690.609862][T17875] hsr_slave_1 (unregistering): left promiscuous mode [ 690.648203][T17885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4093'. [ 691.005551][T17902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4097'. [ 691.332618][T17908] loop7: detected capacity change from 0 to 128 [ 691.771811][T17915] FAULT_INJECTION: forcing a failure. [ 691.771811][T17915] name failslab, interval 1, probability 0, space 0, times 0 [ 691.829840][T17915] CPU: 0 UID: 0 PID: 17915 Comm: syz.4.4100 Not tainted syzkaller #0 PREEMPT(lazy) [ 691.829919][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 691.829935][T17915] Call Trace: [ 691.829943][T17915] [ 691.829967][T17915] __dump_stack+0x1d/0x30 [ 691.829998][T17915] dump_stack_lvl+0x95/0xd0 [ 691.830095][T17915] dump_stack+0x15/0x1b [ 691.830117][T17915] should_fail_ex+0x25e/0x270 [ 691.830226][T17915] ? rtnl_newlink+0x5c/0x1400 [ 691.830261][T17915] should_failslab+0x8c/0xb0 [ 691.830311][T17915] __kmalloc_cache_noprof+0x7b/0x3d0 [ 691.830348][T17915] ? rtnl_newlink+0x5c/0x1400 [ 691.830376][T17915] ? __pfx_rtnl_newlink+0x10/0x10 [ 691.830409][T17915] rtnl_newlink+0x5c/0x1400 [ 691.830471][T17915] ? ring_buffer_lock_reserve+0x6f7/0x830 [ 691.830495][T17915] ? rb_commit+0x3ec/0x430 [ 691.830596][T17915] ? ring_buffer_unlock_commit+0x3b9/0x440 [ 691.830620][T17915] ? trace_buffer_unlock_commit_regs+0x114/0x310 [ 691.830646][T17915] ? __rcu_read_unlock+0x4e/0x70 [ 691.830679][T17915] ? avc_has_perm_noaudit+0xa3/0x120 [ 691.830769][T17915] ? cred_has_capability+0x224/0x2a0 [ 691.830797][T17915] ? selinux_capable+0x31/0x40 [ 691.830825][T17915] ? security_capable+0x7b/0x90 [ 691.830875][T17915] ? ns_capable+0x80/0xb0 [ 691.830894][T17915] ? __pfx_rtnl_newlink+0x10/0x10 [ 691.830921][T17915] rtnetlink_rcv_msg+0x64b/0x720 [ 691.831006][T17915] netlink_rcv_skb+0x11e/0x220 [ 691.831035][T17915] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 691.831136][T17915] rtnetlink_rcv+0x1c/0x30 [ 691.831160][T17915] netlink_unicast+0x5a7/0x680 [ 691.831187][T17915] netlink_sendmsg+0x5be/0x6f0 [ 691.831219][T17915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.831308][T17915] ____sys_sendmsg+0x532/0x580 [ 691.831338][T17915] ___sys_sendmsg+0x195/0x1e0 [ 691.831369][T17915] __x64_sys_sendmsg+0xd4/0x160 [ 691.831412][T17915] x64_sys_call+0x194c/0x3020 [ 691.831486][T17915] do_syscall_64+0x136/0x3c0 [ 691.831519][T17915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.831573][T17915] RIP: 0033:0x7fc0f710e0d9 [ 691.831591][T17915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.831611][T17915] RSP: 002b:00007fc0f5b67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.831635][T17915] RAX: ffffffffffffffda RBX: 00007fc0f7395fa0 RCX: 00007fc0f710e0d9 [ 691.831651][T17915] RDX: 0000000000000810 RSI: 0000200000000080 RDI: 0000000000000007 [ 691.831710][T17915] RBP: 00007fc0f5b67090 R08: 0000000000000000 R09: 0000000000000000 [ 691.831725][T17915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.831741][T17915] R13: 00007fc0f7396038 R14: 00007fc0f7395fa0 R15: 00007ffe34b2b668 [ 691.831761][T17915] [ 692.144258][T17918] loop4: detected capacity change from 0 to 128 [ 692.178066][T17921] netlink: 'syz.9.4101': attribute type 2 has an invalid length. [ 692.190460][T17917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4099'. [ 692.215671][T17918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 692.224433][T17918] System zones: 1-3, 19-19, 35-36 [ 692.231997][T17921] loop9: detected capacity change from 0 to 1024 [ 692.257735][T17921] ext4: Unknown parameter 'smackfsroot' [ 692.261941][T17918] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 692.342803][T17918] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 692.442990][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 692.443009][ T28] audit: type=1400 audit(1786571136.356:17725): avc: denied { write } for pid=17914 comm="syz.4.4100" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 692.490695][T17915] IPv6: Can't replace route, no match found [ 692.499099][ T28] audit: type=1400 audit(1786571136.416:17726): avc: denied { load_policy } for pid=17914 comm="syz.4.4100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 692.501109][T17915] SELinux: policydb string length 7405576 does not match expected length 8 [ 692.522775][T17929] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4103'. [ 692.601494][T17915] SELinux: failed to load policy [ 692.602752][T17934] veth0: entered promiscuous mode [ 692.719704][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4105'. [ 692.780963][T17307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 692.809452][ T7765] infiniband syz0: ib_query_port failed (-19) [ 694.099851][T17959] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4114'. [ 694.264321][T17963] loop1: detected capacity change from 0 to 512 [ 694.334180][T17963] EXT4-fs: Ignoring removed bh option [ 694.736303][T17963] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 694.922694][T17963] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 695.106603][T17963] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4116: Corrupt directory, running e2fsck is recommended [ 695.366459][T17963] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 695.705547][T17963] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.4116: corrupted in-inode xattr: e_name out of bounds [ 696.043309][T17994] loop7: detected capacity change from 0 to 128 [ 696.166981][T17963] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 696.174664][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 696.190343][ C0] EXT4-fs (loop1): initial error at time 1786571140: ext4_iget_extra_inode:5180: inode 15 [ 696.200359][ C0] EXT4-fs (loop1): last error at time 1786571140: ext4_iget_extra_inode:5180: inode 15 [ 696.281523][T17963] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4116: couldn't read orphan inode 15 (err -117) [ 696.369984][T17983] loop9: detected capacity change from 0 to 128 [ 696.416437][T17963] loop1: lost filesystem error report for type 5 error -117 [ 696.417735][T17963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.456875][ T28] audit: type=1400 audit(1786571140.306:17727): avc: denied { write } for pid=17962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.619405][T17983] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 696.668173][ T28] audit: type=1400 audit(1786571140.466:17728): avc: denied { write } for pid=18001 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.722502][T17997] __nla_validate_parse: 2 callbacks suppressed [ 696.722521][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4123'. [ 696.729101][T17983] ext4 filesystem being mounted at /524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 696.742924][T17963] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 696.807464][T17963] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 696.822683][T17963] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4116: Corrupt directory, running e2fsck is recommended [ 696.864180][ T28] audit: type=1400 audit(1786571140.766:17729): avc: denied { write } for pid=17981 comm="syz.9.4121" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.886307][ T28] audit: type=1400 audit(1786571140.766:17730): avc: denied { write } for pid=17981 comm="syz.9.4121" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.992935][ T28] audit: type=1400 audit(1786571140.826:17731): avc: denied { write } for pid=17981 comm="syz.9.4121" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 697.048320][T17963] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 697.072656][T17963] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 697.089698][T17963] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4116: Corrupt directory, running e2fsck is recommended [ 697.122544][T17963] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 697.134794][T17963] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 697.146273][T17963] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4116: Corrupt directory, running e2fsck is recommended [ 697.171011][T17963] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 697.247562][T13724] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /233/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 697.269862][T13724] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /233/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 697.357280][ T9725] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 697.380548][T18014] FAULT_INJECTION: forcing a failure. [ 697.380548][T18014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.409896][T18014] CPU: 0 UID: 0 PID: 18014 Comm: syz.7.4126 Not tainted syzkaller #0 PREEMPT(lazy) [ 697.409935][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.409953][T18014] Call Trace: [ 697.409963][T18014] [ 697.410037][T18014] __dump_stack+0x1d/0x30 [ 697.410144][T18014] dump_stack_lvl+0x95/0xd0 [ 697.410213][T18014] dump_stack+0x15/0x1b [ 697.410238][T18014] should_fail_ex+0x25e/0x270 [ 697.410363][T18014] should_fail+0xb/0x20 [ 697.410491][T18014] should_fail_usercopy+0x1a/0x20 [ 697.410538][T18014] _copy_to_user+0x20/0xa0 [ 697.410564][T18014] simple_read_from_buffer+0xb5/0x130 [ 697.410598][T18014] proc_fail_nth_read+0x10e/0x150 [ 697.410707][T18014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 697.410841][T18014] vfs_read+0x18e/0x7c0 [ 697.410865][T18014] ? __rcu_read_unlock+0x4e/0x70 [ 697.410895][T18014] ? __fget_files+0x184/0x1c0 [ 697.410926][T18014] ? mutex_lock+0x57/0x90 [ 697.410964][T18014] ksys_read+0xdc/0x1a0 [ 697.411027][T18014] __x64_sys_read+0x40/0x50 [ 697.411052][T18014] x64_sys_call+0x2886/0x3020 [ 697.411083][T18014] do_syscall_64+0x136/0x3c0 [ 697.411130][T18014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.411155][T18014] RIP: 0033:0x7f05ed89e90e [ 697.411173][T18014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.411197][T18014] RSP: 002b:00007f05ec336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.411223][T18014] RAX: ffffffffffffffda RBX: 00007f05ec3376c0 RCX: 00007f05ed89e90e [ 697.411309][T18014] RDX: 000000000000000f RSI: 00007f05ec3370a0 RDI: 0000000000000005 [ 697.411327][T18014] RBP: 00007f05ec337090 R08: 0000000000000000 R09: 0000000000000000 [ 697.411346][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.411365][T18014] R13: 00007f05edb66038 R14: 00007f05edb65fa0 R15: 00007ffeda0ff908 [ 697.411437][T18014] [ 697.417427][T18016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4128'. [ 697.653575][T18023] loop7: detected capacity change from 0 to 512 [ 697.667843][T18023] EXT4-fs: Ignoring removed bh option [ 697.676586][T18025] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4125'. [ 697.692479][T18023] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 697.718006][T18023] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 697.729697][T18023] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4129: Corrupt directory, running e2fsck is recommended [ 697.739707][ T28] audit: type=1400 audit(1786571141.666:17732): avc: denied { create } for pid=18028 comm="syz.9.4132" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 697.743897][T18011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.837285][T18023] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 697.850425][ T355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.887696][T18023] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4129: corrupted in-inode xattr: e_name out of bounds [ 697.927690][T18036] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4134'. [ 697.944194][T18023] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 697.944666][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 697.960621][ C0] EXT4-fs (loop7): initial error at time 1786571141: ext4_iget_extra_inode:5180: inode 15 [ 697.970622][ C0] EXT4-fs (loop7): last error at time 1786571141: ext4_iget_extra_inode:5180: inode 15 [ 697.983877][T18023] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4129: couldn't read orphan inode 15 (err -117) [ 698.020102][T18023] loop7: lost filesystem error report for type 5 error -117 [ 698.024386][T18023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.047216][T18023] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 698.059199][T18023] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 698.069719][T18023] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4129: Corrupt directory, running e2fsck is recommended [ 698.087848][ T355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.208422][T18039] loop4: detected capacity change from 0 to 128 [ 698.726398][T18040] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 698.799690][ T355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.815856][T18040] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 698.852646][T18040] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4129: Corrupt directory, running e2fsck is recommended [ 698.898727][T18050] veth0: entered promiscuous mode [ 698.960519][ T355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.973050][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4138'. [ 699.000101][T18041] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 699.175553][T18041] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 699.186531][T18041] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4129: Corrupt directory, running e2fsck is recommended [ 699.401368][T18023] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 699.611684][T16649] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /41/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 699.679665][T16649] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /41/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 699.700130][T18064] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4143'. [ 699.711765][T18065] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4141'. [ 699.885892][ T28] audit: type=1400 audit(1786571143.816:17733): avc: denied { write } for pid=18054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.956054][ T28] audit: type=1400 audit(1786571143.886:17734): avc: denied { write } for pid=18083 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.064223][T16649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.077499][T18079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4145'. [ 700.173783][ T355] erspan0: left allmulticast mode [ 700.184872][ T355] erspan0: left promiscuous mode [ 700.192334][ T355] bridge0: port 3(erspan0) entered disabled state [ 700.201717][ T355] bridge_slave_1: left allmulticast mode [ 700.207736][ T355] bridge_slave_1: left promiscuous mode [ 700.213855][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.225265][ T355] bridge_slave_0: left allmulticast mode [ 700.231049][ T355] bridge_slave_0: left promiscuous mode [ 700.238446][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.414394][ T355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.429232][ T355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.442472][ T355] bond0 (unregistering): Released all slaves [ 700.543863][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 700.563160][ T355] tipc: Left network mode [ 700.639897][T18102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 700.647644][T18105] loop7: detected capacity change from 0 to 128 [ 700.725785][ T355] hsr_slave_0: left promiscuous mode [ 700.737954][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.763128][ T355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.784314][T18114] loop4: detected capacity change from 0 to 512 [ 700.793104][ T355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.808582][T18105] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 700.823435][T18114] EXT4-fs: Ignoring removed bh option [ 700.839718][ T355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.859197][T18114] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 700.875986][T18105] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 700.912498][T18114] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 700.941850][T18114] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4151: Corrupt directory, running e2fsck is recommended [ 700.959562][ T355] veth1_macvtap: left promiscuous mode [ 700.965299][ T355] veth0_macvtap: left promiscuous mode [ 700.970963][ T28] audit: type=1400 audit(1786571144.866:17735): avc: denied { write } for pid=18104 comm="syz.7.4149" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.006377][ T355] veth1_vlan: left promiscuous mode [ 701.022155][ T355] veth0_vlan: left promiscuous mode [ 701.028614][T18114] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 701.162024][T18124] loop9: detected capacity change from 0 to 128 [ 702.008556][T18114] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4151: corrupted in-inode xattr: e_name out of bounds [ 702.016470][ T28] audit: type=1400 audit(1786571145.936:17736): avc: denied { write } for pid=18103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.566259][T18114] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.605915][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 702.622728][ C1] EXT4-fs (loop4): initial error at time 1786571146: ext4_iget_extra_inode:5180: inode 15 [ 702.633135][ C1] EXT4-fs (loop4): last error at time 1786571146: ext4_iget_extra_inode:5180: inode 15 [ 702.649703][T18114] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4151: couldn't read orphan inode 15 (err -117) [ 702.658456][ T28] audit: type=1400 audit(1786571146.536:17737): avc: denied { write } for pid=18126 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.710822][T18114] loop4: lost filesystem error report for type 5 error -117 [ 702.721963][T18114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.745808][T16649] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 702.758485][T18114] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 702.786373][T18114] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 702.821756][T18114] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4151: Corrupt directory, running e2fsck is recommended [ 702.910844][T18130] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 702.941419][T18130] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 702.971243][T18130] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4151: Corrupt directory, running e2fsck is recommended [ 702.993690][T18114] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.012795][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4152'. [ 703.029433][T18114] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 703.057145][T18114] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4151: Corrupt directory, running e2fsck is recommended [ 703.074453][ T355] team0 (unregistering): Port device team_slave_1 removed [ 703.090610][ T355] team0 (unregistering): Port device team_slave_0 removed [ 703.147388][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 703.156190][T18129] veth0: entered promiscuous mode [ 703.174001][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4153'. [ 703.198520][T17307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.295438][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4155'. [ 703.305754][T18144] netlink: 'syz.4.4155': attribute type 10 has an invalid length. [ 703.314307][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4155'. [ 703.359725][T18145] loop4: detected capacity change from 0 to 128 [ 703.385066][T18145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 703.394148][T18145] System zones: 1-3, 19-19, 35-36 [ 703.412487][T18145] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 703.427769][T18145] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 703.496679][ T28] audit: type=1400 audit(1786571147.396:17738): avc: denied { write } for pid=18143 comm="syz.4.4155" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 703.498170][T18145] IPv6: Can't replace route, no match found [ 703.619661][T18144] geneve2: entered promiscuous mode [ 703.625231][T18144] geneve2: entered allmulticast mode [ 703.761267][T18162] loop9: detected capacity change from 0 to 128 [ 703.767839][ T28] audit: type=1400 audit(1786571147.636:17739): avc: denied { write } for pid=18147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.770973][T18144] SELinux: policydb string length 7405576 does not match expected length 8 [ 703.821713][T18162] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 703.835317][T18162] ext4 filesystem being mounted at /532/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 703.855340][T18144] SELinux: failed to load policy [ 703.915757][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4161'. [ 703.920999][ T28] audit: type=1400 audit(1786571147.796:17740): avc: denied { write } for pid=18171 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.959711][T18174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4160'. [ 704.017056][T17307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 704.037150][ T9725] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 704.063562][T18184] loop7: detected capacity change from 0 to 512 [ 704.074241][T18184] EXT4-fs: Ignoring removed bh option [ 704.094576][T18184] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.131490][T18184] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 704.157049][T18184] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4162: Corrupt directory, running e2fsck is recommended [ 704.238438][T18184] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 704.260860][ T355] IPVS: stop unused estimator thread 0... [ 704.270519][T18058] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.293200][T18058] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.301291][T18184] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4162: corrupted in-inode xattr: e_name out of bounds [ 704.327211][T18058] bridge_slave_0: entered allmulticast mode [ 704.342393][T18184] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 704.342985][T18184] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4162: couldn't read orphan inode 15 (err -117) [ 704.352510][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 704.352548][ C1] EXT4-fs (loop7): initial error at time 1786571148: ext4_iget_extra_inode:5180: inode 15 [ 704.352613][ C1] EXT4-fs (loop7): last error at time 1786571148: ext4_iget_extra_inode:5180: inode 15 [ 704.403140][T18058] bridge_slave_0: entered promiscuous mode [ 704.416388][T18184] loop7: lost filesystem error report for type 5 error -117 [ 704.420411][T18058] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.436271][T18058] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.443890][T18058] bridge_slave_1: entered allmulticast mode [ 704.454374][T18184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.465154][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4163'. [ 704.469652][T18058] bridge_slave_1: entered promiscuous mode [ 704.687178][T18200] loop4: detected capacity change from 0 to 128 [ 705.468728][T18118] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 705.490359][T18184] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 705.512416][T18194] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.067806][T18184] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 706.092831][T18184] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4162: Corrupt directory, running e2fsck is recommended [ 706.098433][T18058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.114475][T18201] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 706.127723][T18201] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 706.140236][T18201] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4162: Corrupt directory, running e2fsck is recommended [ 706.159968][T18202] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 706.185088][T18058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.225365][T18202] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 706.237730][T18202] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4162: Corrupt directory, running e2fsck is recommended [ 706.258670][T18184] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 706.391772][T18058] team0: Port device team_slave_0 added [ 706.405540][T18058] team0: Port device team_slave_1 added [ 706.443443][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'. [ 706.452759][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4167'. [ 706.469719][T18058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.472870][T18208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.476776][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.513217][T16649] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /49/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 706.518751][T18058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.547274][T18058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.560356][T18058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.589382][T16649] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /49/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 706.615486][T18058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.639120][T16649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.698478][T18058] hsr_slave_0: entered promiscuous mode [ 706.709645][T18058] hsr_slave_1: entered promiscuous mode [ 706.722192][T18058] debugfs: 'hsr0' already exists in 'hsr' [ 706.731183][T18058] Cannot create hsr debugfs directory [ 706.792940][T18225] loop7: detected capacity change from 0 to 164 [ 706.821111][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4172'. [ 706.865324][T18225] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 706.919724][ T28] audit: type=1400 audit(1786571150.846:17741): avc: denied { write } for pid=18207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.994166][ T28] audit: type=1400 audit(1786571150.916:17742): avc: denied { write } for pid=18239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.065928][T18242] loop7: detected capacity change from 0 to 512 [ 707.085646][T18242] EXT4-fs: Ignoring removed bh option [ 707.120403][T18242] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 707.145664][T18242] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 707.172557][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 707.258896][T18242] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4175: Corrupt directory, running e2fsck is recommended [ 707.353436][T18242] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 707.372542][T18242] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4175: corrupted in-inode xattr: e_name out of bounds [ 707.397530][T18242] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 707.398174][T18242] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4175: couldn't read orphan inode 15 (err -117) [ 707.407496][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 707.407522][ C1] EXT4-fs (loop7): initial error at time 1786571151: ext4_iget_extra_inode:5180: inode 15 [ 707.407568][ C1] EXT4-fs (loop7): last error at time 1786571151: ext4_iget_extra_inode:5180: inode 15 [ 707.450338][T18242] loop7: lost filesystem error report for type 5 error -117 [ 707.451567][T18242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.483723][T18255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 707.662895][T18261] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 707.942454][T18261] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 708.288083][T18261] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4175: Corrupt directory, running e2fsck is recommended [ 708.588297][ T28] audit: type=1400 audit(1786571152.516:17743): avc: denied { write } for pid=18247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.612118][T18242] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 708.624787][T18242] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 708.649379][T18058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 708.686256][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.716818][T18058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 708.744398][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.756619][ T28] audit: type=1400 audit(1786571152.656:17744): avc: denied { write } for pid=18269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.779919][T18242] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4175: Corrupt directory, running e2fsck is recommended [ 708.822238][T18058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 708.871045][T18263] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 708.883500][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.913785][T18058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 708.971058][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.978915][ T28] audit: type=1400 audit(1786571152.896:17745): avc: denied { audit_write } for pid=18274 comm="syz.9.4180" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 709.014355][T18263] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 709.065114][ T28] audit: type=1107 audit(1786571152.896:17746): pid=18274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 709.106993][T18263] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4175: Corrupt directory, running e2fsck is recommended [ 709.271813][T18283] loop9: detected capacity change from 0 to 128 [ 709.373613][T18283] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 709.408223][T18058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.459254][T18283] ext4 filesystem being mounted at /539/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 709.484261][T18058] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.528774][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.536137][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.568846][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.576077][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.744120][T18242] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 709.970985][ T28] audit: type=1400 audit(1786571153.896:17747): avc: denied { write } for pid=18287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.184280][T16649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.243436][ T28] audit: type=1400 audit(1786571154.166:17748): avc: denied { write } for pid=18305 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.416285][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 710.765084][ T9725] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 710.781305][T18328] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 710.940160][ T28] audit: type=1400 audit(1786571154.866:17749): avc: denied { write } for pid=18319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.081769][ T28] audit: type=1400 audit(1786571155.006:17750): avc: denied { write } for pid=18338 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.202241][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 711.272181][T18343] __nla_validate_parse: 1 callbacks suppressed [ 711.272237][T18343] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4190'. [ 711.591756][ T28] audit: type=1400 audit(1786571155.516:17751): avc: denied { write } for pid=18344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.697637][T18058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.785845][ T28] audit: type=1400 audit(1786571155.706:17752): avc: denied { write } for pid=18363 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.065727][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4195'. [ 712.420700][T18391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4197'. [ 713.037829][T18407] loop7: detected capacity change from 0 to 128 [ 713.089923][T18407] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 713.105540][T18407] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.272329][T16649] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.387042][T18423] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4201'. [ 713.399445][T18427] netlink: 'syz.4.4202': attribute type 2 has an invalid length. [ 713.453909][T18427] loop4: detected capacity change from 0 to 1024 [ 713.460915][T18427] ext4: Unknown parameter 'smackfsroot' [ 713.521260][T18431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 713.744268][T18058] veth0_vlan: entered promiscuous mode [ 713.764388][T18058] veth1_vlan: entered promiscuous mode [ 713.904654][T18058] veth0_macvtap: entered promiscuous mode [ 713.912102][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 713.912120][ T28] audit: type=1400 audit(1786571157.836:17758): avc: denied { write } for pid=18442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.920964][T18058] veth1_macvtap: entered promiscuous mode [ 714.017467][T18058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.034096][T18463] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4208'. [ 714.059225][ T28] audit: type=1400 audit(1786571157.986:17759): avc: denied { write } for pid=18466 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.087381][T18058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.126402][ T4163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.158915][ T4163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.216865][ T4133] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.246891][ T4133] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.927392][T18485] loop9: detected capacity change from 0 to 128 [ 715.362420][T18488] FAULT_INJECTION: forcing a failure. [ 715.362420][T18488] name failslab, interval 1, probability 0, space 0, times 0 [ 715.515886][T18488] CPU: 1 UID: 0 PID: 18488 Comm: syz.4.4212 Not tainted syzkaller #0 PREEMPT(lazy) [ 715.515986][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.516015][T18488] Call Trace: [ 715.516026][T18488] [ 715.516073][T18488] __dump_stack+0x1d/0x30 [ 715.516159][T18488] dump_stack_lvl+0x95/0xd0 [ 715.516232][T18488] dump_stack+0x15/0x1b [ 715.516253][T18488] should_fail_ex+0x25e/0x270 [ 715.516288][T18488] should_failslab+0x8c/0xb0 [ 715.516353][T18488] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 715.516407][T18488] ? skb_clone+0x151/0x1f0 [ 715.516436][T18488] ? skb_clone+0x151/0x1f0 [ 715.516495][T18488] skb_clone+0x151/0x1f0 [ 715.516519][T18488] __netlink_deliver_tap+0x2be/0x510 [ 715.516555][T18488] netlink_unicast+0x654/0x680 [ 715.516589][T18488] netlink_sendmsg+0x5be/0x6f0 [ 715.516631][T18488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.516666][T18488] ____sys_sendmsg+0x532/0x580 [ 715.516738][T18488] ___sys_sendmsg+0x195/0x1e0 [ 715.516769][T18488] __x64_sys_sendmsg+0xd4/0x160 [ 715.516793][T18488] x64_sys_call+0x194c/0x3020 [ 715.516825][T18488] do_syscall_64+0x136/0x3c0 [ 715.516896][T18488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.516931][T18488] RIP: 0033:0x7fc0f710e0d9 [ 715.516953][T18488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.517004][T18488] RSP: 002b:00007fc0f5b67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.517077][T18488] RAX: ffffffffffffffda RBX: 00007fc0f7395fa0 RCX: 00007fc0f710e0d9 [ 715.517094][T18488] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 715.517109][T18488] RBP: 00007fc0f5b67090 R08: 0000000000000000 R09: 0000000000000000 [ 715.517180][T18488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.517241][T18488] R13: 00007fc0f7396038 R14: 00007fc0f7395fa0 R15: 00007ffe34b2b668 [ 715.517314][T18488] [ 715.920633][T18487] loop7: detected capacity change from 0 to 128 [ 716.897125][T18508] loop7: detected capacity change from 0 to 128 [ 716.923272][ T28] audit: type=1400 audit(1786571160.846:17760): avc: denied { write } for pid=18471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.037855][T18508] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 717.061269][T18508] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.181066][T18516] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4214'. [ 717.314049][ T28] audit: type=1400 audit(1786571161.006:17761): avc: denied { write } for pid=18507 comm="syz.7.4214" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 717.395103][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4219'. [ 717.499757][T18511] loop4: detected capacity change from 0 to 512 [ 717.638337][T18511] EXT4-fs: Ignoring removed bh option [ 717.730406][T18525] loop5: detected capacity change from 0 to 512 [ 717.739854][T18525] EXT4-fs: Ignoring removed bh option [ 717.813803][T18511] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 717.842810][T16649] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 717.857253][T18525] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 717.919266][T18511] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 717.951631][T18525] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 717.970425][ T28] audit: type=1400 audit(1786571161.876:17762): avc: denied { write } for pid=18528 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.018323][T18511] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4218: Corrupt directory, running e2fsck is recommended [ 718.047556][T18525] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4220: Corrupt directory, running e2fsck is recommended [ 718.142808][T18511] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 718.156761][T18525] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 718.185985][T18511] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4218: corrupted in-inode xattr: e_name out of bounds [ 718.201321][T18511] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 718.201771][T18511] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4218: couldn't read orphan inode 15 (err -117) [ 718.211259][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 718.211288][ C0] EXT4-fs (loop4): initial error at time 1786571162: ext4_iget_extra_inode:5180: inode 15 [ 718.211323][ C0] EXT4-fs (loop4): last error at time 1786571162: ext4_iget_extra_inode:5180: inode 15 [ 718.220025][T18525] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4220: corrupted in-inode xattr: e_name out of bounds [ 718.225905][T18511] loop4: lost filesystem error report for type 5 error -117 [ 718.273030][T18511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.275971][T18525] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 718.332401][T18525] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4220: couldn't read orphan inode 15 (err -117) [ 718.334031][T18511] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.341732][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 718.358748][T18511] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 718.365127][ C1] EXT4-fs (loop5): initial error at time 1786571162: ext4_iget_extra_inode:5180: inode 15 [ 718.365173][ C1] EXT4-fs (loop5): last error at time 1786571162: ext4_iget_extra_inode:5180: inode 15 [ 718.378121][T18525] loop5: lost filesystem error report for type 5 error -117 [ 718.402315][T18511] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4218: Corrupt directory, running e2fsck is recommended [ 718.419271][T18525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.441213][T18542] netlink: 'syz.7.4221': attribute type 2 has an invalid length. [ 718.466226][T18522] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.489302][T18522] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 718.504556][T18525] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.524274][T18542] loop7: detected capacity change from 0 to 1024 [ 718.529810][T18546] 06νžé [ 718.531138][ T28] audit: type=1400 audit(1786571162.446:17763): avc: denied { write } for pid=18545 comm="syz.0.4223" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 718.532738][T18525] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 718.554453][T18542] ext4: Unknown parameter 'smackfsroot' [ 718.570612][T18522] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4218: Corrupt directory, running e2fsck is recommended [ 718.911528][T18552] loop9: detected capacity change from 0 to 128 [ 718.948688][T18525] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4220: Corrupt directory, running e2fsck is recommended [ 719.025568][T18552] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 719.054372][T18552] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.069396][ T28] audit: type=1400 audit(1786571162.996:17764): avc: denied { write } for pid=18551 comm="syz.9.4224" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 719.480173][T18521] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 719.500665][ T9725] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 719.563682][T18527] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 719.582675][T18521] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 719.601978][T18511] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 719.671424][T18527] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 719.694096][T18511] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 719.731064][T18527] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4220: Corrupt directory, running e2fsck is recommended [ 719.777398][T18511] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4218: Corrupt directory, running e2fsck is recommended [ 719.792254][ T28] audit: type=1400 audit(1786571163.566:17765): avc: denied { write } for pid=18533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.903507][T18525] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 720.198430][ T28] audit: type=1400 audit(1786571164.126:17766): avc: denied { write } for pid=18572 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.413607][T18579] loop9: detected capacity change from 0 to 128 [ 720.650251][T18522] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 721.150714][T18525] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 721.225192][T18525] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4220: Corrupt directory, running e2fsck is recommended [ 721.365452][T17307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.457718][T18565] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 721.661048][T18058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.090662][T18603] loop5: detected capacity change from 0 to 128 [ 722.122033][ T28] audit: type=1400 audit(1786571166.046:17767): avc: denied { write } for pid=18587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.165559][T18603] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 722.167021][T18603] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.173948][ T28] audit: type=1400 audit(1786571166.096:17768): avc: denied { write } for pid=18601 comm="syz.5.4234" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 722.190157][ T28] audit: type=1400 audit(1786571166.116:17769): avc: denied { write } for pid=18617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.220581][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4234'. [ 722.387899][T18058] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 722.469357][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4238'. [ 722.651363][T18645] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4242'. [ 722.661197][ T28] audit: type=1400 audit(1786571166.576:17770): avc: denied { write } for pid=18623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.711896][ T28] audit: type=1400 audit(1786571166.586:17771): avc: denied { write } for pid=18649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.769577][T18645] IPv6: Can't replace route, no match found [ 722.793786][ T28] audit: type=1326 audit(1786571166.696:17772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.7.4242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05ed8de0d9 code=0x0 [ 722.926439][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 722.977854][ T28] audit: type=1400 audit(1786571166.906:17773): avc: denied { write } for pid=18652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.063844][T18672] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4244'. [ 723.138928][T18676] loop4: detected capacity change from 0 to 512 [ 723.154220][T18676] EXT4-fs: Ignoring removed bh option [ 723.201675][T18676] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 723.226073][T18676] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 723.237442][T18676] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4246: Corrupt directory, running e2fsck is recommended [ 723.257321][T18676] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 723.266068][T18676] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4246: corrupted in-inode xattr: e_name out of bounds [ 723.283264][T18676] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 723.284660][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 723.300591][ C1] EXT4-fs (loop4): initial error at time 1786571167: ext4_iget_extra_inode:5180: inode 15 [ 723.310621][ C1] EXT4-fs (loop4): last error at time 1786571167: ext4_iget_extra_inode:5180: inode 15 [ 723.315066][T18676] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4246: couldn't read orphan inode 15 (err -117) [ 723.359772][T18676] loop4: lost filesystem error report for type 5 error -117 [ 723.360987][T18676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.398200][T18676] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 723.426247][T18676] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 723.484724][T18676] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4246: Corrupt directory, running e2fsck is recommended [ 723.565286][T18691] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 723.601064][T18701] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4249'. [ 723.624837][T18691] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 723.652260][T18691] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4246: Corrupt directory, running e2fsck is recommended [ 723.751577][T18698] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 723.877524][T18698] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 723.888668][T18698] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4246: Corrupt directory, running e2fsck is recommended [ 723.905302][T18706] loop9: detected capacity change from 0 to 128 [ 723.943540][T18706] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 723.960038][T18706] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.969920][T18676] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 724.139738][ T9725] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 724.158595][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 724.158621][ T28] audit: type=1400 audit(1786571168.076:17779): avc: denied { write } for pid=18708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.252912][T17307] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /43/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 724.274557][ T28] audit: type=1400 audit(1786571168.126:17780): avc: denied { write } for pid=18732 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.299499][T17307] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /43/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 724.407362][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4255'. [ 724.428468][T17307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.596171][ T28] audit: type=1400 audit(1786571168.516:17781): avc: denied { write } for pid=18737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.625424][T18756] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4259'. [ 724.679264][ T28] audit: type=1400 audit(1786571168.556:17782): avc: denied { write } for pid=18759 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.719622][T18763] loop5: detected capacity change from 0 to 1024 [ 724.728151][T18763] EXT4-fs: Ignoring removed orlov option [ 724.771592][T18763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.848756][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.933234][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.018595][T18058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.042240][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.156952][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.339450][T18795] loop5: detected capacity change from 0 to 512 [ 725.368145][T18795] EXT4-fs: Ignoring removed bh option [ 725.383041][ T40] bridge_slave_1: left allmulticast mode [ 725.388724][ T40] bridge_slave_1: left promiscuous mode [ 725.394471][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.416995][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4269'. [ 725.435794][T18795] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 725.452879][ T40] bridge_slave_0: left allmulticast mode [ 725.463780][ T40] bridge_slave_0: left promiscuous mode [ 725.467391][T18795] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 725.469540][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.480525][T18795] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4270: Corrupt directory, running e2fsck is recommended [ 725.522348][T18795] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 725.522435][T18795] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4270: corrupted in-inode xattr: e_name out of bounds [ 725.522467][T18795] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 725.527137][T18795] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4270: couldn't read orphan inode 15 (err -117) [ 725.565989][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 725.566006][ C1] EXT4-fs (loop5): initial error at time 1786571169: ext4_iget_extra_inode:5180: inode 15 [ 725.566036][ C1] EXT4-fs (loop5): last error at time 1786571169: ext4_iget_extra_inode:5180: inode 15 [ 725.593699][T18795] loop5: lost filesystem error report for type 5 error -117 [ 725.627877][T18795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.683255][T18795] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 725.700552][T18795] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 725.711045][T18795] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4270: Corrupt directory, running e2fsck is recommended [ 725.732573][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.735209][T18795] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 725.757594][T18795] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 725.772235][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.773339][T18795] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4270: Corrupt directory, running e2fsck is recommended [ 725.807695][T18811] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 725.809598][ T40] bond0 (unregistering): Released all slaves [ 725.820255][T18811] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 725.837371][T18811] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4270: Corrupt directory, running e2fsck is recommended [ 725.859662][T18813] netlink: 'syz.9.4274': attribute type 2 has an invalid length. [ 725.918620][T18813] loop9: detected capacity change from 0 to 1024 [ 725.936280][T18813] ext4: Unknown parameter 'smackfsroot' [ 726.034631][ T40] hsr_slave_0: left promiscuous mode [ 726.042768][T18058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.055653][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.063122][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.072598][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.079994][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.165409][ T40] veth1_macvtap: left promiscuous mode [ 726.171440][ T40] veth0_macvtap: left promiscuous mode [ 726.177745][ T40] veth1_vlan: left promiscuous mode [ 726.183609][ T40] veth0_vlan: left promiscuous mode [ 726.218315][ T28] audit: type=1400 audit(1786571170.146:17783): avc: denied { write } for pid=18815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.346602][ T28] audit: type=1400 audit(1786571170.276:17784): avc: denied { write } for pid=18838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.415505][T18841] loop5: detected capacity change from 0 to 512 [ 726.438730][T18841] EXT4-fs: Ignoring removed bh option [ 726.475277][T18841] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 726.475312][T18841] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 726.475336][T18841] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4280: Corrupt directory, running e2fsck is recommended [ 726.482977][T18841] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 726.483117][T18841] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4280: corrupted in-inode xattr: e_name out of bounds [ 726.483146][T18841] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 726.496096][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 726.496119][ C0] EXT4-fs (loop5): initial error at time 1786571170: ext4_iget_extra_inode:5180: inode 15 [ 726.496164][ C0] EXT4-fs (loop5): last error at time 1786571170: ext4_iget_extra_inode:5180: inode 15 [ 726.497951][T18841] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4280: couldn't read orphan inode 15 (err -117) [ 726.498113][T18841] loop5: lost filesystem error report for type 5 error -117 [ 726.510396][T18841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.516319][T18841] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 726.516408][T18841] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 726.516432][T18841] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4280: Corrupt directory, running e2fsck is recommended [ 726.525623][T18841] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 726.525655][T18841] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 726.525675][T18841] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4280: Corrupt directory, running e2fsck is recommended [ 726.549942][T18841] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 726.549975][T18841] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 726.550034][T18841] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4280: Corrupt directory, running e2fsck is recommended [ 726.571948][T18841] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 726.858990][ T40] team0 (unregistering): Port device team_slave_1 removed [ 726.867729][ T40] team0 (unregistering): Port device team_slave_0 removed [ 726.889685][T18058] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /12/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 726.920301][T18058] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /12/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 726.990156][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 727.019200][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4284'. [ 727.343298][T18855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.354863][ T28] audit: type=1400 audit(1786571171.266:17785): avc: denied { write } for pid=18874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.462092][ T28] audit: type=1400 audit(1786571171.386:17786): avc: denied { write } for pid=18892 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.550798][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 727.607694][T18780] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.612877][ T40] IPVS: stop unused estimator thread 0... [ 727.615823][T18780] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.637299][T18780] bridge_slave_0: entered allmulticast mode [ 727.645881][T18780] bridge_slave_0: entered promiscuous mode [ 727.656606][T18780] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.666140][T18780] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.673502][T18904] netlink: 'syz.7.4293': attribute type 2 has an invalid length. [ 727.674019][T18780] bridge_slave_1: entered allmulticast mode [ 727.693390][T18780] bridge_slave_1: entered promiscuous mode [ 727.768921][T18904] loop7: detected capacity change from 0 to 1024 [ 727.770887][T18780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.781413][T18780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.804344][T18904] ext4: Unknown parameter 'smackfsroot' [ 727.817984][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.878785][T18780] team0: Port device team_slave_0 added [ 727.896706][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.905653][T18780] team0: Port device team_slave_1 added [ 727.982056][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.986854][T18780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.986872][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.986933][T18780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.989057][T18780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.989074][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.989111][T18780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.106185][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.208056][ T28] audit: type=1400 audit(1786571172.136:17787): avc: denied { write } for pid=18912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.268120][ T28] audit: type=1400 audit(1786571172.196:17788): avc: denied { write } for pid=18932 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.287475][T18780] hsr_slave_0: entered promiscuous mode [ 728.328360][T18780] hsr_slave_1: entered promiscuous mode [ 728.331392][T18780] debugfs: 'hsr0' already exists in 'hsr' [ 728.346227][T18780] Cannot create hsr debugfs directory [ 728.360138][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 728.522840][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4299'. [ 728.561560][T18940] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4299'. [ 728.634937][ T40] bridge_slave_1: left allmulticast mode [ 728.651632][ T40] bridge_slave_1: left promiscuous mode [ 728.671061][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.684619][ T40] bridge_slave_0: left allmulticast mode [ 728.690346][ T40] bridge_slave_0: left promiscuous mode [ 728.696633][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.818416][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.832535][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.848664][ T40] bond0 (unregistering): Released all slaves [ 729.105451][ T40] hsr_slave_0: left promiscuous mode [ 729.116339][ T40] hsr_slave_1: left promiscuous mode [ 729.123140][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.130802][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.142001][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.149642][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.455978][ T40] veth1_macvtap: left promiscuous mode [ 729.468239][ T40] veth0_macvtap: left promiscuous mode [ 729.477715][ T40] veth1_vlan: left promiscuous mode [ 729.483341][ T40] veth0_vlan: left promiscuous mode [ 729.572189][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4304'. [ 729.858484][ T40] team0 (unregistering): Port device team_slave_1 removed [ 729.879114][ T40] team0 (unregistering): Port device team_slave_0 removed [ 730.392023][ T28] audit: type=1400 audit(1786571174.316:17789): avc: denied { write } for pid=18973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.428373][T18992] netlink: 'syz.7.4307': attribute type 2 has an invalid length. [ 730.532394][ T28] audit: type=1400 audit(1786571174.456:17790): avc: denied { write } for pid=18993 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.569868][T18994] loop7: detected capacity change from 0 to 1024 [ 730.585824][T18994] ext4: Unknown parameter 'smackfsroot' [ 730.647116][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 730.668396][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4310'. [ 730.686325][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4310'. [ 730.693552][T18902] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.718941][T18902] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.743361][T18902] bridge_slave_0: entered allmulticast mode [ 730.760236][T18902] bridge_slave_0: entered promiscuous mode [ 730.770814][T18902] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.778443][T18902] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.786972][T18902] bridge_slave_1: entered allmulticast mode [ 730.805980][T18902] bridge_slave_1: entered promiscuous mode [ 730.840004][T18902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.855912][T18902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.886817][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 730.926974][T18902] team0: Port device team_slave_0 added [ 730.938423][T18902] team0: Port device team_slave_1 added [ 730.947336][T19013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 730.998823][T18902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.008278][T18902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.041370][T18902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.063477][T18902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.071318][T18902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.097931][ T28] audit: type=1400 audit(1786571175.026:17791): avc: denied { write } for pid=19011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.100893][T18902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.192763][ T28] audit: type=1400 audit(1786571175.116:17792): avc: denied { write } for pid=19032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.250015][ T3019] 8021q: adding VLAN 0 to HW filter on device eth25 [ 731.277108][T18902] hsr_slave_0: entered promiscuous mode [ 731.289445][T18902] hsr_slave_1: entered promiscuous mode [ 731.296714][T18902] debugfs: 'hsr0' already exists in 'hsr' [ 731.302580][T18902] Cannot create hsr debugfs directory [ 731.444190][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4320'. [ 731.471778][T19044] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4320'. [ 731.617562][ T28] audit: type=1400 audit(1786571175.536:17793): avc: denied { write } for pid=19040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.707209][ T28] audit: type=1400 audit(1786571175.606:17794): avc: denied { write } for pid=19065 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.775546][ T3019] 8021q: adding VLAN 0 to HW filter on device eth26 [ 731.809186][T19073] netlink: 'syz.0.4327': attribute type 2 has an invalid length. [ 731.937305][T18780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 731.962298][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.971584][T18780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 731.987080][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.029283][T18780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 732.042482][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4332'. [ 732.047431][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.060226][T18780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 732.063677][ T28] audit: type=1400 audit(1786571175.986:17795): avc: denied { write } for pid=19076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.067784][T19089] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4332'. [ 732.115969][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.197237][ T28] audit: type=1400 audit(1786571176.126:17796): avc: denied { write } for pid=19094 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.285309][ T3019] 8021q: adding VLAN 0 to HW filter on device eth27 [ 732.442424][T18902] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 732.457368][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.479196][T18902] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 732.498032][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.506910][T18902] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 732.519522][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.528656][T18902] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 732.541108][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.560243][T18780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.658969][T18780] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.733846][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.741081][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.741403][ T28] audit: type=1400 audit(1786571176.656:17797): avc: denied { write } for pid=19119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.779183][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.786409][ T4133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.865902][ T28] audit: type=1400 audit(1786571176.796:17798): avc: denied { write } for pid=19147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.996099][ T3019] 8021q: adding VLAN 0 to HW filter on device eth28 [ 733.033461][T18902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.177006][T18902] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.216587][ T4135] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.223774][ T4135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.247684][T19167] netlink: 'syz.0.4349': attribute type 2 has an invalid length. [ 733.345477][ T4135] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.352683][ T4135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.708493][T18780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.119928][T18902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.201437][T18780] veth0_vlan: entered promiscuous mode [ 734.243216][T18780] veth1_vlan: entered promiscuous mode [ 734.330102][T18780] veth0_macvtap: entered promiscuous mode [ 734.429928][T18780] veth1_macvtap: entered promiscuous mode [ 734.508584][T18780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.579105][T18780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.633731][T18902] veth0_vlan: entered promiscuous mode [ 734.665368][ T4135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.676798][ T4135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.695207][T19253] __nla_validate_parse: 3 callbacks suppressed [ 734.695227][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4356'. [ 734.711142][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.734172][T18902] veth1_vlan: entered promiscuous mode [ 734.787988][T18902] veth0_macvtap: entered promiscuous mode [ 734.799050][T18902] veth1_macvtap: entered promiscuous mode [ 734.828356][T19250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 734.852114][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.888457][T18902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.910961][T18902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.102898][T19257] loop9: detected capacity change from 0 to 128 [ 735.656214][T19262] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4358'. [ 735.906926][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 735.906945][ T28] audit: type=1400 audit(1786571179.836:17804): avc: denied { write } for pid=19273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.954287][ T4135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.134820][ T3435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.216836][ T3435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.329299][ T3435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.599291][T19296] loop2: detected capacity change from 0 to 512 [ 736.610207][T19296] EXT4-fs: Ignoring removed bh option [ 736.630425][T19296] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 736.630462][T19296] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 736.630495][T19296] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4369: Corrupt directory, running e2fsck is recommended [ 736.650958][T19296] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 736.651098][T19296] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.4369: corrupted in-inode xattr: e_name out of bounds [ 736.651133][T19296] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 736.661827][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 736.661858][ C0] EXT4-fs (loop2): initial error at time 1786571180: ext4_iget_extra_inode:5180: inode 15 [ 736.661897][ C0] EXT4-fs (loop2): last error at time 1786571180: ext4_iget_extra_inode:5180: inode 15 [ 736.662869][T19296] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4369: couldn't read orphan inode 15 (err -117) [ 736.662906][T19296] loop2: lost filesystem error report for type 5 error -117 [ 736.665421][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4371'. [ 736.805939][T19296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.823702][T19296] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 736.823733][T19296] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 736.823837][T19296] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4369: Corrupt directory, running e2fsck is recommended [ 736.881736][T19296] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 736.881776][T19296] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 736.881797][T19296] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4369: Corrupt directory, running e2fsck is recommended [ 736.951959][T19296] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 736.951994][T19296] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 736.952024][T19296] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4369: Corrupt directory, running e2fsck is recommended [ 737.014256][T19296] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 737.100504][T19322] netlink: 'syz.0.4374': attribute type 2 has an invalid length. [ 737.120288][ T28] audit: type=1400 audit(1786571181.036:17805): avc: denied { write } for pid=19290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.165709][T18780] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /4/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 737.232307][ T28] audit: type=1400 audit(1786571181.156:17806): avc: denied { write } for pid=19326 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.236884][T18780] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /4/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 737.349112][T18780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.694869][T19346] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4382'. [ 737.901138][T19355] loop2: detected capacity change from 0 to 128 [ 738.141909][T19356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4384'. [ 738.558994][T19359] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.566474][T19359] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.722226][ T28] audit: type=1400 audit(1786571182.646:17807): avc: denied { write } for pid=19331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.790019][T19359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.845819][T19359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.251802][ T28] audit: type=1400 audit(1786571183.166:17808): avc: denied { write } for pid=19373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.275372][ T355] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.316495][ T355] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.386474][ T40] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.411590][ T40] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.432787][T19380] loop7: detected capacity change from 0 to 512 [ 739.460795][T19380] EXT4-fs: Ignoring removed bh option [ 739.490491][T19380] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 739.519031][T19380] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 739.546975][T19380] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4393: Corrupt directory, running e2fsck is recommended [ 739.564065][T19376] loop2: detected capacity change from 0 to 128 [ 739.578759][T19376] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 739.593932][T19376] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.606314][ T28] audit: type=1400 audit(1786571183.536:17809): avc: denied { write } for pid=19375 comm="syz.2.4391" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 739.642662][T19380] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 739.685347][T19380] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4393: corrupted in-inode xattr: e_name out of bounds [ 739.727248][T19376] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 739.885520][T19380] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 739.888263][T19380] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4393: couldn't read orphan inode 15 (err -117) [ 739.897566][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 739.897590][ C1] EXT4-fs (loop7): initial error at time 1786571183: ext4_iget_extra_inode:5180: inode 15 [ 739.897631][ C1] EXT4-fs (loop7): last error at time 1786571183: ext4_iget_extra_inode:5180: inode 15 [ 739.952570][T19380] loop7: lost filesystem error report for type 5 error -117 [ 739.959567][T19380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.960694][T18780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 740.043991][T19380] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 740.116838][T19380] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 740.171644][T19380] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4393: Corrupt directory, running e2fsck is recommended [ 740.208730][T19414] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 740.208836][T19414] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 740.208858][T19414] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4393: Corrupt directory, running e2fsck is recommended [ 740.220008][ T28] audit: type=1400 audit(1786571184.126:17810): avc: denied { write } for pid=19386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.240007][T19416] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 740.347064][T19416] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 740.347095][T19416] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4393: Corrupt directory, running e2fsck is recommended [ 740.524857][T19422] loop9: detected capacity change from 0 to 128 [ 740.889736][ T28] audit: type=1400 audit(1786571184.816:17811): avc: denied { write } for pid=19420 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.963167][T19380] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 741.087258][T16649] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /120/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 741.093530][T16649] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /120/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 741.436691][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.437130][T19434] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.848712][ T28] audit: type=1400 audit(1786571185.776:17812): avc: denied { write } for pid=19432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.954972][ T28] audit: type=1400 audit(1786571185.856:17813): avc: denied { write } for pid=19453 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.127422][T19450] loop9: detected capacity change from 0 to 128 [ 742.149317][T19450] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 742.163025][T19450] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.175661][ T28] audit: type=1400 audit(1786571186.106:17814): avc: denied { write } for pid=19449 comm="syz.9.4411" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.201348][T19434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.339226][ T28] audit: type=1400 audit(1786571186.206:17815): avc: denied { write } for pid=19456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.363096][ T28] audit: type=1400 audit(1786571186.236:17816): avc: denied { write } for pid=19471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.408037][ T9725] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 742.453013][T19434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.460243][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 742.472868][ T11] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 742.619246][T19482] fido_id[19482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 742.754244][ T28] audit: type=1400 audit(1786571186.676:17817): avc: denied { write } for pid=19473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.807528][T19494] loop3: detected capacity change from 0 to 512 [ 742.837112][T19494] EXT4-fs: Ignoring removed bh option [ 742.884273][T19494] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 742.920394][T19494] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 742.933664][ T3397] syz0: Port: 1 Link DOWN [ 743.103742][T19505] loop9: detected capacity change from 0 to 128 [ 743.301541][T19305] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 743.329873][ T355] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.348365][T19494] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4419: Corrupt directory, running e2fsck is recommended [ 743.533747][ T355] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.543683][ T355] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.552598][ T355] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.675337][T19428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.689463][T19502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4421'. [ 743.726548][ T28] audit: type=1400 audit(1786571187.646:17818): avc: denied { write } for pid=19503 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.987650][T19494] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 744.026182][T19494] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.4419: corrupted in-inode xattr: e_name out of bounds [ 744.040389][T19494] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 744.044628][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 744.060384][ C0] EXT4-fs (loop3): initial error at time 1786571187: ext4_iget_extra_inode:5180: inode 15 [ 744.070384][ C0] EXT4-fs (loop3): last error at time 1786571187: ext4_iget_extra_inode:5180: inode 15 [ 744.470431][T19514] loop2: detected capacity change from 0 to 128 [ 744.769231][T19494] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4419: couldn't read orphan inode 15 (err -117) [ 744.857262][T19494] loop3: lost filesystem error report for type 5 error -117 [ 744.869118][T19494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.988152][T19494] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 745.000817][T19494] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 745.014840][T19494] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4419: Corrupt directory, running e2fsck is recommended [ 745.121321][T19518] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 745.197570][T19518] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 745.230648][T19522] netlink: 'syz.9.4424': attribute type 2 has an invalid length. [ 745.252926][T19518] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4419: Corrupt directory, running e2fsck is recommended [ 745.438692][T19494] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 745.584410][T19494] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 745.584437][T19494] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4419: Corrupt directory, running e2fsck is recommended [ 745.599588][T19305] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 745.623729][ T40] bridge_slave_1: left allmulticast mode [ 745.623829][ T40] bridge_slave_1: left promiscuous mode [ 745.623981][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.645503][ T40] bridge_slave_0: left allmulticast mode [ 745.645594][ T40] bridge_slave_0: left promiscuous mode [ 745.645736][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.656688][T19523] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 745.789498][T18902] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /16/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 745.793338][T18902] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /16/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 745.809145][ T28] audit: type=1400 audit(1786571189.736:17819): avc: denied { write } for pid=19520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.843358][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.918960][T18902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.937461][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.948951][ T40] bond0 (unregistering): Released all slaves [ 745.989796][ T28] audit: type=1400 audit(1786571189.916:17820): avc: denied { write } for pid=19552 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.060892][ T40] hsr_slave_0: left promiscuous mode [ 746.073872][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.093935][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.208822][ T40] team0 (unregistering): Port device team_slave_1 removed [ 746.282674][T19571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4435'. [ 746.560295][T19597] netlink: 'syz.9.4440': attribute type 2 has an invalid length. [ 746.668597][ T40] IPVS: stop unused estimator thread 0... [ 746.693504][ T28] audit: type=1400 audit(1786571190.606:17821): avc: denied { write } for pid=19580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.819743][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.870361][ T7763] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 746.886933][ T7763] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 746.909931][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.024053][T19622] fido_id[19622]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 747.039694][T19627] ================================================================== [ 747.047820][T19627] BUG: KCSAN: data-race in __set_task_comm / strlen [ 747.054432][T19627] [ 747.056769][T19627] write to 0xffff888103e44cd8 of 3 bytes by task 19632 on cpu 1: [ 747.064657][T19627] __set_task_comm+0x78/0x180 [ 747.069346][T19627] begin_new_exec+0xeb4/0x1210 [ 747.074277][T19627] load_elf_binary+0x64a/0x1a30 [ 747.079120][T19627] bprm_execve+0x45c/0x9b0 [ 747.083540][T19627] do_execveat_common+0x7a4/0x8a0 [ 747.088545][T19627] __x64_sys_execve+0x5f/0x80 [ 747.093221][T19627] x64_sys_call+0x2752/0x3020 [ 747.097898][T19627] do_syscall_64+0x136/0x3c0 [ 747.102562][T19627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.108534][T19627] [ 747.111023][T19627] read to 0xffff888103e44cd8 of 1 bytes by task 19627 on cpu 0: [ 747.118638][T19627] strlen+0x19/0x40 [ 747.122469][T19627] trace_event_raw_event_sched_stat_runtime+0x59/0x140 [ 747.129301][T19627] update_se+0x153/0x460 [ 747.133539][T19627] update_curr+0x29/0x210 [ 747.137873][T19627] enqueue_task_fair+0x144/0xab0 [ 747.142971][T19627] ttwu_do_activate+0xa7/0x230 [ 747.147730][T19627] try_to_wake_up+0x44a/0x6c0 [ 747.152398][T19627] wake_up_q+0x48/0x80 [ 747.156598][T19627] futex_wake+0x376/0x400 [ 747.160926][T19627] do_futex+0x3f8/0x460 [ 747.165077][T19627] __se_sys_futex+0x2f6/0x370 [ 747.169849][T19627] __x64_sys_futex+0x78/0x90 [ 747.174437][T19627] x64_sys_call+0x24ab/0x3020 [ 747.179197][T19627] do_syscall_64+0x136/0x3c0 [ 747.183807][T19627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.189688][T19627] [ 747.192000][T19627] value changed: 0x64 -> 0x73 [ 747.196651][T19627] [ 747.198954][T19627] Reported by Kernel Concurrency Sanitizer on: [ 747.205258][T19627] CPU: 0 UID: 0 PID: 19627 Comm: syz.0.4448 Not tainted syzkaller #0 PREEMPT(lazy) [ 747.214710][T19627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.224839][T19627] ================================================================== [ 747.283514][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.299069][T19633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 747.397089][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 747.397108][ T28] audit: type=1400 audit(1786571191.306:17823): avc: denied { write } for pid=19621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.490558][ T28] audit: type=1400 audit(1786571191.416:17824): avc: denied { write } for pid=19646 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.523968][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.580284][T19536] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.587662][T19536] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.598134][T19536] bridge_slave_0: entered allmulticast mode [ 747.605869][T19536] bridge_slave_0: entered promiscuous mode [ 747.625693][T19536] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.633342][T19536] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.641690][T19536] bridge_slave_1: entered allmulticast mode [ 747.650384][T19536] bridge_slave_1: entered promiscuous mode [ 747.748554][T19536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.794495][ T28] audit: type=1400 audit(1786571191.716:17825): avc: denied { write } for pid=19651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.796614][T19536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.856338][ T40] bridge_slave_1: left allmulticast mode [ 747.862212][ T40] bridge_slave_1: left promiscuous mode [ 747.868549][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.871516][ T28] audit: type=1400 audit(1786571191.796:17826): avc: denied { write } for pid=19663 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.903165][ T40] bridge_slave_0: left allmulticast mode [ 747.909954][ T40] bridge_slave_0: left promiscuous mode [ 747.916871][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.016684][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.030949][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.044310][ T40] bond0 (unregistering): Released all slaves [ 748.089933][T19536] team0: Port device team_slave_0 added [ 748.102117][T19536] team0: Port device team_slave_1 added [ 748.162405][ T40] hsr_slave_0: left promiscuous mode [ 748.170453][ T40] hsr_slave_1: left promiscuous mode [ 748.177289][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.185542][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.194166][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.205437][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.238925][ T40] veth1_macvtap: left promiscuous mode [ 748.244742][ T40] veth0_macvtap: left promiscuous mode [ 748.247992][ T28] audit: type=1400 audit(1786571192.176:17827): avc: denied { write } for pid=19667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.250404][ T40] veth1_vlan: left promiscuous mode [ 748.281726][ T40] veth0_vlan: left promiscuous mode [ 748.316246][ T28] audit: type=1400 audit(1786571192.236:17828): avc: denied { write } for pid=19679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.485131][ T40] team0 (unregistering): Port device team_slave_1 removed [ 748.492566][ T28] audit: type=1400 audit(1786571192.416:17829): avc: denied { write } for pid=19681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.527911][ T40] team0 (unregistering): Port device team_slave_0 removed [ 748.558285][ T28] audit: type=1400 audit(1786571192.486:17830): avc: denied { write } for pid=19692 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.649273][T19536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.657926][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.686251][T19536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.724751][ T28] audit: type=1400 audit(1786571192.646:17831): avc: denied { write } for pid=19694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.736565][T19536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.755499][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.783413][T19536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.797214][ T28] audit: type=1400 audit(1786571192.726:17832): avc: denied { write } for pid=19705 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.875951][T19536] hsr_slave_0: entered promiscuous mode [ 748.883752][T19536] hsr_slave_1: entered promiscuous mode [ 748.890514][T19536] debugfs: 'hsr0' already exists in 'hsr' [ 748.896453][T19536] Cannot create hsr debugfs directory [ 748.926975][T19600] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.944934][T19600] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.953937][T19600] bridge_slave_0: entered allmulticast mode [ 748.970872][T19600] bridge_slave_0: entered promiscuous mode [ 748.990794][T19600] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.998896][T19600] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.006870][T19600] bridge_slave_1: entered allmulticast mode [ 749.014270][T19600] bridge_slave_1: entered promiscuous mode [ 749.060488][T19600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.076957][T19600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.154292][T19600] team0: Port device team_slave_0 added [ 749.173872][T19600] team0: Port device team_slave_1 added [ 749.238427][T19600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.246007][T19600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.273044][T19600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.296907][T19600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.305144][T19600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.332176][T19600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.417222][T19600] hsr_slave_0: entered promiscuous mode [ 749.426794][T19600] hsr_slave_1: entered promiscuous mode [ 749.433821][T19600] debugfs: 'hsr0' already exists in 'hsr' [ 749.442939][T19600] Cannot create hsr debugfs directory [ 749.649887][T19536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.663207][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.687152][T19536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.699635][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.709379][T19536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.723541][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.733248][T19536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 749.745328][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.884000][T19536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.921976][T19536] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.958722][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.965956][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.008127][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.015282][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.026114][T19600] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 750.038095][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.055779][T19600] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 750.067697][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.081142][T19600] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 750.093123][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.112567][T19600] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 750.126348][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.273950][T19600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.303893][T19600] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.324321][ T4135] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.331555][ T4135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.353430][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.360628][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.619057][T19536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.833202][T19600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.074565][T19536] veth0_vlan: entered promiscuous mode [ 751.090963][T19536] veth1_vlan: entered promiscuous mode [ 751.138271][T19536] veth0_macvtap: entered promiscuous mode [ 751.153973][T19536] veth1_macvtap: entered promiscuous mode [ 751.178963][T19536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.198258][T19536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.264766][ T3435] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.274372][ T3435] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.319181][T19600] veth0_vlan: entered promiscuous mode [ 751.343531][T19600] veth1_vlan: entered promiscuous mode [ 751.356121][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.375670][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.442850][T19600] veth0_macvtap: entered promiscuous mode [ 751.461191][T19600] veth1_macvtap: entered promiscuous mode [ 751.483617][T19600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.507163][T19600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.555188][ T4133] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.567270][ T4133] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.595988][ T4135] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.607234][ T4135] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.419360][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 752.419379][ T28] audit: type=1400 audit(1786571196.346:17859): avc: denied { write } for pid=19939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.462477][ T28] audit: type=1400 audit(1786571196.386:17860): avc: denied { write } for pid=19950 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.608901][ T28] audit: type=1400 audit(1786571196.536:17861): avc: denied { write } for pid=19952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.645084][ T28] audit: type=1400 audit(1786571196.566:17862): avc: denied { write } for pid=19963 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.789463][ T28] audit: type=1400 audit(1786571196.716:17863): avc: denied { write } for pid=19965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.827214][ T28] audit: type=1400 audit(1786571196.756:17864): avc: denied { write } for pid=19976 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.951311][ T28] audit: type=1400 audit(1786571196.876:17865): avc: denied { write } for pid=19978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.996733][ T28] audit: type=1400 audit(1786571196.926:17866): avc: denied { write } for pid=19989 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.139303][ T28] audit: type=1400 audit(1786571197.066:17867): avc: denied { write } for pid=19991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.191112][ T28] audit: type=1400 audit(1786571197.116:17868): avc: denied { write } for pid=20002 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.218603][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 756.390674][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 756.566041][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 756.745465][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16