last executing test programs: 10m55.969229357s ago: executing program 32 (id=550): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000140)={0x6, 'dvmrp1\x00', {0x2}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000540)={0x0, 'bond_slave_0\x00', {0x2}, 0x8009}) 10m41.942793939s ago: executing program 33 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10m41.89981931s ago: executing program 34 (id=619): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r6, r6, 0x0, 0xe3aa6ea) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 10m29.103067996s ago: executing program 35 (id=666): unshare(0x2000400) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2120) 10m29.055910657s ago: executing program 36 (id=667): r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8331, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0xffff, 0x0, 0x6, 0x8, 0x697b, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000007c0)={r4, 0x7d, "b3da3218acc662a1fb2b6dd4e7feef4b68a53ec24323d2dea941c697a79b5f2fc10d575254786d123b43e0f1f87484a2eceaa992bf01a61e0b01f3156befee9656a30bf933009760ae3c55c57f261d741521f3a308344357c300bf29efef67e35470e3cd565bbbbe542f4aa36eb042572d5183b7e284377803ef0ad830"}, &(0x7f0000000480)=0x85) sendmsg$inet_sctp(r1, &(0x7f0000000600)={&(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="5713112ca04c2a056715bce85e3f8861b392809e9bcdec92ac944b794eebc76b155fd160393ef188584f3f602db3ff7e903db41fbeb0f1b6124b5345410a8c8ef418e9f320", 0x45}, {&(0x7f00000001c0)="fa5345bb0769ad6bae8b", 0xa}, {&(0x7f0000000200)="71cf92ddf7dc3d15d9dec27ffac71ee3f5bac5562f3a07f52f4fb4860f45623b740c0ddda05211ee3891948bbbdf0db3560f77ff4b9c3872d7843858558578bca03524c436cc9657aa1c11c2d719d89c77a60cb9a375ab287fa0db3f587340e085975b64ad57b92b40f9ee19a145f91a879d070819", 0x75}, {&(0x7f0000000280)="ee7cb18f892bb7ec2785ba0347eecb6f39f4cd146303c8ed7cc6ce016ea74f952f4fb39dd593f592d17aa9a2906d384039d646", 0x33}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000008400000042000000000000000700000018000000000000008400000007000000e00000010000000020000002000000008400000008000000200100000000000200000000000000011800000000000000840000000000000007005003ff03000020000000000000008400000002000000060008000000800000ffffff", @ANYRES32=r4, @ANYBLOB="180000000000000084000000060000000300000000000000300000000000000084000000010000000500311a0080000008000000ffffffff03000000010100000d000000", @ANYRES32=r5, @ANYBLOB="20000000000000008400000008000000fc02000000000000000000000000000030000000000000008400000001000000020040000c0200000100000009000000010000004d01000004000000", @ANYRES32=r6], 0x120, 0x400c000}, 0x4000005) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 10m25.63136177s ago: executing program 6 (id=705): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006febcee83c8aef7a2c378883e261b2f991bdbb577d982ca56dcf29d1684d936b3001099dd5617a3f632b771d6ff78e0186c4f1386b615ba27da6d836c38a033faabfec3c5dd361619056b77f5d8673625033c7bff3ce352c6df92d2a87094231cda00ec10fdc"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nicvf0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="ededefdeb5c3c51e23134dd1f0d29ac92cd759857d943731b68698ba06b41f262c79c60c056410ab32567b9b02cd0cf13cd7e06450f37023051bcad2379a343e3b836d73070d19e45abecf1b4d1905d51099fe15c8dc10766bd93ff145e419d260fb701e318bbf8f140bfadb7b7a2939f4b1f8839dd1a68ebcb55545f4e9f515cc1dafe5cd3b120fe4d98dee282cf5510b742d", 0x93, 0x90, &(0x7f0000000540)={0x11, 0x8, r5, 0x1, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x0, 0x0, 0x6, 0x5}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 10m25.428085026s ago: executing program 6 (id=706): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$getregs(0xc, r3, 0x9, &(0x7f0000000180)=""/63) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8625, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) 10m23.082597112s ago: executing program 6 (id=710): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0xb8, 0x0, 0x75d, "1dc8abfbee109b5e0d8179a45a21f2df921640f4324e8becaf03d07f13298f12b894d96631958d9b5891257e4b8e0d2406b764b78f3cedfe5c605f358cb090e3d44fcf4c65e32cf3b99a60c4a03ee8c2c32ef0e29bcc794661b9aa6884512a348f3b69151519b56344ae8fca820c8976ed5cd930335706e5533ec90654b8d5b29b64b9430a8f7606e828fbbc969ba58fed9da311df2c4f923052483c326e602c3dc8dab018ef90ce045fa5d64d4416b813fa0f7b983d279b"}) 10m23.076519591s ago: executing program 6 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$getregs(0xc, r4, 0x9, &(0x7f0000000180)=""/63) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8625, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r7}, 0x38) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000906010800000000005951ca46000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 10m20.336349021s ago: executing program 6 (id=714): socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000300)=ANY=[@ANYBLOB]) 10m19.578140378s ago: executing program 6 (id=719): r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8331, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0xffff, 0x0, 0x6, 0x8, 0x697b, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000007c0)={r3, 0x7d, "b3da3218acc662a1fb2b6dd4e7feef4b68a53ec24323d2dea941c697a79b5f2fc10d575254786d123b43e0f1f87484a2eceaa992bf01a61e0b01f3156befee9656a30bf933009760ae3c55c57f261d741521f3a308344357c300bf29efef67e35470e3cd565bbbbe542f4aa36eb042572d5183b7e284377803ef0ad830"}, &(0x7f0000000480)=0x85) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 10m14.121842574s ago: executing program 37 (id=752): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="090300000000000000001d0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) open$dir(0x0, 0x80, 0xa) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0xee01, r4) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 10m4.526179629s ago: executing program 38 (id=719): r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8331, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0xffff, 0x0, 0x6, 0x8, 0x697b, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000007c0)={r3, 0x7d, "b3da3218acc662a1fb2b6dd4e7feef4b68a53ec24323d2dea941c697a79b5f2fc10d575254786d123b43e0f1f87484a2eceaa992bf01a61e0b01f3156befee9656a30bf933009760ae3c55c57f261d741521f3a308344357c300bf29efef67e35470e3cd565bbbbe542f4aa36eb042572d5183b7e284377803ef0ad830"}, &(0x7f0000000480)=0x85) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 8m12.439342967s ago: executing program 9 (id=1339): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) 8m11.313328035s ago: executing program 9 (id=1346): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1], 0x78}, 0x1, 0x0, 0x0, 0x44091}, 0x24000800) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setuid(0xee00) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64=r2], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xe, '\x00', r3, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) 8m11.24456332s ago: executing program 9 (id=1347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000ff8400000000000000000000000000000000000085dc9d", 0x29}], 0x1}, 0x4005) 8m10.96595016s ago: executing program 9 (id=1351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x11, 0x10, 0x0, &(0x7f0000000540)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r4) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000240)={@initdev, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040845}, 0x20004004) socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 8m10.537067618s ago: executing program 9 (id=1356): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, 0x0, 0x0) 8m10.391565516s ago: executing program 9 (id=1357): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) syz_open_dev$evdev(0x0, 0x2, 0x2002) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x103202) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 8m10.367085871s ago: executing program 39 (id=1357): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) syz_open_dev$evdev(0x0, 0x2, 0x2002) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x103202) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 8m6.991856325s ago: executing program 0 (id=1380): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 8m6.778817229s ago: executing program 0 (id=1382): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000000000000300"], 0xfc}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) add_key(&(0x7f0000000d80)='ceph\x00', 0x0, &(0x7f0000000540)="3f22fd102a23a649a6308196e340057f6129064ccb100044c66c7123eb6d17770550eda04ccae9537c90bf335c5bcf19d30d7f0476c133f03681319a06fa33d3a8e4ff0c2b24fe6296304d171bce3e42dc9488fa45610461d1a93b9cb54c6cbd25f59221c40ca3c4526f7a5c113d04b24132bfca3be569ef2c00733781ee6e14c38673c7c19ff64a01db9c71a2da42bc04dc859a1e49080ef85eb958a1229dc8666be3c3796d33ae275a8dbbcd", 0xad, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 8m6.45734159s ago: executing program 0 (id=1384): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x40000000, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xf340, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0xbc, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x7d, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x97, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x7, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x0, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000002100)=0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, r2, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m5.233796586s ago: executing program 0 (id=1393): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x404c000) r1 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0], 0x3ffffcdf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r7 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x7}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0x1, 0x0, &(0x7f0000000400)) 8m3.357350293s ago: executing program 0 (id=1411): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x6, 0x400000, 0x0, 'queue1\x00', 0x37fffe}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 8m2.239428092s ago: executing program 0 (id=1417): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0002}]}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000f3000000b3000000030000000b000000090000130e0000000d000000c0000000050000000c00000006000000090000000b0000000000001081000000de3a36042a9e1085090000000b00000000800000010000000b0000000300000028000000060000000400000017bb000006000000080000000800000003000000ec000000f40400000200000003000013010000000400000000010000080000000d00000001000000090000000300000004000000ee0f00000f0000000500000f030000000500000000001200ff010000040000000400000007000000040000000b000000000100000100000006000000040000000300000007000000010000006d08e800002e006db4c3fc8f2e0ed0fad5f6ad084c42a01750acbb33d04f2fcbb25101ee44ef901acb946638b4ac9dbc6ff7241e2759f6baa037b4ef879f4a69e67c480c2c8612aea1ec2a4ab5093c"], &(0x7f0000000b00)=""/71, 0x10f, 0x47, 0x1, 0x746, 0x10000, @value=r1}, 0x28) unshare(0x22020400) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f00000005c0)={0x8021}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x2, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x80, 0x7, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="00032cbd7000fbdbdf25020000004c00018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f746f5f62726964676500540001801400020076657468305f766c616e000000000000080003000100000008000300020000000800030003000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f3100000000"], 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m2.232959511s ago: executing program 40 (id=1417): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0002}]}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)=""/71, 0x10f, 0x47, 0x1, 0x746, 0x10000, @value=r1}, 0x28) unshare(0x22020400) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f00000005c0)={0x8021}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x2, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x80, 0x7, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="00032cbd7000fbdbdf25020000004c00018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f746f5f62726964676500540001801400020076657468305f766c616e000000000000080003000100000008000300020000000800030003000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f3100000000"], 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m28.192994568s ago: executing program 1 (id=1626): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r0, 0x100, 0x1070bd0c, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x4008010) 7m28.081837554s ago: executing program 1 (id=1627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e400000d000a0000000500010006000000050004000000000011000300686173683a69702c706f727400000000050005000a0000000902007b797a9fd4b7cccbcfec3100000000"], 0x4c}}, 0x2) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) 7m28.081057974s ago: executing program 1 (id=1628): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nicvf0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="ededefdeb5c3c51e23134dd1f0d29ac92cd759857d943731b68698ba06b41f262c79c60c056410ab32567b9b02cd0cf13cd7e06450f37023051bcad2379a343e3b836d73070d19e45abecf1b4d1905d51099fe15c8dc10766bd93ff145e419d260fb701e318bbf8f140bfadb7b7a2939f4b1f8839dd1a68ebcb55545f4e9f515cc1dafe5cd3b120fe4d98dee282cf5510b742d", 0x93, 0x90, &(0x7f0000000540)={0x11, 0x8, r6, 0x1, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x0, 0x0, 0x6, 0x5}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 7m27.592083279s ago: executing program 1 (id=1632): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x2, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x615e68b5c47e638f, &(0x7f0000000000)=0xf, 0x0, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xe201, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0xa, 0x9, 0x6, 0x1, 0xb, 0xfffffffe, 0x4, 0x3a, 0x1}) r2 = syz_io_uring_setup(0x3840, &(0x7f00000000c0)={0x0, 0xc3db, 0x1, 0x1, 0x2a}, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10010, r2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fsetxattr$security_capability(r3, &(0x7f0000000200), &(0x7f0000000240)=@v1={0x1000000, [{0x100, 0x80}]}, 0xc, 0x1) r4 = semget$private(0x0, 0x4, 0x312) semop(r4, &(0x7f0000000280)=[{0x4, 0x9}, {0x3, 0x1}, {0x2, 0xcb, 0x1800}, {0x3, 0x2, 0x1800}, {0x0, 0x13, 0x800}, {0x0, 0x5, 0x1c00}, {0x1, 0x5, 0x1000}, {0x4, 0x3, 0x1000}], 0x8) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000002c0)=""/157) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) semtimedop(r4, &(0x7f00000003c0)=[{0x1, 0x8, 0x1c00}, {0x4, 0x4, 0x1800}, {0x3, 0x8}, {0x0, 0x101, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0x1, 0x1800}, {0x0, 0xe, 0x800}, {0x2, 0x9, 0x1800}, {0x4, 0x3, 0x1800}], 0x9, &(0x7f0000000440)={r5, r6+60000000}) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) close_range(r2, r7, 0x0) socket$igmp6(0xa, 0x3, 0x2) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000006c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r9, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80110800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000001}, 0x4100) futex(&(0x7f0000000900), 0x80, 0x2, &(0x7f0000000940)={0x0, 0x3938700}, &(0x7f0000000980)=0x1, 0x0) 7m27.259864537s ago: executing program 1 (id=1635): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x40844) 7m27.057036053s ago: executing program 1 (id=1637): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004"], 0x50) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = syz_open_dev$usbfs(0x0, 0x1ff, 0x103202) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x2a, 0x0, &(0x7f0000000100)) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000040)=0xfa) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000004c0)={0x77359400}, 0x10) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5886, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 7m12.001360965s ago: executing program 41 (id=1637): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004"], 0x50) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = syz_open_dev$usbfs(0x0, 0x1ff, 0x103202) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x2a, 0x0, &(0x7f0000000100)) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000040)=0xfa) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000004c0)={0x77359400}, 0x10) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5886, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m40.367418032s ago: executing program 7 (id=3823): unshare(0x400) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="201200000c14010026bd7000fedbdf2508003d00050000000800030002000000"], 0x20}, 0x1, 0x0, 0x0, 0xc020}, 0x4000040) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) dup(r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x13, 0xfffffffffffffffe, &(0x7f0000000080)) 1m39.607542358s ago: executing program 7 (id=3825): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 1m39.465231647s ago: executing program 7 (id=3827): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x50, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045503, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00I\x00\x00\x00\f'], 0x50) 1m38.350930647s ago: executing program 7 (id=3832): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x0, 0x2, {0x1, 0x1, 0x3}, {0x2, 0xf0}, 0x2, 0xff}, {0x3, 0x1, {0x1, 0xf0, 0x3}, {0x0, 0xf0, 0x3}, 0xfe, 0x2}, {0x0, 0x0, {0x1, 0x1}, {0x2, 0xf0, 0x1}, 0x3, 0x2}, {0x1, 0x0, {0x1, 0xf0, 0x4}, {0x2, 0xf0}, 0xff, 0x1}, {0x3, 0x2, {0x1, 0x0, 0x3}, {0x2, 0xf0}, 0xff, 0xfe}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x2, 0xff}, {0x0, 0x80000, {0x2, 0xff, 0x2}, {0x1, 0xf0, 0x3}, 0xfd, 0xff}], 0xe0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x3}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000010}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$uac1(0x2, 0x9d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7f, 0x90, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x15}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x1, "ddf10d9e5e88"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x10, 0x5, "ab95e6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x45, 0xfc, 0xd, 0x9, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xbb, 0x7, 0x8, {0x7, 0x25, 0x1, 0x4, 0x7f, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6e, 0x1, 0x9, 0xf, "e98a48"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x9, 0x0, {0x7, 0x25, 0x1, 0x8, 0x4, 0xd}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x5, 0x18, 0x7, 0xff, 0x4}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "922e0eb78c939ed5dd1602fd1938e894"}]}, 0x7, [{0x3f, &(0x7f00000006c0)=@string={0x3f, 0x3, "59ba031a04f58a63806f5a4d3c050a3967b4aa96e6807cf3cdcfc77a87f20ff481c98b83773713f502bd8147c6bc1cc20bec1a07d6eb2a538e211f285b"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x459}}, {0xbe, &(0x7f0000000900)=@string={0xbe, 0x3, "827f0c00800e1de3a435a67fdf89d187046ff64c9cffe809abb91b9c25ddaf2a5579cdba9c2d637d861eec1a4758f28b9e37ce9099346eee9490046744531db0af7d60b6d6230cabdde3deeec19c074b11d218b5f23e3fe50b74c4191f5d37e5e2a96e97ea9c888fd4e740085483d4b40f6813f8eb8c9375bfc9a0bc3446581b514379ee63abd97aff0882d6e125b0ed0816a8f6f9c6136909a09f660a5ed773762504e677c5f122b4953e550e16eee5f8dc9a11936c9d9736b4de8a"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x58}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x0, 0xc, 0x3f, {0x3f, 0x6, "93adb5189a6a0c7fce5e67d5616da5c7ba7ec64886bb53e2aff4e72e7b556ab3226c01c6caac851142c38a746dcd4a34f34681ef0909739f18c96af498"}}, &(0x7f0000000b00)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "dd8421c61a888ad0833f92b676848de4c7c69466885d9ae5b9305553f7feb396f8752e17af0a804fffbd6b351db70419d68c42abc85e3635a3f3dcb88af9b5d245b047de966f3b5ee178fce134c2b11f97cf11bb801680710a38f848e2c7125bf84f4a3152a0d6e4bce770483aa3ca4d10fce5be2a078333470f7c8cdf9ae2db5fb04c42d0ddf6b7f280c57f5be15abf82aadc2b75df12449563a6021ba5448c66fe584d1c8623fec468dd2a76"}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000c00)={0x20, 0xe, 0x65, "182f2b38b80374e276541883d3c7add4b2e0bcf8a9c1bb6da52d09e15de56064ef99553a232dfe1b6cdf7656fcb4ea7291fbc5c4005e720cff31602fa8284307673b9d11af7b3891e38ad2fe2290017de99a3798321544f9472cb2348f60bcad9220d796ad"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000000d00)={0x20, 0x81, 0x3, "f9f63d"}, &(0x7f0000000d40)={0x20, 0x82, 0x1, "f5"}, &(0x7f0000000d80)={0x20, 0x83, 0x2, "a5bc"}, &(0x7f0000000dc0)={0x20, 0x84, 0x1, 'B'}, &(0x7f0000000e00)={0x20, 0x85, 0x3, "514019"}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newlink={0x140, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x120, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7}, {0x8, 0x18}, {0x8, 0x1d}, {0x8, 0x9, 0x0, 0x0, 0x3}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd9}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x17}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2f}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xeb}]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3ffe}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x54}]}}]}]}, 0x140}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000008c0)={0x0, 0x1, 0x0, &(0x7f0000000840), 0x0}, 0x20) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) semget$private(0x0, 0x4000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) signalfd4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x9, 0x8}, {0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 1m36.878581651s ago: executing program 7 (id=3835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000480)={{0x0, 0x1, 0x4, 0x1, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1m36.571773105s ago: executing program 7 (id=3836): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) 1m36.564867173s ago: executing program 42 (id=3836): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) 7.06894244s ago: executing program 5 (id=4478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 6.724760866s ago: executing program 5 (id=4480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74", 0xae}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, 0x0, 0x0) 6.658992852s ago: executing program 5 (id=4481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x96}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) munmap(&(0x7f0000bdd000/0x2000)=nil, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r6 = socket(0x80000000000000a, 0x2, 0x0) mbind(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000240)=0x7, 0x1, 0x4) syz_io_uring_setup(0x394f, &(0x7f0000000400)={0x0, 0x383f, 0x40c0, 0xfffffffe, 0x3d}, &(0x7f0000000280), &(0x7f0000000480)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000dc0)=""/217, 0x38000, 0x800, 0x3, 0x2}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f00000004c0)={0x0, 0x9, [0x81, 0xe, 0x55, 0x3, 0x8001, 0x1]}) 5.30067045s ago: executing program 5 (id=4488): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x50, r6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r7, 0x80045503, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00I\x00\x00\x00\f'], 0x50) 4.131720518s ago: executing program 3 (id=4498): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006febcee83c8aef7a2c378883e261b2f991bdbb577d982ca56dcf29d1684d936b3001099dd5617a3f632b771d6ff78e0186c4f1386b615ba27da6d836c38a033faabfec3c5dd361619056b77f5d8673625033c7bff3ce352c6df92d2a87094231cda00ec10fdc"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nicvf0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="ededefdeb5c3c51e23134dd1f0d29ac92cd759857d943731b68698ba06b41f262c79c60c056410ab32567b9b02cd0cf13cd7e06450f37023051bcad2379a343e3b836d73070d19e45abecf1b4d1905d51099fe15c8dc10766bd93ff145e419d260fb701e318bbf8f140bfadb7b7a2939f4b1f8839dd1a68ebcb55545f4e9f515cc1dafe5cd3b120fe4d98dee282cf5510b742d", 0x93, 0x90, &(0x7f0000000540)={0x11, 0x8, r6, 0x1, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.687794673s ago: executing program 4 (id=4501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 3.495851321s ago: executing program 4 (id=4504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0x49}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.3969529s ago: executing program 8 (id=4506): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xb6, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6c, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x2}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 3.378036276s ago: executing program 5 (id=4507): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@private=0xa010102, @multicast2, r3}, 0xc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x8915, &(0x7f0000000000)="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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000a00)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="120100060277791363eb1a12b0b4884d0b0000402505a1a440000102030309025c00020102f9030904000001020d00000024060001002400000000240f0100000000000000881357c2000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0x0) r6 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x6, 0x2de, &(0x7f0000000b40)="$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") r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 3.198495588s ago: executing program 4 (id=4508): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x96}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) munmap(&(0x7f0000bdd000/0x2000)=nil, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r6 = socket(0x80000000000000a, 0x2, 0x0) mbind(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000240)=0x7, 0x1, 0x4) syz_io_uring_setup(0x394f, &(0x7f0000000400)={0x0, 0x383f, 0x40c0, 0xfffffffe, 0x3d}, &(0x7f0000000280), &(0x7f0000000480)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000dc0)=""/217, 0x38000, 0x800, 0x3, 0x2}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f00000004c0)={0x0, 0x9, [0x81, 0xe, 0x55, 0x3, 0x8001, 0x1]}) 3.16691091s ago: executing program 8 (id=4509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 3.053636997s ago: executing program 3 (id=4510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130fe5d000000224051249c21d360d00000000000738806063724aaa9502b88fea1e80397", 0x3b}, {&(0x7f0000000300)="864d7f54c4fd623f8f7da15688b9", 0xe}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='f', 0x1}], 0x1}}], 0x2, 0xa0d0) 2.920968938s ago: executing program 3 (id=4512): unshare(0x400) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="201200000c14010026bd7000fedbdf2508003d00050000000800030002000000"], 0x20}, 0x1, 0x0, 0x0, 0xc020}, 0x4000040) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) dup(r0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x13, 0xfffffffffffffffe, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) shmat(0x0, &(0x7f0000cb4000/0x3000)=nil, 0x4000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.886755491s ago: executing program 8 (id=4513): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130fe5d000000224051249c21d360d00000000000738806063724aaa9502b88fe", 0x37}, {&(0x7f0000000300)="864d7f54c4fd623f8f7da15688b9", 0xe}], 0x2}}], 0x1, 0x20d0) 2.797895162s ago: executing program 8 (id=4514): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xb2, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x67, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 2.694226069s ago: executing program 8 (id=4516): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x50, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045503, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00I\x00\x00\x00\f'], 0x50) 1.976013125s ago: executing program 2 (id=4523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 1.927283124s ago: executing program 4 (id=4524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.898553688s ago: executing program 3 (id=4525): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xff, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x17, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x4850) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4048081) 1.777810812s ago: executing program 2 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000900000000000300000000000200", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c61766500000000580005800500190003000000050005000000000006001f00d5000000050007000000000005000a000000000005002100010000000400180005000600010000000600020001000000080022", @ANYRES32=r1, @ANYBLOB="0500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040) 1.637519572s ago: executing program 2 (id=4527): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xb2, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x67, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 1.596790743s ago: executing program 2 (id=4528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000eb96fa2528f69ba69dc5d1600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x6, 0x0, 0x0, 0x8, 0x40008, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000580)="8ca5", 0x2}], 0x2) unshare(0x22020400) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x10000008ebc, 0x100000000000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0x14) 1.064405438s ago: executing program 8 (id=4529): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@private=0xa010102, @multicast2, r3}, 0xc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x8915, &(0x7f0000000000)="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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000a00)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) unshare(0x64000600) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="120100060277791363eb1a12b0b4884d0b0000402505a1a440000102030309025c00020102f9030904000001020d00000024060001002400000000240f0100000000000000881357c2000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0x0) gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2de, &(0x7f0000000b40)="$eJzs3T9rJGUcB/DfbGb/nBabwkoEB7SwOi73CjbIHYipPLY4LTR4dyDZRbhAxD+4XiV2Npa+AkHwhWhhZ+kLEOw84WBkZmd2d3bHvQRuI14+nyL5ZZ7nO88z/5Jp8uwHr0xP7mXx4NEXv8dgkERn1I94nMR+dKL2VTSMvg0A4P/scZ7Hn/lcS/Nv32zJDnY4LwBgd57y97+Sll/vFj1+ury5AQC7cefuu28fHh3deifLBnF7+vXZOImI4vu8/fBBfBSTuB83YhhPIsoXhW6UbwtFeTvP81maFfbj9ensbFwkp+//XO3/8I+IMn8Qw9gvNy3eNsr8W0e3DrK5lfysmMcL1fijIn8zhvHSItzI32zJx7gXb7y2Mv/rMYxfP4yPYxL3ykks818eZNmb+Xd/ff5eMb0in8zOxv2y31K+Vw8+u+RrBAAAAAAAAAAAAAAAAAAAAADA8+d6tXZOP8r1e4pN1fo7e0+KH7qR1fab6/PM80m9o+X6QNHJ83yWx/f1+jo3sizLq47LfBovp9XCggAAAAAAAAAAAAAAAAAAAHDFnX762cnxZHL/4TMp6tUA0oj4+07EBeKdiFhsGa00vRrb4/1qzOPJpFOVzT7p6pbYq/skEVsnVhzERtMvz+hENYtrG3Ouih9+bE0VR3SaRlvT4OmDdtvHumDxSXd+Hlv71HfXyXGyeQ6Lor+Y/KC4cLF+4XrRPno31rb0/m2G9a14vsPp1cW11edieOHT0nuxLGZb+kTS/lw0n8uVo2h07pVntXXP3apYia/dG+3XYq2IwTy++bsisVoHAAAAAAAAAAAAAAAAAADs1PK/f1saH22NdvL+zqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJdq+fn/5ynSZvgcqV48PP2vjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr458AAAD//0crTV4=") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 833.640239ms ago: executing program 4 (id=4530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0x49}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 715.783904ms ago: executing program 4 (id=4531): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x5) 589.873697ms ago: executing program 2 (id=4532): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a000000"], 0x190) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x1, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x4, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) 529.984084ms ago: executing program 2 (id=4533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x96}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) munmap(&(0x7f0000bdd000/0x2000)=nil, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r6 = socket(0x80000000000000a, 0x2, 0x0) mbind(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000240)=0x7, 0x1, 0x4) syz_io_uring_setup(0x394f, &(0x7f0000000400)={0x0, 0x383f, 0x40c0, 0xfffffffe, 0x3d}, &(0x7f0000000280), &(0x7f0000000480)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000dc0)=""/217, 0x38000, 0x800, 0x3, 0x2}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f00000004c0)={0x0, 0x9, [0x81, 0xe, 0x55, 0x3, 0x8001, 0x1]}) 398.405405ms ago: executing program 3 (id=4534): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x5, 0x80000, 0x7fff) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) 170.989787ms ago: executing program 3 (id=4535): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x96}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) munmap(&(0x7f0000bdd000/0x2000)=nil, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r6 = socket(0x80000000000000a, 0x2, 0x0) mbind(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000240)=0x7, 0x1, 0x4) syz_io_uring_setup(0x394f, &(0x7f0000000400)={0x0, 0x383f, 0x40c0, 0xfffffffe, 0x3d}, &(0x7f0000000280), &(0x7f0000000480)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000dc0)=""/217, 0x38000, 0x800, 0x3, 0x2}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f00000004c0)={0x0, 0x9, [0x81, 0xe, 0x55, 0x3, 0x8001, 0x1]}) 0s ago: executing program 5 (id=4536): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") chdir(0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x50, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045503, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00I\x00\x00\x00\f'], 0x50) kernel console output (not intermixed with test programs): _slave_1 [ 701.789356][T17232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.922440][T17232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.116512][T17312] syzkaller0: entered promiscuous mode [ 702.122225][T17312] syzkaller0: entered allmulticast mode [ 702.145594][T17232] hsr_slave_0: entered promiscuous mode [ 702.151740][T17232] hsr_slave_1: entered promiscuous mode [ 702.158847][T17232] debugfs: 'hsr0' already exists in 'hsr' [ 702.164711][T17232] Cannot create hsr debugfs directory [ 702.197645][T17170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.449610][T17328] syzkaller0: entered promiscuous mode [ 702.455820][T17328] syzkaller0: entered allmulticast mode [ 702.567734][T17232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.664924][T17232] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.696864][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.704066][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.747300][T17170] veth0_vlan: entered promiscuous mode [ 702.778996][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.786208][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.853526][T17170] veth1_vlan: entered promiscuous mode [ 702.875627][T17351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3861'. [ 702.953429][T17170] veth0_macvtap: entered promiscuous mode [ 702.986014][T17170] veth1_macvtap: entered promiscuous mode [ 703.022856][T17170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.052389][T17170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.162703][T17361] syzkaller0: entered promiscuous mode [ 703.168341][T17361] syzkaller0: entered allmulticast mode [ 703.237995][T17232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.588474][T17394] syzkaller0: entered promiscuous mode [ 703.594039][T17394] syzkaller0: entered allmulticast mode [ 703.792977][T17232] veth0_vlan: entered promiscuous mode [ 703.804825][T17232] veth1_vlan: entered promiscuous mode [ 703.875818][T17232] veth0_macvtap: entered promiscuous mode [ 703.903113][T17232] veth1_macvtap: entered promiscuous mode [ 703.984345][T17232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.000036][T17232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.211991][ T28] kauditd_printk_skb: 622 callbacks suppressed [ 704.212010][ T28] audit: type=1400 audit(1772308261.403:48842): avc: denied { read write } for pid=17232 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.262147][ T28] audit: type=1400 audit(1772308261.403:48843): avc: denied { open } for pid=17232 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.306160][ T28] audit: type=1400 audit(1772308261.403:48844): avc: denied { ioctl } for pid=17232 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.338029][ T28] audit: type=1400 audit(1772308261.478:48845): avc: denied { create } for pid=17423 comm="syz.8.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 704.361301][ T28] audit: type=1400 audit(1772308261.487:48846): avc: denied { ioctl } for pid=17423 comm="syz.8.3837" path="socket:[49867]" dev="sockfs" ino=49867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 704.501473][ T28] audit: type=1400 audit(1772308261.487:48847): avc: denied { bind } for pid=17423 comm="syz.8.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 704.537046][ T28] audit: type=1400 audit(1772308261.515:48848): avc: denied { read write } for pid=17421 comm="syz.3.3878" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 704.562279][ T28] audit: type=1400 audit(1772308261.515:48849): avc: denied { open } for pid=17421 comm="syz.3.3878" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 704.587523][ T28] audit: type=1400 audit(1772308261.515:48850): avc: denied { create } for pid=17423 comm="syz.8.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 704.608463][ T28] audit: type=1400 audit(1772308261.515:48851): avc: denied { ioctl } for pid=17423 comm="syz.8.3837" path="socket:[49868]" dev="sockfs" ino=49868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 704.837590][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3882'. [ 704.853155][T17445] bridge: RTM_NEWNEIGH with invalid ether address [ 704.912563][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3882'. [ 704.926004][T17445] bridge: RTM_NEWNEIGH with invalid ether address [ 705.156329][T17458] loop4: detected capacity change from 0 to 512 [ 705.494487][T17468] bridge_slave_0: left allmulticast mode [ 705.501156][T17468] bridge_slave_0: left promiscuous mode [ 705.509641][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.550068][T17458] EXT4-fs (loop4): orphan cleanup on readonly fs [ 705.578887][T17458] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 705.723769][T17458] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 705.787971][T17458] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3888: bad orphan inode 14 [ 705.819821][T17458] loop4: lost filesystem error report for type 5 error -117 [ 705.823047][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 705.837395][ C0] EXT4-fs (loop4): last error at time 1772308262: ext4_orphan_get:1417 [ 705.850628][T17458] ext4_test_bit(bit=13, block=18) = 1 [ 705.861663][T17458] is_bad_inode(inode)=0 [ 705.878483][T17458] NEXT_ORPHAN(inode)=0 [ 705.886762][T17458] max_ino=32 [ 705.902191][T17458] i_nlink=1 [ 705.915420][T17458] EXT4-fs (loop4): 1 truncate cleaned up [ 705.944209][T17458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 706.353783][T17468] bridge_slave_1: left allmulticast mode [ 706.362747][T17468] bridge_slave_1: left promiscuous mode [ 706.371819][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.535517][T17468] bond0: (slave bond_slave_0): Releasing backup interface [ 706.638176][T17468] bond0: (slave bond_slave_1): Releasing backup interface [ 706.748958][T17468] team0: Port device team_slave_0 removed [ 706.831221][T17468] team0: Port device team_slave_1 removed [ 706.855712][T17468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.869021][T17468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.923175][T17468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.931392][T17468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.991184][T17468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 707.138835][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.300494][T17483] syzkaller0: entered promiscuous mode [ 707.306390][T17483] syzkaller0: entered allmulticast mode [ 707.736374][T17493] bridge_slave_0: left allmulticast mode [ 707.742809][T17493] bridge_slave_0: left promiscuous mode [ 707.751162][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.469923][T17493] bridge_slave_1: left allmulticast mode [ 708.476576][T17493] bridge_slave_1: left promiscuous mode [ 708.485547][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.640232][T17493] bond0: (slave bond_slave_0): Releasing backup interface [ 708.696169][T17493] bond0: (slave bond_slave_1): Releasing backup interface [ 708.782972][T17493] team0: Port device team_slave_0 removed [ 708.855843][T17493] team0: Port device team_slave_1 removed [ 708.880912][T17493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.889109][T17493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.940538][T17493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.949032][T17493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.000225][T17493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 709.146226][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 709.500350][T17515] loop4: detected capacity change from 0 to 128 [ 709.585827][T17521] syzkaller0: entered promiscuous mode [ 709.591516][T17521] syzkaller0: entered allmulticast mode [ 709.607485][ T28] kauditd_printk_skb: 314 callbacks suppressed [ 709.607504][ T28] audit: type=1400 audit(1772308266.379:49165): avc: denied { execmem } for pid=17517 comm="syz.3.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 709.645544][T17518] loop2: detected capacity change from 0 to 512 [ 709.661649][ T28] audit: type=1400 audit(1772308266.379:49166): avc: denied { write } for pid=17516 comm="syz.2.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 709.681811][ T28] audit: type=1400 audit(1772308266.417:49167): avc: denied { create } for pid=17520 comm="syz.5.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 709.709399][ T28] audit: type=1400 audit(1772308266.445:49168): avc: denied { write } for pid=17520 comm="syz.5.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 709.749123][ T28] audit: type=1400 audit(1772308266.473:49169): avc: denied { read write } for pid=17516 comm="syz.2.3902" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 709.900879][T17518] EXT4-fs (loop2): orphan cleanup on readonly fs [ 709.940042][ T28] audit: type=1400 audit(1772308266.473:49170): avc: denied { read write open } for pid=17516 comm="syz.2.3902" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 709.945045][T17518] Quota error (device loop2): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 709.980495][ T28] audit: type=1400 audit(1772308266.482:49171): avc: denied { ioctl } for pid=17516 comm="syz.2.3902" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 710.072110][T17518] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 710.105984][ T28] audit: type=1400 audit(1772308266.501:49172): avc: denied { mounton } for pid=17516 comm="syz.2.3902" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 710.129815][ T28] audit: type=1400 audit(1772308266.557:49173): avc: denied { mount } for pid=17514 comm="syz.4.3901" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 710.137535][T17518] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 710.216889][T17518] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3902: bad orphan inode 14 [ 710.234042][T17527] syzkaller0: entered promiscuous mode [ 710.240331][T17527] syzkaller0: entered allmulticast mode [ 710.246164][T17518] loop2: lost filesystem error report for type 5 error -117 [ 710.246718][T17518] ext4_test_bit(bit=13, block=18) = 1 [ 710.254212][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 710.254229][ C1] EXT4-fs (loop2): last error at time 1772308267: ext4_orphan_get:1417 [ 710.292237][T17518] is_bad_inode(inode)=0 [ 710.296753][T17518] NEXT_ORPHAN(inode)=0 [ 710.300941][T17518] max_ino=32 [ 710.306981][T17518] i_nlink=1 [ 710.310568][T17518] EXT4-fs (loop2): 1 truncate cleaned up [ 710.321657][T17518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 710.478149][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.890927][T17550] netlink: 'syz.5.3913': attribute type 2 has an invalid length. [ 712.770823][T17533] loop3: detected capacity change from 0 to 1024 [ 713.740091][T17533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 713.784732][T17533] System zones: 0-1, 3-36 [ 713.814722][T17533] EXT4-fs: error -4 creating inode table initialization thread [ 713.866310][T17533] EXT4-fs (loop3): mount failed [ 713.989420][T17571] syz_tun: entered promiscuous mode [ 714.198906][T17583] xfrm0 speed is unknown, defaulting to 1000 [ 714.287464][T17599] syzkaller0: entered promiscuous mode [ 714.337556][T17599] syzkaller0: entered allmulticast mode [ 714.382871][T17615] loop5: detected capacity change from 0 to 256 [ 714.410968][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'. [ 714.478224][T17623] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3927'. [ 714.492422][T17623] syzkaller1: entered promiscuous mode [ 714.499607][T17623] syzkaller1: entered allmulticast mode [ 714.590753][T17609] xfrm0 speed is unknown, defaulting to 1000 [ 714.687456][T17629] syzkaller0: entered promiscuous mode [ 714.706894][T17629] syzkaller0: entered allmulticast mode [ 714.955206][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3933'. [ 714.990002][ T28] kauditd_printk_skb: 426 callbacks suppressed [ 714.990020][ T28] audit: type=1400 audit(1772308271.477:49600): avc: denied { read write } for pid=17170 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.074684][ T28] audit: type=1400 audit(1772308271.487:49601): avc: denied { create } for pid=17643 comm="syz.4.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 715.108221][ T28] audit: type=1400 audit(1772308271.515:49602): avc: denied { create } for pid=17643 comm="syz.4.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 715.129189][ T28] audit: type=1400 audit(1772308271.515:49603): avc: denied { read write open } for pid=17170 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.220948][ T28] audit: type=1400 audit(1772308271.515:49604): avc: denied { ioctl } for pid=17170 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.267488][ T28] audit: type=1400 audit(1772308271.524:49605): avc: denied { write } for pid=17643 comm="syz.4.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 715.292293][ T28] audit: type=1400 audit(1772308271.533:49606): avc: denied { read write } for pid=17232 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.334509][ T28] audit: type=1400 audit(1772308271.533:49607): avc: denied { open } for pid=17232 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.371376][T17652] syzkaller0: entered promiscuous mode [ 715.379826][ T28] audit: type=1400 audit(1772308271.533:49608): avc: denied { ioctl } for pid=17232 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.406106][T17652] syzkaller0: entered allmulticast mode [ 715.436138][ T28] audit: type=1400 audit(1772308271.561:49609): avc: denied { create } for pid=17647 comm="syz.2.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 715.753855][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3941'. [ 715.822205][T17627] loop3: detected capacity change from 0 to 1024 [ 715.931473][T17677] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3942'. [ 715.987519][T17677] syzkaller1: entered promiscuous mode [ 716.015922][T17677] syzkaller1: entered allmulticast mode [ 716.098725][T17627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 716.107729][T17627] System zones: 0-1, 3-36 [ 716.148130][T17686] syzkaller0: entered promiscuous mode [ 716.154383][T17686] syzkaller0: entered allmulticast mode [ 716.181642][T17627] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3928: bad orphan inode 134217728 [ 716.194170][T17627] loop3: lost filesystem error report for type 5 error -117 [ 716.199866][T17627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.034042][ T9060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.046063][T17703] loop8: detected capacity change from 0 to 512 [ 717.114133][T17703] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 717.153450][T17615] syz.5.3921: attempt to access beyond end of device [ 717.153450][T17615] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 717.163370][T17703] EXT4-fs (loop8): 1 orphan inode deleted [ 717.174065][T17615] syz.5.3921: attempt to access beyond end of device [ 717.174065][T17615] loop5: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 717.225942][T17615] syz.5.3921: attempt to access beyond end of device [ 717.225942][T17615] loop5: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 717.247595][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'. [ 717.264763][T17703] EXT4-fs (loop8): 1 truncate cleaned up [ 717.277366][T17615] syz.5.3921: attempt to access beyond end of device [ 717.277366][T17615] loop5: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 717.298972][T17615] syz.5.3921: attempt to access beyond end of device [ 717.298972][T17615] loop5: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 717.302079][T17703] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.340714][T17615] syz.5.3921: attempt to access beyond end of device [ 717.340714][T17615] loop5: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 717.379587][T17615] syz.5.3921: attempt to access beyond end of device [ 717.379587][T17615] loop5: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 717.408613][T17615] syz.5.3921: attempt to access beyond end of device [ 717.408613][T17615] loop5: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 717.469063][T17615] syz.5.3921: attempt to access beyond end of device [ 717.469063][T17615] loop5: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 717.510401][T17615] syz.5.3921: attempt to access beyond end of device [ 717.510401][T17615] loop5: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 717.749721][T17708] loop4: detected capacity change from 0 to 512 [ 717.848678][T17708] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 717.905955][T17729] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3955'. [ 717.932144][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.973088][T17708] EXT4-fs (loop4): 1 orphan inode deleted [ 717.982095][T17708] EXT4-fs (loop4): 1 truncate cleaned up [ 718.023589][T17729] syzkaller1: entered promiscuous mode [ 718.059642][T17729] syzkaller1: entered allmulticast mode [ 718.086249][T17708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.791055][T17760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 720.250376][T17770] loop3: detected capacity change from 0 to 1024 [ 720.266195][T17770] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 720.290375][T17770] System zones: 0-1, 3-36 [ 720.310088][T17770] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3965: bad orphan inode 134217728 [ 720.343130][ T28] kauditd_printk_skb: 377 callbacks suppressed [ 720.343168][ T28] audit: type=1400 audit(1772308276.491:49987): avc: denied { module_request } for pid=17772 comm="syz.8.3966" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 720.389050][T17770] loop3: lost filesystem error report for type 5 error -117 [ 720.390130][T17770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.424795][ T28] audit: type=1400 audit(1772308276.519:49988): avc: denied { sys_module } for pid=17772 comm="syz.8.3966" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 720.446602][ T28] audit: type=1400 audit(1772308276.519:49989): avc: denied { module_request } for pid=17772 comm="syz.8.3966" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 720.506185][T17787] syzkaller0: entered promiscuous mode [ 720.514634][T17787] syzkaller0: entered allmulticast mode [ 720.531918][ T28] audit: type=1400 audit(1772308276.538:49990): avc: denied { write } for pid=17772 comm="syz.8.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 720.561927][ T28] audit: type=1400 audit(1772308276.547:49992): avc: denied { sys_module } for pid=17772 comm="syz.8.3966" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 720.583808][ T28] audit: type=1400 audit(1772308276.556:49993): avc: denied { module_request } for pid=17772 comm="syz.8.3966" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 720.607764][ T28] audit: type=1400 audit(1772308276.547:49991): avc: denied { mount } for pid=17768 comm="syz.3.3965" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 720.643735][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.716369][ T28] audit: type=1400 audit(1772308276.556:49994): avc: denied { read write } for pid=17768 comm="syz.3.3965" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 720.762676][T17792] syzkaller0: entered promiscuous mode [ 720.768459][T17792] syzkaller0: entered allmulticast mode [ 720.810070][ T28] audit: type=1400 audit(1772308276.556:49995): avc: denied { open } for pid=17768 comm="syz.3.3965" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 720.838293][ T28] audit: type=1400 audit(1772308276.631:49996): avc: denied { sys_module } for pid=17772 comm="syz.8.3966" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 721.079383][ T9060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.133526][T17810] syzkaller0: entered promiscuous mode [ 721.158695][T17810] syzkaller0: entered allmulticast mode [ 721.231941][T17817] loop4: detected capacity change from 0 to 128 [ 721.320886][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3976'. [ 721.330156][T17820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3976'. [ 721.510707][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3978'. [ 721.713128][T17823] loop3: detected capacity change from 0 to 128 [ 722.000353][T17834] syzkaller0: entered promiscuous mode [ 722.007162][T17834] syzkaller0: entered allmulticast mode [ 722.525108][T17844] syzkaller0: entered promiscuous mode [ 722.540509][T17844] syzkaller0: entered allmulticast mode [ 722.897295][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3993'. [ 722.906246][T17884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3993'. [ 724.021951][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b5bce00: rx timeout, send abort [ 724.061616][T17955] syzkaller0: entered promiscuous mode [ 724.069207][T17955] syzkaller0: entered allmulticast mode [ 724.202596][T17958] loop4: detected capacity change from 0 to 512 [ 724.237566][T17958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 724.304227][T17958] EXT4-fs (loop4): 1 orphan inode deleted [ 724.314109][T17958] EXT4-fs (loop4): 1 truncate cleaned up [ 724.329603][T17958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.398330][T17968] xfrm0 speed is unknown, defaulting to 1000 [ 724.497942][T17969] loop5: detected capacity change from 0 to 256 [ 724.556432][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b6a6a00: rx timeout, send abort [ 724.565239][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b5bce00: abort rx timeout. Force session deactivation [ 724.688569][T17960] xfrm0 speed is unknown, defaulting to 1000 [ 724.865677][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.099329][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b6a6a00: abort rx timeout. Force session deactivation [ 725.128609][T17984] syzkaller0: entered promiscuous mode [ 725.152967][T17984] syzkaller0: entered allmulticast mode [ 725.423811][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4020'. [ 725.445978][T17997] syzkaller0: entered promiscuous mode [ 725.479230][T17997] syzkaller0: entered allmulticast mode [ 725.620559][T18007] syzkaller0: entered promiscuous mode [ 725.626978][T18007] syzkaller0: entered allmulticast mode [ 725.669347][T18000] loop3: detected capacity change from 0 to 512 [ 725.741569][ T28] kauditd_printk_skb: 636 callbacks suppressed [ 725.741598][ T28] audit: type=1400 audit(1772308281.505:50633): avc: denied { open } for pid=18003 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 725.940340][ T28] audit: type=1400 audit(1772308281.505:50634): avc: denied { perfmon } for pid=18003 comm="syz.4.4021" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.087884][T18000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 726.120819][ T28] audit: type=1400 audit(1772308281.514:50635): avc: denied { kernel } for pid=18003 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 726.141386][ T28] audit: type=1400 audit(1772308281.514:50636): avc: denied { perfmon } for pid=18003 comm="syz.4.4021" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.163905][ T28] audit: type=1400 audit(1772308281.514:50637): avc: denied { create } for pid=18003 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.197286][ T28] audit: type=1400 audit(1772308281.523:50638): avc: denied { write } for pid=18003 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.276026][ T28] audit: type=1400 audit(1772308281.523:50639): avc: denied { create } for pid=18003 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.287859][T18000] EXT4-fs (loop3): 1 orphan inode deleted [ 726.306734][T18000] EXT4-fs (loop3): 1 truncate cleaned up [ 726.317958][ T28] audit: type=1400 audit(1772308281.523:50640): avc: denied { prog_load } for pid=18003 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.337978][ T28] audit: type=1400 audit(1772308281.523:50641): avc: denied { bpf } for pid=18003 comm="syz.4.4021" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.358869][ T28] audit: type=1400 audit(1772308281.523:50642): avc: denied { prog_load } for pid=18003 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.386473][T18000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.541839][T18022] syzkaller0: entered promiscuous mode [ 726.568794][T18022] syzkaller0: entered allmulticast mode [ 726.768543][T18034] syzkaller0: entered promiscuous mode [ 726.782358][T18034] syzkaller0: entered allmulticast mode [ 726.827404][T18040] syzkaller1: entered promiscuous mode [ 726.832963][T18040] syzkaller1: entered allmulticast mode [ 726.904220][ T9060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.418536][T17969] bio_check_eod: 320 callbacks suppressed [ 727.418592][T17969] syz.5.4009: attempt to access beyond end of device [ 727.418592][T17969] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 727.445599][T17969] syz.5.4009: attempt to access beyond end of device [ 727.445599][T17969] loop5: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 727.493188][T17969] syz.5.4009: attempt to access beyond end of device [ 727.493188][T17969] loop5: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 727.543057][T17969] syz.5.4009: attempt to access beyond end of device [ 727.543057][T17969] loop5: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 727.590706][T17969] syz.5.4009: attempt to access beyond end of device [ 727.590706][T17969] loop5: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 727.664080][T17969] syz.5.4009: attempt to access beyond end of device [ 727.664080][T17969] loop5: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 727.699627][T17969] syz.5.4009: attempt to access beyond end of device [ 727.699627][T17969] loop5: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 727.748620][T17969] syz.5.4009: attempt to access beyond end of device [ 727.748620][T17969] loop5: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 727.784169][T17969] syz.5.4009: attempt to access beyond end of device [ 727.784169][T17969] loop5: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 727.799794][T18038] loop2: detected capacity change from 0 to 1024 [ 727.818962][T17969] syz.5.4009: attempt to access beyond end of device [ 727.818962][T17969] loop5: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 727.932739][T18064] loop4: detected capacity change from 0 to 512 [ 727.954634][T18038] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 727.966033][T18038] System zones: 0-1, 3-36 [ 727.991428][T18038] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4032: bad orphan inode 134217728 [ 728.002742][T18038] loop2: lost filesystem error report for type 5 error -117 [ 728.012949][T18038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.027918][T18064] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 728.122952][T18064] EXT4-fs (loop4): 1 orphan inode deleted [ 728.148270][T18064] EXT4-fs (loop4): 1 truncate cleaned up [ 728.154624][T18064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.336404][T18054] loop8: detected capacity change from 0 to 1024 [ 728.474398][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.595988][T18054] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 728.624416][T18054] System zones: 0-1, 3-36 [ 728.685541][T18054] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4036: bad orphan inode 134217728 [ 728.713578][T18054] loop8: lost filesystem error report for type 5 error -117 [ 728.716359][T18079] syzkaller0: entered promiscuous mode [ 728.723771][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 728.723819][ C0] EXT4-fs (loop8): initial error at time 1772308284: ext4_orphan_get:1417 [ 728.723868][ C0] EXT4-fs (loop8): last error at time 1772308284: ext4_orphan_get:1417 [ 728.762072][T18054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.771035][T18079] syzkaller0: entered allmulticast mode [ 728.782808][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.018598][T18095] syzkaller0: entered promiscuous mode [ 729.060168][T18095] syzkaller0: entered allmulticast mode [ 729.165380][T18101] syzkaller0: entered promiscuous mode [ 729.181947][T18101] syzkaller0: entered allmulticast mode [ 729.202735][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.295302][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4054'. [ 729.304419][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4054'. [ 729.532150][T18111] loop4: detected capacity change from 0 to 128 [ 729.762114][T18131] loop5: detected capacity change from 0 to 1024 [ 729.784869][T18131] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 729.795139][T18131] System zones: 0-1, 3-36 [ 729.804846][T18131] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4061: bad orphan inode 134217728 [ 729.823874][T18131] loop5: lost filesystem error report for type 5 error -117 [ 729.824550][T18131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.524286][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 730.692729][T10191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.798273][T18123] loop8: detected capacity change from 0 to 512 [ 730.830953][T18123] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 730.858251][T18158] syzkaller1: entered promiscuous mode [ 730.884687][T18158] syzkaller1: entered allmulticast mode [ 730.945912][T18159] syzkaller0: entered promiscuous mode [ 730.951514][T18159] syzkaller0: entered allmulticast mode [ 730.958069][T18123] EXT4-fs (loop8): 1 orphan inode deleted [ 730.964440][T18123] EXT4-fs (loop8): 1 truncate cleaned up [ 730.978593][T18123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.257471][ T28] kauditd_printk_skb: 576 callbacks suppressed [ 731.257491][ T28] audit: type=1400 audit(1772308286.705:51219): avc: denied { create } for pid=18122 comm="syz.8.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 731.306797][ T28] audit: type=1400 audit(1772308286.724:51220): avc: denied { map_create } for pid=18122 comm="syz.8.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.384390][ T28] audit: type=1400 audit(1772308286.734:51221): avc: denied { read write } for pid=10191 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.414663][ T28] audit: type=1400 audit(1772308286.734:51222): avc: denied { open } for pid=10191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.439760][ T28] audit: type=1400 audit(1772308286.734:51223): avc: denied { ioctl } for pid=10191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.466272][ T28] audit: type=1400 audit(1772308286.771:51224): avc: denied { read write } for pid=8826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.527657][T18167] loop2: detected capacity change from 0 to 512 [ 731.546291][T18174] syzkaller0: entered promiscuous mode [ 731.558994][T18167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 731.568998][T18174] syzkaller0: entered allmulticast mode [ 731.580957][ T28] audit: type=1400 audit(1772308286.771:51225): avc: denied { read write open } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.625371][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.636866][ T28] audit: type=1400 audit(1772308286.771:51226): avc: denied { ioctl } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.666088][T18167] EXT4-fs (loop2): 1 orphan inode deleted [ 731.671942][T18167] EXT4-fs (loop2): 1 truncate cleaned up [ 731.683954][T18167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.727804][T18180] syzkaller0: entered promiscuous mode [ 731.739561][ T28] audit: type=1400 audit(1772308286.780:51227): avc: denied { map_create } for pid=18170 comm="syz.5.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.759354][ T28] audit: type=1400 audit(1772308286.780:51228): avc: denied { map_create } for pid=18170 comm="syz.5.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.769149][T18180] syzkaller0: entered allmulticast mode [ 731.915459][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 731.946313][T18185] syzkaller0: entered promiscuous mode [ 731.958348][T18185] syzkaller0: entered allmulticast mode [ 732.001752][T18191] syzkaller0: entered promiscuous mode [ 732.007440][T18191] syzkaller0: entered allmulticast mode [ 732.458061][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.575286][T18211] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 732.607750][T18211] syzkaller0: entered promiscuous mode [ 732.613514][T18211] syzkaller0: entered allmulticast mode [ 732.904440][T18217] syzkaller0: entered promiscuous mode [ 732.909951][T18217] syzkaller0: entered allmulticast mode [ 733.037215][T18219] syzkaller0: entered promiscuous mode [ 733.042855][T18219] syzkaller0: entered allmulticast mode [ 733.131753][T18223] syzkaller0: entered promiscuous mode [ 733.137776][T18223] syzkaller0: entered allmulticast mode [ 733.196396][T18225] syzkaller0: entered promiscuous mode [ 733.210710][T18225] syzkaller0: entered allmulticast mode [ 733.386441][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'. [ 733.411170][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'. [ 733.456693][T18230] loop5: detected capacity change from 0 to 1024 [ 733.502432][T18238] syzkaller0: entered promiscuous mode [ 733.508042][T18238] syzkaller0: entered allmulticast mode [ 733.559122][T18230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 733.583557][T18230] System zones: 0-1, 3-36 [ 733.623182][T18230] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4095: bad orphan inode 134217728 [ 733.636029][T18230] loop5: lost filesystem error report for type 5 error -117 [ 733.649980][T18230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.827658][T18243] loop8: detected capacity change from 0 to 512 [ 733.846212][T18251] syzkaller0: entered promiscuous mode [ 733.866331][T18243] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 733.889259][T18251] syzkaller0: entered allmulticast mode [ 733.907663][T18243] EXT4-fs (loop8): 1 orphan inode deleted [ 733.915008][T18243] EXT4-fs (loop8): 1 truncate cleaned up [ 733.928448][T18243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.136799][T18268] syzkaller0: entered promiscuous mode [ 734.157905][T18268] syzkaller0: entered allmulticast mode [ 734.185032][T10191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.340026][T18274] syzkaller0: entered promiscuous mode [ 734.362620][T18274] syzkaller0: entered allmulticast mode [ 734.490414][T18279] syzkaller0: entered promiscuous mode [ 734.508034][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.519952][T18279] syzkaller0: entered allmulticast mode [ 734.696783][T18285] syzkaller0: entered promiscuous mode [ 734.716864][T18285] syzkaller0: entered allmulticast mode [ 734.997422][T18304] sch_tbf: peakrate 7 is lower than or equals to rate 994622507201582345 ! [ 735.001027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c254a00: rx timeout, send abort [ 735.013708][T18304] syzkaller0: entered promiscuous mode [ 735.026319][T18304] syzkaller0: entered allmulticast mode [ 735.194747][T18307] loop3: detected capacity change from 0 to 1024 [ 735.263970][T18307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 735.305631][T18307] System zones: 0-1, 3-36 [ 735.390938][T18307] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4117: bad orphan inode 134217728 [ 735.403553][T18307] loop3: lost filesystem error report for type 5 error -117 [ 735.413155][T18307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.535563][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af87a00: rx timeout, send abort [ 735.548907][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c254a00: abort rx timeout. Force session deactivation [ 735.764920][T18318] syzkaller0: entered promiscuous mode [ 735.770856][T18318] syzkaller0: entered allmulticast mode [ 735.849804][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4122'. [ 735.859411][T18323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4122'. [ 736.078512][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af87a00: abort rx timeout. Force session deactivation [ 736.590350][ T9060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.611632][T18351] xfrm0 speed is unknown, defaulting to 1000 [ 736.612224][ T28] kauditd_printk_skb: 624 callbacks suppressed [ 736.612261][ T28] audit: type=1400 audit(1772308291.701:51853): avc: denied { read write open } for pid=18343 comm="syz.4.4125" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 736.717279][ T28] audit: type=1400 audit(1772308291.701:51854): avc: denied { ioctl } for pid=18343 comm="syz.4.4125" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 736.847405][ T28] audit: type=1400 audit(1772308291.747:51855): avc: denied { sys_module } for pid=18343 comm="syz.4.4125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 736.882248][ T28] audit: type=1400 audit(1772308291.747:51856): avc: denied { module_request } for pid=18343 comm="syz.4.4125" kmod="ip6_vti0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 736.929746][ T28] audit: type=1400 audit(1772308291.775:51857): avc: denied { read write } for pid=9060 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 736.971313][T18358] syzkaller0: entered promiscuous mode [ 736.977136][T18358] syzkaller0: entered allmulticast mode [ 737.313343][T18360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 737.396553][T18344] loop4: detected capacity change from 0 to 256 [ 737.575326][ T28] audit: type=1400 audit(1772308291.775:51858): avc: denied { open } for pid=9060 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.669781][ T28] audit: type=1400 audit(1772308291.775:51859): avc: denied { ioctl } for pid=9060 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.698897][ T28] audit: type=1400 audit(1772308291.785:51860): avc: denied { read write } for pid=17170 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.782026][ T28] audit: type=1400 audit(1772308291.785:51861): avc: denied { open } for pid=17170 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.825273][T18369] bio_check_eod: 235 callbacks suppressed [ 737.825468][T18369] syz.4.4125: attempt to access beyond end of device [ 737.825468][T18369] loop4: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 737.864809][ T28] audit: type=1400 audit(1772308291.785:51862): avc: denied { ioctl } for pid=17170 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.904221][T18369] syz.4.4125: attempt to access beyond end of device [ 737.904221][T18369] loop4: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 737.920829][T18369] syz.4.4125: attempt to access beyond end of device [ 737.920829][T18369] loop4: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 737.938587][T18369] syz.4.4125: attempt to access beyond end of device [ 737.938587][T18369] loop4: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 737.955752][T18369] syz.4.4125: attempt to access beyond end of device [ 737.955752][T18369] loop4: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 737.983642][T18366] syzkaller0: entered promiscuous mode [ 737.989661][T18366] syzkaller0: entered allmulticast mode [ 738.025400][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4129'. [ 738.111922][T18369] syz.4.4125: attempt to access beyond end of device [ 738.111922][T18369] loop4: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 738.219964][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4129'. [ 738.238895][T18352] xfrm0 speed is unknown, defaulting to 1000 [ 738.325462][T18369] syz.4.4125: attempt to access beyond end of device [ 738.325462][T18369] loop4: rw=2049, sector=736, nr_sectors = 24 limit=256 [ 738.995102][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4133'. [ 739.120565][T18388] syzkaller0: entered promiscuous mode [ 739.126329][T18388] syzkaller0: entered allmulticast mode [ 739.317108][T18399] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 739.362913][T18399] syzkaller0: entered promiscuous mode [ 739.368601][T18399] syzkaller0: entered allmulticast mode [ 739.407545][T18401] loop8: detected capacity change from 0 to 128 [ 739.547973][T18403] syzkaller0: entered promiscuous mode [ 739.553971][T18403] syzkaller0: entered allmulticast mode [ 739.675592][T18405] syzkaller0: entered promiscuous mode [ 739.681407][T18405] syzkaller0: entered allmulticast mode [ 739.824198][T18407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4144'. [ 739.939364][T18410] syzkaller0: entered promiscuous mode [ 739.945259][T18410] syzkaller0: entered allmulticast mode [ 740.015864][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4146'. [ 740.473159][ T4774] kworker/u8:8: attempt to access beyond end of device [ 740.473159][ T4774] loop4: rw=1, sector=256, nr_sectors = 8 limit=256 [ 740.531872][ T4774] kworker/u8:8: attempt to access beyond end of device [ 740.531872][ T4774] loop4: rw=1, sector=416, nr_sectors = 8 limit=256 [ 740.635033][T18442] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4156'. [ 740.862477][T18447] syzkaller1: entered promiscuous mode [ 740.869309][T18447] syzkaller1: entered allmulticast mode [ 740.888402][T18444] syzkaller0: entered promiscuous mode [ 740.894074][T18444] syzkaller0: entered allmulticast mode [ 741.350901][T18469] loop8: detected capacity change from 0 to 512 [ 741.423189][T18469] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 741.485710][T18469] EXT4-fs (loop8): 1 orphan inode deleted [ 741.496169][T18469] EXT4-fs (loop8): 1 truncate cleaned up [ 741.518167][T18469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.692722][T18474] loop4: detected capacity change from 0 to 512 [ 741.988010][T18474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 742.164846][T18474] EXT4-fs (loop4): 1 orphan inode deleted [ 742.175292][T18474] EXT4-fs (loop4): 1 truncate cleaned up [ 742.193160][T18474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.216727][ T28] kauditd_printk_skb: 420 callbacks suppressed [ 742.216746][ T28] audit: type=1400 audit(1772308296.948:52283): avc: denied { mount } for pid=18470 comm="syz.4.4164" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 742.262082][ T28] audit: type=1400 audit(1772308296.957:52284): avc: denied { read write } for pid=18470 comm="syz.4.4164" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 742.287363][ T28] audit: type=1400 audit(1772308296.957:52285): avc: denied { open } for pid=18470 comm="syz.4.4164" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 742.312504][ T28] audit: type=1400 audit(1772308296.995:52286): avc: denied { create } for pid=18460 comm="syz.8.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 742.333291][ T28] audit: type=1400 audit(1772308296.995:52287): avc: denied { map_create } for pid=18460 comm="syz.8.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 742.354791][ T28] audit: type=1400 audit(1772308297.032:52288): avc: denied { map } for pid=18470 comm="syz.4.4164" path="pipe:[22587]" dev="pipefs" ino=22587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 742.381048][ T28] audit: type=1400 audit(1772308297.060:52289): avc: denied { write } for pid=18470 comm="syz.4.4164" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 742.452649][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.470424][ T28] audit: type=1400 audit(1772308297.173:52290): avc: denied { unmount } for pid=17232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 742.491351][ T28] audit: type=1400 audit(1772308297.191:52291): avc: denied { read write } for pid=10191 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 742.530735][ T28] audit: type=1400 audit(1772308297.191:52292): avc: denied { open } for pid=10191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.470428][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.547577][T18427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.820512][T18515] syzkaller0: entered promiscuous mode [ 743.840299][T18515] syzkaller0: entered allmulticast mode [ 743.840756][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4174'. [ 743.930245][T18518] syzkaller0: entered promiscuous mode [ 743.946619][T18518] syzkaller0: entered allmulticast mode [ 744.121785][T18523] syzkaller0: entered promiscuous mode [ 744.127436][T18523] syzkaller0: entered allmulticast mode [ 744.188666][T18525] syzkaller0: entered promiscuous mode [ 744.194295][T18525] syzkaller0: entered allmulticast mode [ 744.292842][T18520] loop2: detected capacity change from 0 to 1024 [ 744.411211][T18520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 744.422960][T18520] System zones: 0-1, 3-36 [ 744.437999][T18520] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4178: bad orphan inode 134217728 [ 744.449368][T18520] loop2: lost filesystem error report for type 5 error -117 [ 744.818228][T18534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 745.025337][T18520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.486362][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.810151][T18572] syz_tun: entered promiscuous mode [ 747.001901][T18579] xfrm0 speed is unknown, defaulting to 1000 [ 747.155352][T18577] loop4: detected capacity change from 0 to 256 [ 747.201000][T18587] syzkaller0: entered promiscuous mode [ 747.213269][T18587] syzkaller0: entered allmulticast mode [ 747.254028][T18575] xfrm0 speed is unknown, defaulting to 1000 [ 747.343487][T18582] syz.4.4192: attempt to access beyond end of device [ 747.343487][T18582] loop4: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 747.362610][T18582] syz.4.4192: attempt to access beyond end of device [ 747.362610][T18582] loop4: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 747.418028][T18582] syz.4.4192: attempt to access beyond end of device [ 747.418028][T18582] loop4: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 747.442090][T18582] syz.4.4192: attempt to access beyond end of device [ 747.442090][T18582] loop4: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 747.483480][T18582] syz.4.4192: attempt to access beyond end of device [ 747.483480][T18582] loop4: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 747.554356][T18582] syz.4.4192: attempt to access beyond end of device [ 747.554356][T18582] loop4: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 747.571416][ T28] kauditd_printk_skb: 345 callbacks suppressed [ 747.571432][ T28] audit: type=1400 audit(1772308301.962:52638): avc: denied { read open } for pid=18595 comm="syz.8.4198" path="/" dev="configfs" ino=2106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 747.581736][T18582] syz.4.4192: attempt to access beyond end of device [ 747.581736][T18582] loop4: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 747.617622][T18594] syzkaller0: entered promiscuous mode [ 747.626235][T18582] syz.4.4192: attempt to access beyond end of device [ 747.626235][T18582] loop4: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 747.640233][T18582] syz.4.4192: attempt to access beyond end of device [ 747.640233][T18582] loop4: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 747.642156][T18594] syzkaller0: entered allmulticast mode [ 747.660395][ T28] audit: type=1400 audit(1772308301.990:52639): avc: denied { create } for pid=18595 comm="syz.8.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 747.696717][ T28] audit: type=1400 audit(1772308301.999:52640): avc: denied { write } for pid=18595 comm="syz.8.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 747.718249][ T28] audit: type=1400 audit(1772308302.009:52641): avc: denied { open } for pid=18595 comm="syz.8.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 747.747858][ T28] audit: type=1400 audit(1772308302.009:52642): avc: denied { perfmon } for pid=18595 comm="syz.8.4198" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 747.776710][ T28] audit: type=1400 audit(1772308302.009:52643): avc: denied { kernel } for pid=18595 comm="syz.8.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 747.801202][ T28] audit: type=1400 audit(1772308302.009:52644): avc: denied { tracepoint } for pid=18595 comm="syz.8.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 747.801533][T18596] syz_tun: entered promiscuous mode [ 747.821624][ T28] audit: type=1400 audit(1772308302.037:52645): avc: denied { perfmon } for pid=18595 comm="syz.8.4198" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 747.848801][ T28] audit: type=1400 audit(1772308302.065:52646): avc: denied { module_request } for pid=18599 comm="syz.3.4199" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 747.890539][ T28] audit: type=1400 audit(1772308302.074:52647): avc: denied { write } for pid=18593 comm="syz.5.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 747.921659][T18600] syzkaller0: entered promiscuous mode [ 747.927446][T18600] syzkaller0: entered allmulticast mode [ 748.204619][T18616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=18616 comm=syz.2.4205 [ 748.266072][T18616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=18616 comm=syz.2.4205 [ 748.394530][T18620] syzkaller0: entered promiscuous mode [ 748.400712][T18620] syzkaller0: entered allmulticast mode [ 748.717103][T18618] loop3: detected capacity change from 0 to 512 [ 748.903910][T18618] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 749.013151][T18618] EXT4-fs (loop3): 1 orphan inode deleted [ 749.029396][T18635] syzkaller0: entered promiscuous mode [ 749.045039][T18618] EXT4-fs (loop3): 1 truncate cleaned up [ 749.048112][T18635] syzkaller0: entered allmulticast mode [ 749.062853][T18618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.380402][T18658] syzkaller0: entered promiscuous mode [ 749.391019][T18658] syzkaller0: entered allmulticast mode [ 749.449261][T18659] syzkaller0: entered promiscuous mode [ 749.455141][T18659] syzkaller0: entered allmulticast mode [ 749.467901][T18664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=18664 comm=syz.2.4216 [ 749.486718][T18664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=18664 comm=syz.2.4216 [ 749.613496][T18670] syzkaller0: entered promiscuous mode [ 749.623327][T18670] syzkaller0: entered allmulticast mode [ 749.712899][ T9060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.811542][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4221'. [ 750.021910][T18685] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4223'. [ 750.124026][T16940] kworker/u8:11: attempt to access beyond end of device [ 750.124026][T16940] loop4: rw=1, sector=416, nr_sectors = 8 limit=256 [ 750.480889][T18687] syzkaller1: entered promiscuous mode [ 750.498125][T18687] syzkaller1: entered allmulticast mode [ 750.650180][T18696] loop5: detected capacity change from 0 to 128 [ 750.746699][T18698] syzkaller0: entered promiscuous mode [ 750.752325][T18698] syzkaller0: entered allmulticast mode [ 751.055977][T18720] syzkaller0: entered promiscuous mode [ 751.061526][T18720] syzkaller0: entered allmulticast mode [ 751.110481][T18721] syz_tun: entered promiscuous mode [ 751.307793][T18731] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4238'. [ 751.326594][T18731] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4238'. [ 751.387993][T18733] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4239'. [ 751.402379][T18733] syzkaller1: entered promiscuous mode [ 751.408948][T18733] syzkaller1: entered allmulticast mode [ 751.590180][T18738] syzkaller0: entered promiscuous mode [ 751.595823][T18738] syzkaller0: entered allmulticast mode [ 752.446861][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4246'. [ 752.477184][T18754] bridge_slave_0: entered promiscuous mode [ 752.493005][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4246'. [ 752.706682][T18760] syzkaller0: entered promiscuous mode [ 752.712353][T18760] syzkaller0: entered allmulticast mode [ 753.035527][ T28] kauditd_printk_skb: 588 callbacks suppressed [ 753.035544][ T28] audit: type=1400 audit(1772308307.069:53236): avc: denied { write } for pid=18762 comm="syz.8.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 753.065021][ T28] audit: type=1400 audit(1772308307.069:53237): avc: denied { read write } for pid=8826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.090566][ T28] audit: type=1400 audit(1772308307.069:53238): avc: denied { open } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.115026][ T28] audit: type=1400 audit(1772308307.069:53239): avc: denied { ioctl } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.141839][T18766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4250'. [ 753.156043][T18766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4250'. [ 753.179835][ T28] audit: type=1400 audit(1772308307.200:53240): avc: denied { read write } for pid=8826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.205629][ T28] audit: type=1400 audit(1772308307.200:53241): avc: denied { open } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.232186][ T28] audit: type=1400 audit(1772308307.200:53242): avc: denied { ioctl } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.261664][T18768] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4251'. [ 753.272792][ T28] audit: type=1400 audit(1772308307.294:53243): avc: denied { name_bind } for pid=18767 comm="syz.4.4251" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 753.277568][T18768] syzkaller1: entered promiscuous mode [ 753.297575][ T28] audit: type=1400 audit(1772308307.294:53244): avc: denied { create } for pid=18767 comm="syz.4.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 753.303958][T18768] syzkaller1: entered allmulticast mode [ 753.322445][ T28] audit: type=1400 audit(1772308307.294:53245): avc: denied { ioctl } for pid=18767 comm="syz.4.4251" path="socket:[53646]" dev="sockfs" ino=53646 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 753.396290][T18771] syzkaller0: entered promiscuous mode [ 753.402086][T18771] syzkaller0: entered allmulticast mode [ 753.448447][T18773] syzkaller0: entered promiscuous mode [ 753.454006][T18773] syzkaller0: entered allmulticast mode [ 753.500401][T18775] syzkaller0: entered promiscuous mode [ 753.506304][T18775] syzkaller0: entered allmulticast mode [ 753.685170][T18783] syzkaller0: entered promiscuous mode [ 753.690720][T18783] syzkaller0: entered allmulticast mode [ 753.824357][T18788] xfrm0 speed is unknown, defaulting to 1000 [ 753.888282][T18791] xfrm0 speed is unknown, defaulting to 1000 [ 753.941403][T18788] loop8: detected capacity change from 0 to 256 [ 754.038620][T18704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.420032][T18804] syzkaller0: entered promiscuous mode [ 754.425854][T18804] syzkaller0: entered allmulticast mode [ 754.825655][T18805] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 755.808983][T18809] syzkaller0: entered promiscuous mode [ 756.159726][T18809] syzkaller0: entered allmulticast mode [ 756.992015][T18822] syzkaller0: entered promiscuous mode [ 756.997625][T18822] syzkaller0: entered allmulticast mode [ 757.283679][T18827] syzkaller0: entered promiscuous mode [ 757.316167][T18827] syzkaller0: entered allmulticast mode [ 757.478785][T18819] loop3: detected capacity change from 0 to 512 [ 757.840124][T18819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 757.936871][T18819] EXT4-fs (loop3): 1 orphan inode deleted [ 757.950760][T18819] EXT4-fs (loop3): 1 truncate cleaned up [ 757.965159][T18819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.393708][ T28] kauditd_printk_skb: 313 callbacks suppressed [ 758.393723][ T28] audit: type=1400 audit(1772308312.083:53559): avc: denied { write } for pid=18811 comm="syz.3.4266" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 758.473192][T18848] __nla_validate_parse: 1 callbacks suppressed [ 758.473891][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4278'. [ 758.603698][ T28] audit: type=1400 audit(1772308312.261:53560): avc: denied { create } for pid=18847 comm="syz.4.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 758.633235][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4278'. [ 758.642659][T18849] syzkaller0: entered promiscuous mode [ 758.648242][T18849] syzkaller0: entered allmulticast mode [ 758.657466][ T28] audit: type=1400 audit(1772308312.335:53561): avc: denied { write } for pid=18847 comm="syz.4.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 758.716054][ T28] audit: type=1400 audit(1772308312.382:53562): avc: denied { read write } for pid=10191 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.773661][ T28] audit: type=1400 audit(1772308312.410:53563): avc: denied { open } for pid=10191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.873915][ T28] audit: type=1400 audit(1772308312.410:53564): avc: denied { ioctl } for pid=10191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.900862][ T28] audit: type=1400 audit(1772308312.429:53565): avc: denied { read write } for pid=8826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.902736][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4279'. [ 758.946421][ T28] audit: type=1400 audit(1772308312.429:53566): avc: denied { open } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.975642][ T28] audit: type=1400 audit(1772308312.429:53567): avc: denied { ioctl } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.996459][T18854] bridge_slave_0: entered promiscuous mode [ 759.008507][ T28] audit: type=1400 audit(1772308312.494:53568): avc: denied { prog_load } for pid=18853 comm="syz.5.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 759.069661][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4279'. [ 759.084347][T18859] syzkaller0: entered promiscuous mode [ 759.090136][T18859] syzkaller0: entered allmulticast mode [ 759.107653][T18860] xfrm0 speed is unknown, defaulting to 1000 [ 759.115935][T18839] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 759.229174][ T9060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.260230][T18866] loop8: detected capacity change from 0 to 256 [ 759.351350][T18863] xfrm0 speed is unknown, defaulting to 1000 [ 760.040848][T18855] loop2: detected capacity change from 0 to 512 [ 760.211198][T18855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 760.247226][T18894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4287'. [ 760.381391][T18855] EXT4-fs (loop2): 1 orphan inode deleted [ 760.403498][T18855] EXT4-fs (loop2): 1 truncate cleaned up [ 760.418544][T18855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.627348][T18909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4293'. [ 760.636339][T18909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4293'. [ 760.837457][T18904] loop4: detected capacity change from 0 to 512 [ 760.872380][T18904] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 761.002644][T18904] EXT4-fs (loop4): 1 orphan inode deleted [ 761.045266][T18904] EXT4-fs (loop4): 1 truncate cleaned up [ 761.221476][T18904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.445615][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.644099][T18922] syzkaller0: entered promiscuous mode [ 761.656638][T18927] netlink: 'syz.3.4298': attribute type 2 has an invalid length. [ 761.671816][T18922] syzkaller0: entered allmulticast mode [ 761.829513][T18931] xfrm0 speed is unknown, defaulting to 1000 [ 762.165915][T18934] loop2: detected capacity change from 0 to 256 [ 762.401908][T18938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4301'. [ 762.405496][T18926] xfrm0 speed is unknown, defaulting to 1000 [ 762.447285][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.867059][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4307'. [ 762.907091][T18958] syzkaller0: entered promiscuous mode [ 762.914203][T18958] syzkaller0: entered allmulticast mode [ 763.318056][T16938] smc: removing ib device syz1 [ 763.640858][T15019] bond0 (unregistering): Released all slaves [ 763.681275][ T3550] xfrm0 speed is unknown, defaulting to 1000 [ 763.687339][ T3550] syz1: Port: 1 Link DOWN [ 763.787068][ T28] kauditd_printk_skb: 419 callbacks suppressed [ 763.787224][ T28] audit: type=1400 audit(1772308317.125:53988): avc: denied { open } for pid=18981 comm="syz.5.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 763.852236][ T28] audit: type=1400 audit(1772308317.153:53989): avc: denied { perfmon } for pid=18981 comm="syz.5.4313" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 763.898754][ T28] audit: type=1400 audit(1772308317.153:53990): avc: denied { kernel } for pid=18981 comm="syz.5.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 763.944138][T18975] loop8: detected capacity change from 0 to 512 [ 763.958666][ T28] audit: type=1400 audit(1772308317.162:53991): avc: denied { prog_load } for pid=18981 comm="syz.5.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 764.017800][T18975] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 764.028069][ T28] audit: type=1400 audit(1772308317.162:53992): avc: denied { bpf } for pid=18981 comm="syz.5.4313" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 764.065952][ T28] audit: type=1400 audit(1772308317.162:53993): avc: denied { perfmon } for pid=18981 comm="syz.5.4313" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 764.113185][T18975] EXT4-fs (loop8): 1 orphan inode deleted [ 764.158130][T18975] EXT4-fs (loop8): 1 truncate cleaned up [ 764.182393][ T28] audit: type=1400 audit(1772308317.162:53994): avc: denied { prog_run } for pid=18981 comm="syz.5.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 764.287892][T18975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.321995][ T28] audit: type=1400 audit(1772308317.162:53995): avc: denied { write } for pid=18981 comm="syz.5.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 764.341711][ T28] audit: type=1400 audit(1772308317.171:53996): avc: denied { create } for pid=18981 comm="syz.5.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 764.362960][ T28] audit: type=1400 audit(1772308317.171:53997): avc: denied { create } for pid=18969 comm="syz.8.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 764.449035][T18956] chnl_net:caif_netlink_parms(): no params data found [ 764.519946][T15019] hsr_slave_0: left promiscuous mode [ 764.552101][T15019] hsr_slave_1: left promiscuous mode [ 764.591809][T15019] veth1_macvtap: left promiscuous mode [ 764.604449][T15019] veth0_macvtap: left promiscuous mode [ 764.625833][T15019] veth1_vlan: left promiscuous mode [ 764.631784][T15019] veth0_vlan: left promiscuous mode [ 764.817125][T18940] syz.2.4297: attempt to access beyond end of device [ 764.817125][T18940] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 764.843731][T18940] syz.2.4297: attempt to access beyond end of device [ 764.843731][T18940] loop2: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 764.867414][T18940] syz.2.4297: attempt to access beyond end of device [ 764.867414][T18940] loop2: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 764.902955][T18940] syz.2.4297: attempt to access beyond end of device [ 764.902955][T18940] loop2: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 764.964372][T18940] syz.2.4297: attempt to access beyond end of device [ 764.964372][T18940] loop2: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 764.979082][T18940] syz.2.4297: attempt to access beyond end of device [ 764.979082][T18940] loop2: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 764.994709][T18940] syz.2.4297: attempt to access beyond end of device [ 764.994709][T18940] loop2: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 765.017739][T18940] syz.2.4297: attempt to access beyond end of device [ 765.017739][T18940] loop2: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 765.032927][T18940] syz.2.4297: attempt to access beyond end of device [ 765.032927][T18940] loop2: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 765.054811][T18940] syz.2.4297: attempt to access beyond end of device [ 765.054811][T18940] loop2: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 765.137725][T19007] syzkaller0: entered promiscuous mode [ 765.143325][T19007] syzkaller0: entered allmulticast mode [ 765.262079][T18956] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.303440][T18956] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.325294][T18956] bridge_slave_0: entered allmulticast mode [ 765.331957][T18956] bridge_slave_0: entered promiscuous mode [ 765.338509][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.344226][T18956] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.356102][T18956] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.365347][T19006] loop4: detected capacity change from 0 to 512 [ 765.391655][T18956] bridge_slave_1: entered allmulticast mode [ 765.403829][T19006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 765.423845][T18956] bridge_slave_1: entered promiscuous mode [ 765.435438][T19006] EXT4-fs (loop4): 1 orphan inode deleted [ 765.444576][T19006] EXT4-fs (loop4): 1 truncate cleaned up [ 765.455986][T19006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.500584][T18956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.523163][T18956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.547314][T15019] IPVS: stop unused estimator thread 0... [ 765.587426][T18956] team0: Port device team_slave_0 added [ 765.608760][T19024] syzkaller0: entered promiscuous mode [ 765.614372][T19024] syzkaller0: entered allmulticast mode [ 765.691430][T18956] team0: Port device team_slave_1 added [ 765.750576][T18956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.781840][T19018] loop2: detected capacity change from 0 to 1024 [ 765.784189][T18956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.866383][T18956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.991620][T19018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 766.012650][T19018] System zones: 0-1, 3-36 [ 766.023747][T19018] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4321: bad orphan inode 134217728 [ 766.035680][T19018] loop2: lost filesystem error report for type 5 error -117 [ 766.043145][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 766.056977][ C0] EXT4-fs (loop2): initial error at time 1772308319: ext4_orphan_get:1417 [ 766.065718][ C0] EXT4-fs (loop2): last error at time 1772308319: ext4_orphan_get:1417 [ 766.080784][T19018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.112100][T18956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.130110][T18956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.173901][T18956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.188398][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4324'. [ 766.197657][T19032] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4324'. [ 766.265758][T18956] hsr_slave_0: entered promiscuous mode [ 766.272195][T18956] hsr_slave_1: entered promiscuous mode [ 766.278216][T18956] debugfs: 'hsr0' already exists in 'hsr' [ 766.285190][T18956] Cannot create hsr debugfs directory [ 766.403780][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.627894][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.755049][T19041] syzkaller0: entered promiscuous mode [ 766.799112][T19041] syzkaller0: entered allmulticast mode [ 766.950447][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4325'. [ 767.226355][T18956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.301667][T19064] syzkaller0: entered promiscuous mode [ 767.308629][T19064] syzkaller0: entered allmulticast mode [ 767.347899][T18956] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.360945][T19067] syzkaller0: entered promiscuous mode [ 767.366558][T19067] syzkaller0: entered allmulticast mode [ 767.385393][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4330'. [ 767.405719][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.412881][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.432326][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.439559][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.521475][T19072] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4333'. [ 767.552490][T19072] syzkaller1: entered promiscuous mode [ 767.560363][T19072] syzkaller1: entered allmulticast mode [ 767.575855][T19075] syzkaller0: entered promiscuous mode [ 767.581419][T19075] syzkaller0: entered allmulticast mode [ 767.715547][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4337'. [ 767.733880][T18956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.745577][T19117] syzkaller0: entered promiscuous mode [ 768.751819][T19117] syzkaller0: entered allmulticast mode [ 768.853688][T19120] syzkaller0: entered promiscuous mode [ 768.873152][T19120] syzkaller0: entered allmulticast mode [ 768.961498][T18956] veth0_vlan: entered promiscuous mode [ 769.011561][T18956] veth1_vlan: entered promiscuous mode [ 769.028092][T19127] syzkaller0: entered promiscuous mode [ 769.033756][T19127] syzkaller0: entered allmulticast mode [ 769.097579][T18956] veth0_macvtap: entered promiscuous mode [ 769.121015][T18956] veth1_macvtap: entered promiscuous mode [ 769.152157][T18956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.189905][ T28] kauditd_printk_skb: 491 callbacks suppressed [ 769.189920][ T28] audit: type=1400 audit(1772308322.185:54489): avc: denied { read write } for pid=8826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.228274][T18956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.261235][ T28] audit: type=1400 audit(1772308322.185:54490): avc: denied { read write open } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.314522][ T28] audit: type=1400 audit(1772308322.185:54491): avc: denied { ioctl } for pid=8826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.367518][ T28] audit: type=1400 audit(1772308322.241:54492): avc: denied { create } for pid=19132 comm="syz.4.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 769.402468][ T28] audit: type=1400 audit(1772308322.251:54493): avc: denied { create } for pid=19132 comm="syz.4.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.483789][ T28] audit: type=1400 audit(1772308322.260:54494): avc: denied { ioctl } for pid=19132 comm="syz.4.4353" path="socket:[55395]" dev="sockfs" ino=55395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.514951][T19139] loop2: detected capacity change from 0 to 512 [ 769.545089][T19139] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 769.561546][ T28] audit: type=1400 audit(1772308322.260:54495): avc: denied { bind } for pid=19132 comm="syz.4.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.627165][T19139] EXT4-fs (loop2): 1 orphan inode deleted [ 769.632947][ T28] audit: type=1400 audit(1772308322.269:54496): avc: denied { setopt } for pid=19132 comm="syz.4.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.633166][T19139] EXT4-fs (loop2): 1 truncate cleaned up [ 769.653593][ T28] audit: type=1400 audit(1772308322.269:54497): avc: denied { write } for pid=19132 comm="syz.4.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.679407][ T28] audit: type=1400 audit(1772308322.269:54498): avc: denied { write } for pid=19128 comm="syz.8.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.699849][T19139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.066990][T19156] syzkaller0: entered promiscuous mode [ 770.072608][T19156] syzkaller0: entered allmulticast mode [ 770.147531][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.240222][T19161] syzkaller0: entered promiscuous mode [ 770.245887][T19161] syzkaller0: entered allmulticast mode [ 770.385803][T19164] syzkaller0: entered promiscuous mode [ 770.385826][T19164] syzkaller0: entered allmulticast mode [ 770.686360][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 770.704331][T19174] bridge: RTM_NEWNEIGH with invalid ether address [ 771.276757][T19179] syzkaller0: entered promiscuous mode [ 771.295159][T19179] syzkaller0: entered allmulticast mode [ 771.387690][T19175] loop2: detected capacity change from 0 to 512 [ 771.493358][T19175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 771.695035][T19175] EXT4-fs (loop2): 1 orphan inode deleted [ 771.717982][T19196] syzkaller0: entered promiscuous mode [ 771.723550][T19196] syzkaller0: entered allmulticast mode [ 771.734385][T19175] EXT4-fs (loop2): 1 truncate cleaned up [ 771.768371][T19175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.855979][T19203] netlink: 'syz.3.4376': attribute type 2 has an invalid length. [ 772.263598][T19212] loop4: detected capacity change from 0 to 512 [ 772.304696][T19212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 772.376551][T19212] EXT4-fs (loop4): 1 orphan inode deleted [ 772.382688][T19212] EXT4-fs (loop4): 1 truncate cleaned up [ 772.405625][T19212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.699888][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4381'. [ 772.700843][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.898208][T19229] syzkaller0: entered promiscuous mode [ 772.903752][T19229] syzkaller0: entered allmulticast mode [ 772.957925][T19230] syzkaller0: entered promiscuous mode [ 772.964983][T19230] syzkaller0: entered allmulticast mode [ 772.977417][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.334276][T19245] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4391'. [ 773.761586][T19246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 774.073106][T19237] loop4: detected capacity change from 0 to 1024 [ 774.425214][T19237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 774.494564][T19237] System zones: 0-1, 3-36 [ 774.552473][ T28] kauditd_printk_skb: 483 callbacks suppressed [ 774.552488][ T28] audit: type=1400 audit(1772308327.190:54982): avc: denied { bind } for pid=19253 comm="syz.8.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 774.734748][T19237] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4388: bad orphan inode 134217728 [ 774.768177][T19256] syzkaller0: entered promiscuous mode [ 774.864883][T19256] syzkaller0: entered allmulticast mode [ 774.974130][T19237] loop4: lost filesystem error report for type 5 error -117 [ 775.005779][ T28] audit: type=1400 audit(1772308327.227:54983): avc: denied { create } for pid=19250 comm="syz.3.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 775.146085][T19237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.226748][ T28] audit: type=1400 audit(1772308327.255:54984): avc: denied { create } for pid=19253 comm="syz.8.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.275574][ T28] audit: type=1400 audit(1772308327.255:54985): avc: denied { ioctl } for pid=19253 comm="syz.8.4394" path="socket:[54897]" dev="sockfs" ino=54897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.347227][ T28] audit: type=1400 audit(1772308327.274:54986): avc: denied { module_request } for pid=19253 comm="syz.8.4394" kmod="netdev-vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 775.429153][ T28] audit: type=1400 audit(1772308327.283:54987): avc: denied { module_request } for pid=19249 comm="syz.5.4393" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 775.480655][ T28] audit: type=1400 audit(1772308327.330:54988): avc: denied { bind } for pid=19253 comm="syz.8.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.519896][ T28] audit: type=1400 audit(1772308327.330:54989): avc: denied { setopt } for pid=19253 comm="syz.8.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.541800][ T28] audit: type=1400 audit(1772308327.330:54990): avc: denied { connect } for pid=19253 comm="syz.8.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.586466][ T28] audit: type=1400 audit(1772308327.330:54991): avc: denied { write } for pid=19253 comm="syz.8.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.689660][T19286] syzkaller0: entered promiscuous mode [ 775.695299][T19286] syzkaller0: entered allmulticast mode [ 775.761135][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.867347][T19293] loop4: detected capacity change from 0 to 128 [ 775.892792][T19293] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 775.912117][T19293] ext4 filesystem being mounted at /591/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 776.044319][T19295] syzkaller0: entered promiscuous mode [ 776.052819][T19298] loop3: detected capacity change from 0 to 512 [ 776.071596][T19298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 776.081967][T19295] syzkaller0: entered allmulticast mode [ 776.098885][T19298] EXT4-fs (loop3): 1 orphan inode deleted [ 776.115815][T19298] EXT4-fs (loop3): 1 truncate cleaned up [ 776.122026][T19298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.565800][T19319] syzkaller0: entered promiscuous mode [ 776.581077][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4407'. [ 776.581248][T19319] syzkaller0: entered allmulticast mode [ 776.661428][T18956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.803495][T19327] syzkaller0: entered promiscuous mode [ 776.817750][T19327] syzkaller0: entered allmulticast mode [ 776.983764][ T8826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 777.271426][T19328] loop2: detected capacity change from 0 to 1024 [ 777.670860][T19339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 778.131874][T19330] loop5: detected capacity change from 0 to 512 [ 778.157009][T19328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 778.245067][T19330] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 778.271847][T19328] System zones: 0-1, 3-36 [ 778.371682][T19328] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4414: bad orphan inode 134217728 [ 778.459391][T19330] EXT4-fs (loop5): 1 orphan inode deleted [ 778.534052][T19330] EXT4-fs (loop5): 1 truncate cleaned up [ 778.547478][T19328] loop2: lost filesystem error report for type 5 error -117 [ 778.592360][T19328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.643963][T19330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.814692][T19347] syzkaller0: entered promiscuous mode [ 778.896594][T19347] syzkaller0: entered allmulticast mode [ 779.362839][T19357] syzkaller0: entered promiscuous mode [ 779.371045][T19357] syzkaller0: entered allmulticast mode [ 779.465135][T10191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.615520][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.623949][T19364] syzkaller0: entered promiscuous mode [ 779.639134][T19364] syzkaller0: entered allmulticast mode [ 779.722837][T19365] syzkaller0: entered promiscuous mode [ 779.735229][T19365] syzkaller0: entered allmulticast mode [ 779.905911][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 779.905971][ T28] audit: type=1400 audit(1772308332.203:55456): avc: denied { read write open } for pid=10191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.976914][ T28] audit: type=1400 audit(1772308332.203:55457): avc: denied { ioctl } for pid=10191 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 780.021468][ T28] audit: type=1400 audit(1772308332.213:55458): avc: denied { read write } for pid=17232 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 780.092861][ T28] audit: type=1400 audit(1772308332.213:55459): avc: denied { open } for pid=17232 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 780.155759][ T28] audit: type=1400 audit(1772308332.213:55460): avc: denied { ioctl } for pid=17232 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 780.190970][T19375] syzkaller0: entered promiscuous mode [ 780.197591][ T28] audit: type=1400 audit(1772308332.297:55461): avc: denied { name_bind } for pid=19371 comm="syz.5.4429" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 780.212473][T19375] syzkaller0: entered allmulticast mode [ 780.240536][ T28] audit: type=1400 audit(1772308332.297:55462): avc: denied { node_bind } for pid=19371 comm="syz.5.4429" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 780.315314][ T28] audit: type=1400 audit(1772308332.344:55463): avc: denied { prog_load } for pid=19366 comm="syz.2.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 780.337860][T19367] loop2: detected capacity change from 0 to 512 [ 780.358120][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4432'. [ 780.381703][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4432'. [ 780.381838][ T28] audit: type=1400 audit(1772308332.344:55464): avc: denied { bpf } for pid=19366 comm="syz.2.4427" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 780.435358][T19360] loop3: detected capacity change from 0 to 512 [ 780.513738][ T28] audit: type=1400 audit(1772308332.344:55465): avc: denied { perfmon } for pid=19366 comm="syz.2.4427" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 780.562361][T19367] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 780.706518][T19360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 780.736466][T19367] EXT4-fs (loop2): 1 orphan inode deleted [ 780.765640][T19367] EXT4-fs (loop2): 1 truncate cleaned up [ 780.796112][T19367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.828213][T19360] EXT4-fs (loop3): 1 orphan inode deleted [ 780.835351][T19360] EXT4-fs (loop3): 1 truncate cleaned up [ 780.848436][T19360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.036886][T19386] loop5: detected capacity change from 0 to 1024 [ 781.221579][T19399] syzkaller0: entered promiscuous mode [ 781.229808][T19399] syzkaller0: entered allmulticast mode [ 781.237412][T19386] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 781.257921][T19386] System zones: 0-1, 3-36 [ 781.282177][T19386] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4434: bad orphan inode 134217728 [ 781.320760][T19386] loop5: lost filesystem error report for type 5 error -117 [ 781.358870][T19386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.473823][T18956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.841322][T19407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 782.064855][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.178060][ C1] vcan0: j1939_tp_rxtimer: 0xffff888102988a00: rx timeout, send abort [ 782.314602][T10191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.701865][T19414] syzkaller0: entered promiscuous mode [ 782.712643][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811f0c0400: rx timeout, send abort [ 782.721590][ C1] vcan0: j1939_tp_rxtimer: 0xffff888102988a00: abort rx timeout. Force session deactivation [ 782.821311][T19414] syzkaller0: entered allmulticast mode [ 783.255743][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811f0c0400: abort rx timeout. Force session deactivation [ 783.315776][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4444'. [ 783.389937][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4444'. [ 783.549080][T19426] syzkaller0: entered promiscuous mode [ 783.584663][T19426] syzkaller0: entered allmulticast mode [ 783.729222][T19432] netlink: 'syz.8.4451': attribute type 2 has an invalid length. [ 783.789403][T19417] loop2: detected capacity change from 0 to 512 [ 783.891372][T19434] netlink: 'syz.5.4452': attribute type 2 has an invalid length. [ 783.903437][T19417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 784.070387][T19417] EXT4-fs (loop2): 1 orphan inode deleted [ 784.827713][T19417] EXT4-fs (loop2): 1 truncate cleaned up [ 784.839170][T19417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.162284][T19428] loop3: detected capacity change from 0 to 1024 [ 785.185897][T19442] loop4: detected capacity change from 0 to 1024 [ 785.231836][T19442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 785.259159][T19442] System zones: 0-1, 3-36 [ 785.266629][ T28] kauditd_printk_skb: 333 callbacks suppressed [ 785.266658][ T28] audit: type=1400 audit(1772308337.217:55799): avc: denied { prog_load } for pid=19441 comm="syz.8.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 785.299404][ T28] audit: type=1400 audit(1772308337.217:55800): avc: denied { bpf } for pid=19441 comm="syz.8.4453" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 785.320630][ T28] audit: type=1400 audit(1772308337.217:55801): avc: denied { perfmon } for pid=19441 comm="syz.8.4453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 785.342378][ T28] audit: type=1400 audit(1772308337.217:55802): avc: denied { prog_load } for pid=19441 comm="syz.8.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 785.344894][T19442] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4454: bad orphan inode 134217728 [ 785.379640][ T28] audit: type=1400 audit(1772308337.217:55803): avc: denied { bpf } for pid=19441 comm="syz.8.4453" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 785.411903][ T28] audit: type=1400 audit(1772308337.217:55804): avc: denied { bpf } for pid=19441 comm="syz.8.4453" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 785.438479][ T28] audit: type=1400 audit(1772308337.217:55805): avc: denied { perfmon } for pid=19441 comm="syz.8.4453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 785.460007][T19442] loop4: lost filesystem error report for type 5 error -117 [ 785.460682][ T28] audit: type=1400 audit(1772308337.217:55806): avc: denied { prog_run } for pid=19441 comm="syz.8.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 785.460870][T19442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.470119][ T28] audit: type=1400 audit(1772308337.245:55807): avc: denied { open } for pid=19441 comm="syz.8.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 785.488291][T19428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 785.554968][T19428] System zones: 0-1, 3-36 [ 785.567158][ T28] audit: type=1400 audit(1772308337.245:55808): avc: denied { perfmon } for pid=19441 comm="syz.8.4453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 785.570021][T19449] syzkaller0: entered promiscuous mode [ 785.618217][T19428] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4449: bad orphan inode 134217728 [ 785.628546][T19449] syzkaller0: entered allmulticast mode [ 785.635459][T19428] loop3: lost filesystem error report for type 5 error -117 [ 785.639045][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 785.652913][ C1] EXT4-fs (loop3): initial error at time 1772308337: ext4_orphan_get:1417 [ 785.661501][ C1] EXT4-fs (loop3): last error at time 1772308337: ext4_orphan_get:1417 [ 785.711001][T17170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.714570][T19428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.801146][T19454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4456'. [ 785.872480][T19446] loop8: detected capacity change from 0 to 512 [ 785.989922][T19461] netlink: 'syz.2.4458': attribute type 2 has an invalid length. [ 786.094329][T19446] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 786.159386][T19465] syzkaller0: entered promiscuous mode [ 786.169971][T19465] syzkaller0: entered allmulticast mode [ 786.178780][ T8826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.344967][T19446] EXT4-fs (loop8): 1 orphan inode deleted [ 786.353266][T19446] EXT4-fs (loop8): 1 truncate cleaned up [ 786.411611][T19446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.504147][T18956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.803844][T19471] syzkaller0: entered promiscuous mode [ 786.816261][T19471] syzkaller0: entered allmulticast mode [ 786.840457][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.274393][T19493] loop2: detected capacity change from 0 to 256 [ 787.311920][T19475] loop8: detected capacity change from 0 to 1024 [ 787.463933][T19475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 787.492008][T19475] System zones: 0-1, 3-36 [ 787.509089][T19475] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4463: bad orphan inode 134217728 [ 787.528175][T19475] loop8: lost filesystem error report for type 5 error -117 [ 787.531297][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 787.537281][T19475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.545115][ C0] EXT4-fs (loop8): initial error at time 1772308339: ext4_orphan_get:1417 [ 787.545156][ C0] EXT4-fs (loop8): last error at time 1772308339: ext4_orphan_get:1417 [ 787.585915][T19493] bio_check_eod: 264 callbacks suppressed [ 787.585936][T19493] syz.2.4465: attempt to access beyond end of device [ 787.585936][T19493] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 787.616183][T19493] syz.2.4465: attempt to access beyond end of device [ 787.616183][T19493] loop2: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 787.660796][T19493] syz.2.4465: attempt to access beyond end of device [ 787.660796][T19493] loop2: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 787.692112][T19493] syz.2.4465: attempt to access beyond end of device [ 787.692112][T19493] loop2: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 787.736069][T19493] syz.2.4465: attempt to access beyond end of device [ 787.736069][T19493] loop2: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 787.788151][T19493] syz.2.4465: attempt to access beyond end of device [ 787.788151][T19493] loop2: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 787.822251][T19493] syz.2.4465: attempt to access beyond end of device [ 787.822251][T19493] loop2: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 787.836899][T19493] syz.2.4465: attempt to access beyond end of device [ 787.836899][T19493] loop2: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 787.865510][T16940] bond0 (unregistering): Released all slaves [ 787.870874][T19504] loop5: detected capacity change from 0 to 512 [ 787.879691][T16940] bond1 (unregistering): Released all slaves [ 787.893251][T16940] bond2 (unregistering): Released all slaves [ 787.901716][T19504] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 787.914045][T19499] v: renamed from ip6_vti0 (while UP) [ 787.949849][T19504] EXT4-fs (loop5): 1 orphan inode deleted [ 787.955704][T19504] EXT4-fs (loop5): 1 truncate cleaned up [ 787.989504][T19504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.010790][T16940] hsr_slave_0: left promiscuous mode [ 788.019288][T16940] hsr_slave_1: left promiscuous mode [ 788.079971][T16940] veth1_vlan: left promiscuous mode [ 788.104779][T16940] veth0_vlan: left promiscuous mode [ 788.111637][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.147747][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811f0c1c00: rx timeout, send abort [ 788.156201][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811f0c1c00: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 788.270782][T19511] loop3: detected capacity change from 0 to 1024 [ 788.303339][T19511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 788.315024][T19511] System zones: 0-1, 3-36 [ 788.326120][T19511] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4470: bad orphan inode 134217728 [ 788.341454][T19511] loop3: lost filesystem error report for type 5 error -117 [ 788.342013][T19511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.637822][T16940] IPVS: stop unused estimator thread 0... [ 788.794807][T10191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.863679][T19531] syzkaller0: entered promiscuous mode [ 788.883005][T19531] syzkaller0: entered allmulticast mode [ 788.923521][T19494] chnl_net:caif_netlink_parms(): no params data found [ 788.970299][T19494] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.981967][T19494] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.990232][T19494] bridge_slave_0: entered allmulticast mode [ 789.005411][T19494] bridge_slave_0: entered promiscuous mode [ 789.014607][T19494] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.029348][T19494] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.045885][T19494] bridge_slave_1: entered allmulticast mode [ 789.053797][T19494] bridge_slave_1: entered promiscuous mode [ 789.103524][T19494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.121485][T19494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.153690][T19494] team0: Port device team_slave_0 added [ 789.166435][T19494] team0: Port device team_slave_1 added [ 789.174090][T18956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.205044][T19494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.212951][T19494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.250837][T19494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.290950][T19494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.308934][T19494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.341417][T19494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.394612][T19494] hsr_slave_0: entered promiscuous mode [ 789.400918][T19494] hsr_slave_1: entered promiscuous mode [ 789.631907][T19494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.644668][T19494] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.657642][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.664792][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.684197][T16940] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.691421][T16940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.888372][T19494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.025694][T19549] loop5: detected capacity change from 0 to 1024 [ 790.110748][T19549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 790.132832][T19549] System zones: 0-1, 3-36 [ 790.163180][T19549] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4481: bad orphan inode 134217728 [ 790.188939][T19549] loop5: lost filesystem error report for type 5 error -117 [ 790.197070][T19549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.368843][T19494] veth0_vlan: entered promiscuous mode [ 790.391097][T19494] veth1_vlan: entered promiscuous mode [ 790.446409][T16940] kworker/u8:11: attempt to access beyond end of device [ 790.446409][T16940] loop2: rw=1, sector=416, nr_sectors = 8 limit=256 [ 790.508943][T19494] veth0_macvtap: entered promiscuous mode [ 790.539619][T19494] veth1_macvtap: entered promiscuous mode [ 790.646557][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104953400: rx timeout, send abort [ 790.655352][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104953400: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 790.675974][ T28] kauditd_printk_skb: 465 callbacks suppressed [ 790.675992][ T28] audit: type=1400 audit(1772308342.278:56274): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 790.719056][ T28] audit: type=1400 audit(1772308342.278:56275): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.773459][ T28] audit: type=1400 audit(1772308342.278:56276): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 790.786341][T19581] syzkaller0: entered promiscuous mode [ 790.809054][T19581] syzkaller0: entered allmulticast mode [ 790.820294][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4485'. [ 790.838497][ T28] audit: type=1400 audit(1772308342.278:56277): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 790.862748][T19494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.878732][T10191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.911806][T19494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.916144][ T28] audit: type=1400 audit(1772308342.278:56278): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 790.973669][ T28] audit: type=1400 audit(1772308342.315:56279): avc: denied { read write } for pid=18956 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.021504][ T28] audit: type=1400 audit(1772308342.315:56280): avc: denied { open } for pid=18956 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.054068][ T28] audit: type=1400 audit(1772308342.315:56281): avc: denied { ioctl } for pid=18956 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.081991][ T28] audit: type=1400 audit(1772308342.343:56282): avc: denied { create } for pid=19580 comm="syz.2.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 791.103281][ T28] audit: type=1400 audit(1772308342.362:56283): avc: denied { write } for pid=19580 comm="syz.2.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 791.295952][T19601] syz_tun: entered promiscuous mode [ 791.404127][T19606] syzkaller0: entered promiscuous mode [ 791.409801][T19606] syzkaller0: entered allmulticast mode [ 791.653578][T19611] syzkaller0: entered promiscuous mode [ 791.659435][T19611] syzkaller0: entered allmulticast mode [ 791.763968][T19604] loop5: detected capacity change from 0 to 512 [ 791.856406][T19604] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 791.946121][T19604] EXT4-fs (loop5): 1 orphan inode deleted [ 791.958155][T19604] EXT4-fs (loop5): 1 truncate cleaned up [ 791.973327][T19616] syzkaller0: entered promiscuous mode [ 791.979825][T19616] syzkaller0: entered allmulticast mode [ 791.992702][T19604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.077819][T19607] loop8: detected capacity change from 0 to 512 [ 792.210810][T19607] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 792.293628][T19607] EXT4-fs (loop8): 1 orphan inode deleted [ 792.303633][T19607] EXT4-fs (loop8): 1 truncate cleaned up [ 792.316263][T19607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.575321][T19635] l2tp_ppp: sess 2/0: no socket in recv [ 792.749277][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4504'. [ 792.760908][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.778467][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4504'. [ 792.802078][T10191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.862133][T19642] syzkaller0: entered promiscuous mode [ 792.940769][T19642] syzkaller0: entered allmulticast mode [ 793.103239][T19654] syzkaller0: entered promiscuous mode [ 793.109002][T19654] syzkaller0: entered allmulticast mode [ 793.187196][T19653] loop5: detected capacity change from 0 to 256 [ 793.284079][T19658] syzkaller0: entered promiscuous mode [ 793.289698][T19658] syzkaller0: entered allmulticast mode [ 793.552890][T19651] loop4: detected capacity change from 0 to 1024 [ 793.592618][T19673] syzkaller0: entered promiscuous mode [ 793.601914][T19673] syzkaller0: entered allmulticast mode [ 793.641081][T19651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 793.658294][T19651] System zones: 0-1, 3-36 [ 793.685487][T19651] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4508: bad orphan inode 134217728 [ 793.705790][T19651] loop4: lost filesystem error report for type 5 error -117 [ 793.726321][T19651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.835572][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4519'. [ 793.844832][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4519'. [ 793.995697][T19684] syzkaller0: entered promiscuous mode [ 794.002290][T19684] syzkaller0: entered allmulticast mode [ 794.226614][T19690] syzkaller0: entered promiscuous mode [ 794.236312][T19494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.246487][T19690] syzkaller0: entered allmulticast mode [ 794.285828][T19677] loop8: detected capacity change from 0 to 512 [ 794.396749][T19677] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 794.454339][T19696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4526'. [ 794.479700][T19677] EXT4-fs (loop8): 1 orphan inode deleted [ 794.500879][T19677] EXT4-fs (loop8): 1 truncate cleaned up [ 794.516296][T19677] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.075282][T17232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.413409][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4530'. [ 795.422603][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4530'. [ 795.512626][T19710] loop8: detected capacity change from 0 to 256 [ 795.706421][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b28da00: rx timeout, send abort [ 795.714855][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b28da00: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 795.886185][T19722] loop2: detected capacity change from 0 to 1024 [ 795.888697][T19724] syz_tun: entered promiscuous mode [ 795.941577][T19722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 795.954114][T19722] System zones: 0-1, 3-36 [ 795.969506][T19722] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4533: bad orphan inode 134217728 [ 795.998468][T19722] loop2: lost filesystem error report for type 5 error -117 [ 796.014030][T19722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.043166][ T28] kauditd_printk_skb: 585 callbacks suppressed [ 796.043185][ T28] audit: type=1400 audit(1772308347.301:56869): avc: denied { prog_load } for pid=19727 comm="syz.3.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 796.159834][ T28] audit: type=1400 audit(1772308347.301:56870): avc: denied { bpf } for pid=19727 comm="syz.3.4535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 796.183016][ T28] audit: type=1400 audit(1772308347.301:56871): avc: denied { perfmon } for pid=19727 comm="syz.3.4535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 796.209095][ T28] audit: type=1400 audit(1772308347.301:56872): avc: denied { open } for pid=19727 comm="syz.3.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 796.281405][ T28] audit: type=1400 audit(1772308347.301:56873): avc: denied { perfmon } for pid=19727 comm="syz.3.4535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 796.303702][ T28] audit: type=1400 audit(1772308347.301:56874): avc: denied { kernel } for pid=19727 comm="syz.3.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 796.328629][ T28] audit: type=1400 audit(1772308347.301:56875): avc: denied { write } for pid=19727 comm="syz.3.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 796.350701][ T28] audit: type=1400 audit(1772308347.301:56876): avc: denied { prog_load } for pid=19727 comm="syz.3.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 796.371005][ T28] audit: type=1400 audit(1772308347.301:56877): avc: denied { bpf } for pid=19727 comm="syz.3.4535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 796.421225][T19728] loop3: detected capacity change from 0 to 1024 [ 796.479367][ T28] audit: type=1400 audit(1772308347.357:56878): avc: denied { mount } for pid=19721 comm="syz.2.4533" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 796.544069][T19728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 796.575916][T19728] System zones: 0-1, 3-36 [ 796.673584][T19732] loop5: detected capacity change from 0 to 512 [ 796.677763][T19728] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4535: bad orphan inode 134217728 [ 796.693711][T19732] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 796.718292][T19728] loop3: lost filesystem error report for type 5 error -117 [ 796.731247][T19732] EXT4-fs (loop5): 1 orphan inode deleted [ 796.733804][T19728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.759811][T19732] EXT4-fs (loop5): 1 truncate cleaned up [ 796.787209][T19732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.087599][T19728] ================================================================== [ 797.095751][T19728] BUG: KCSAN: data-race in filemap_read / filemap_read [ 797.102636][T19728] [ 797.104994][T19728] read to 0xffff888119ea8ca8 of 8 bytes by task 19741 on cpu 0: [ 797.112655][T19728] filemap_read+0x6f/0xa10 [ 797.117115][T19728] generic_file_read_iter+0x79/0x330 [ 797.122440][T19728] ext4_file_read_iter+0x1cc/0x290 [ 797.127701][T19728] copy_splice_read+0x471/0x6c0 [ 797.132606][T19728] splice_direct_to_actor+0x28f/0x670 [ 797.138108][T19728] do_splice_direct+0x119/0x1a0 [ 797.142994][T19728] do_sendfile+0x382/0x650 [ 797.147447][T19728] __x64_sys_sendfile64+0x105/0x150 [ 797.152693][T19728] x64_sys_call+0x2dc4/0x3020 [ 797.157440][T19728] do_syscall_64+0x12c/0x370 [ 797.162066][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.168013][T19728] [ 797.170375][T19728] write to 0xffff888119ea8ca8 of 8 bytes by task 19728 on cpu 1: [ 797.178132][T19728] filemap_read+0x98d/0xa10 [ 797.182692][T19728] generic_file_read_iter+0x79/0x330 [ 797.188019][T19728] ext4_file_read_iter+0x1cc/0x290 [ 797.193172][T19728] copy_splice_read+0x471/0x6c0 [ 797.198061][T19728] splice_direct_to_actor+0x28f/0x670 [ 797.203483][T19728] do_splice_direct+0x119/0x1a0 [ 797.208378][T19728] do_sendfile+0x382/0x650 [ 797.212844][T19728] __x64_sys_sendfile64+0x105/0x150 [ 797.218080][T19728] x64_sys_call+0x2dc4/0x3020 [ 797.222811][T19728] do_syscall_64+0x12c/0x370 [ 797.227617][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.233557][T19728] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 797.235905][T19728] value changed: 0x00000000000001c1 -> 0x00000000000001c2 [ 797.243041][T19728] [ 797.245392][T19728] Reported by Kernel Concurrency Sanitizer on: [ 797.251591][T19728] CPU: 1 UID: 0 PID: 19728 Comm: syz.3.4535 Tainted: G W syzkaller #0 PREEMPT(full) [ 797.262573][T19728] Tainted: [W]=WARN [ 797.266403][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 797.276592][T19728] ================================================================== [ 797.372537][T19712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 797.393582][T19718] syz.8.4529: attempt to access beyond end of device [ 797.393582][T19718] loop8: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 797.426264][T19718] syz.8.4529: attempt to access beyond end of device [ 797.426264][T19718] loop8: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 797.454133][T19735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.468908][T19718] syz.8.4529: attempt to access beyond end of device [ 797.468908][T19718] loop8: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 797.483261][T19718] syz.8.4529: attempt to access beyond end of device [ 797.483261][T19718] loop8: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 797.497451][T19718] syz.8.4529: attempt to access beyond end of device [ 797.497451][T19718] loop8: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 797.520316][T19729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.536843][T19718] syz.8.4529: attempt to access beyond end of device [ 797.536843][T19718] loop8: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 797.561357][T19718] syz.8.4529: attempt to access beyond end of device [ 797.561357][T19718] loop8: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 797.575012][T19718] syz.8.4529: attempt to access beyond end of device [ 797.575012][T19718] loop8: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 797.588659][T19718] syz.8.4529: attempt to access beyond end of device [ 797.588659][T19718] loop8: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 797.602645][T19718] syz.8.4529: attempt to access beyond end of device [ 797.602645][T19718] loop8: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 797.649367][T19743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.669939][T16940] bridge_slave_1: left allmulticast mode [ 797.675639][T16940] bridge_slave_1: left promiscuous mode [ 797.681971][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.709930][T16940] bridge_slave_0: left allmulticast mode [ 797.715630][T16940] bridge_slave_0: left promiscuous mode [ 797.722667][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.731606][T16940] bridge_slave_1: left allmulticast mode [ 797.737380][T16940] bridge_slave_1: left promiscuous mode [ 797.743120][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.751053][T16940] bridge_slave_0: left allmulticast mode [ 797.757027][T16940] bridge_slave_0: left promiscuous mode [ 797.762754][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.884187][T16940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.894442][T16940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.904282][T16940] bond0 (unregistering): Released all slaves [ 797.989514][T16940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.000111][T16940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.010328][T16940] bond0 (unregistering): Released all slaves [ 798.046332][T16940] hsr_slave_0: left promiscuous mode [ 798.052161][T16940] hsr_slave_1: left promiscuous mode [ 798.058042][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.066202][T16940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.083690][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.091161][T16940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.102169][T16940] hsr_slave_0: left promiscuous mode [ 798.108116][T16940] hsr_slave_1: left promiscuous mode [ 798.113793][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.123268][T16940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.131929][T16940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.140112][T16940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.155062][T16940] veth1_macvtap: left promiscuous mode [ 798.161452][T16940] veth0_macvtap: left promiscuous mode [ 798.167337][T16940] veth1_vlan: left promiscuous mode [ 798.173504][T16940] veth0_vlan: left promiscuous mode [ 798.180562][T16940] veth1_macvtap: left promiscuous mode [ 798.186128][T16940] veth0_macvtap: left promiscuous mode [ 798.192636][T16940] veth1_vlan: left promiscuous mode [ 798.198029][T16940] veth0_vlan: left promiscuous mode [ 798.307198][T16940] team0 (unregistering): Port device team_slave_1 removed [ 798.317365][T16940] team0 (unregistering): Port device team_slave_0 removed [ 798.378635][T16940] team0 (unregistering): Port device team_slave_1 removed [ 798.390533][T16940] team0 (unregistering): Port device team_slave_0 removed [ 799.207824][T16940] bond0 (unregistering): Released all slaves [ 799.272065][T16940] bond0 (unregistering): Released all slaves [ 799.388615][T16940] team0: Port device bridge2 removed [ 799.431520][T16940] bond0 (unregistering): Released all slaves [ 799.488507][T16940] tipc: Disabling bearer [ 799.493836][T16940] tipc: Left network mode [ 799.502134][T16940] hsr_slave_0: left promiscuous mode [ 799.508004][T16940] hsr_slave_1: left promiscuous mode [ 799.515578][T16940] hsr_slave_0: left promiscuous mode [ 799.521463][T16940] hsr_slave_1: left promiscuous mode [ 799.530009][T16940] hsr_slave_0: left promiscuous mode [ 799.535700][T16940] hsr_slave_1: left promiscuous mode [ 799.548346][T16940] veth1_macvtap: left promiscuous mode [ 799.553928][T16940] veth0_macvtap: left promiscuous mode [ 799.559595][T16940] veth1_vlan: left promiscuous mode [ 799.564909][T16940] veth0_vlan: left promiscuous mode [ 799.571384][T16940] veth1_macvtap: left promiscuous mode [ 799.576881][T16940] veth0_macvtap: left promiscuous mode [ 799.582442][T16940] veth1_vlan: left promiscuous mode [ 799.587816][T16940] veth0_vlan: left promiscuous mode [ 799.593906][T16940] veth1_macvtap: left promiscuous mode [ 799.599412][T16940] veth0_macvtap: left promiscuous mode [ 799.604990][T16940] veth1_vlan: left promiscuous mode [ 799.610303][T16940] veth0_vlan: left promiscuous mode [ 800.711302][T16940] IPVS: stop unused estimator thread 0...