last executing test programs: 12.448768787s ago: executing program 1 (id=88): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0xfffffffb, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4048851}, 0x490) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x20000000, 0x0, 0x3, 0xffffffffffbf0000, 0x8000000005, 0x6, 0x20000001000, 0xf62, 0xfffffffd}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920b5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 11.182076136s ago: executing program 2 (id=95): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/warn_count', 0x181080, 0x30) io_setup(0x1, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[0x0]) syz_io_uring_setup(0x6fc7, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r2, 0x5, 0x71, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) syz_open_procfs(0x0, 0x0) 7.554783718s ago: executing program 2 (id=99): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.49372963s ago: executing program 4 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 7.46571162s ago: executing program 0 (id=101): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10000079, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), 0x0, 0x0, 0xd3, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1e, 0x3, 0x6, 0x5, 0x2040, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) close(r0) 7.445612811s ago: executing program 1 (id=102): unshare(0x28000600) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@dots}, {@nodots}, {@fat=@usefree}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@nodots}, {@nodots}, {@fat=@check_normal}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@gid}, {@fat=@nfs}, {@nodots}, {@fat=@discard}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x46}}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0xa01f, 0x100000110) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) keyctl$join(0x1, 0x0) request_key(0x0, &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x30048841, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$kcm(0xa, 0x3, 0x3a) 7.300592066s ago: executing program 0 (id=104): socket(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x41, 0x0) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0) syz_io_uring_setup(0x63ee, 0x0, 0x0, 0x0, 0x0) 7.141702791s ago: executing program 4 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)='>', 0x1}], 0x1}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) keyctl$chown(0x4, 0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) 6.571395518s ago: executing program 2 (id=106): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x204, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x2020, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e5"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x2, 0x7) r5 = socket(0x10, 0x2, 0x0) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340), 0x106, 0x1}}, 0x20) syz_open_pts(0xffffffffffffffff, 0x4400) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000026c0)=0x3d) 6.427907652s ago: executing program 4 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0006004024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005) 5.925849518s ago: executing program 0 (id=108): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000700)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syslog(0x3, 0x0, 0x0) 4.996847916s ago: executing program 2 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x8, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0x2, 0x200000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.973371147s ago: executing program 4 (id=111): ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) socket$inet_smc(0x2b, 0x1, 0x0) 4.927539939s ago: executing program 4 (id=112): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68380, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x2, @perf_bp={0x0, 0x1}, 0x10c8ec, 0x0, 0x1, 0x3, 0x6, 0x5ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x40a280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x15, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x5, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x158, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 4.854676931s ago: executing program 0 (id=113): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x4, 0x5ab, &(0x7f0000000c00)="$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") getresuid(&(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_config_ext={0x8, 0x6293}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x2c}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x1ff, 0x0, 0x8009}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000002000000020000", 0x1c) 4.727659645s ago: executing program 3 (id=114): r0 = syz_ublk_setup_io_uring(0x7d63, &(0x7f0000000740)={0x0, 0xc2ac, 0x1000, 0x5, 0x39a}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000700)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x96}) io_setup(0x3, &(0x7f0000008240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000000540)=""/138, 0x8a}], 0x2) 4.342111107s ago: executing program 3 (id=115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setgid(0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000005000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040002aaaaaaaaaabbac1414bbaaaaaa2aaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x203}}}}}}}, 0x0) 4.293957728s ago: executing program 1 (id=116): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000010000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000000011400000011000100000000000000000001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01efffffffffffffff000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.177959642s ago: executing program 3 (id=117): mount(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x26000a0, &(0x7f0000000140)='f\xffp.\xcb\xf5v4\xbb9^\xa4,\xf37\x9f\xdc\xd1\xb0\xceS\xf7\xc8\x89\x7f1Z\x13\x0f\x00\xc8\xa31\x86\xb0@e^\xdd\xaba*\x9coN\ny\xc6L\xd39=\xcc3\x80\x95') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0x3a5d88f819660b6a, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x4c, r3, 0x2b8ee6cf79dab3f, 0x70bd2c, 0xfffffffc, {0x2e}, [{@pci={{0x8}, {0x11}}, {0x7d}}]}, 0x4c}}, 0x800) writev(r0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) 4.085509865s ago: executing program 2 (id=118): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141001, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.842091552s ago: executing program 3 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0xbf, 0x8, 0x5, 0xd6b9, 0x4, "8c1acc79271dc754cd3d305ce67bee5e26fe75"}) ptrace$cont(0x1f, 0x0, 0x245, 0x5) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") 1.96653705s ago: executing program 2 (id=120): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) prctl$PR_SET_FP_MODE(0x42, 0x2) unshare(0x6a040000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) mmap(&(0x7f0000383000/0x2000)=nil, 0x2000, 0x3000004, 0x50, r0, 0x6f000) syz_open_dev$tty1(0xc, 0x4, 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$inet6(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x9000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x36) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.702150128s ago: executing program 1 (id=121): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x5ad7, &(0x7f0000000040)={0x0, 0xe5a6, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getpid() perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x6409}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7fffffff}]}}}]}, 0x54}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002540)=ANY=[@ANYBLOB="140000001000010000005e7918e30b1b3d60000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a0104000000000000000003000a0a0900010073797a30000000000800024000000007"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0x9d3, 0x2, 0x10001, 0x7, 0x7}) 623.636581ms ago: executing program 4 (id=122): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, 0x0, 0x0, 0x182, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40e8662e, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = fsmount(r2, 0x0, 0x9) fchdir(r4) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, './file1\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 622.429731ms ago: executing program 0 (id=123): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x80600, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 595.999352ms ago: executing program 1 (id=124): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, 0x0) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x400, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4010) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 550.707953ms ago: executing program 3 (id=125): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 398.771868ms ago: executing program 1 (id=126): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8005, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000040)={[{@init_itable}]}, 0x1, 0x627, &(0x7f00000007c0)="$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") ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) 354.905309ms ago: executing program 0 (id=127): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x24, 0x2, 0x6) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) 0s ago: executing program 3 (id=128): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="b50400bd4aae9e0a6bed471dcc727e790000040000000400000005000100000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r1, &(0x7f0000000600)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xffdc, 0x1, @remote, 0x40}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) kernel console output (not intermixed with test programs): [ 20.740890][ T28] audit: type=1400 audit(1781760422.511:100): avc: denied { write } for pid=3175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.764007][ T28] audit: type=1400 audit(1781760422.521:101): avc: denied { write } for pid=3186 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.851395][ T28] audit: type=1400 audit(1781760422.621:102): avc: denied { write } for pid=3189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.874430][ T28] audit: type=1400 audit(1781760422.631:103): avc: denied { write } for pid=3200 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.023540][ T28] audit: type=1400 audit(1781760422.791:104): avc: denied { write } for pid=3203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.046703][ T28] audit: type=1400 audit(1781760422.801:105): avc: denied { write } for pid=3214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.177911][ T28] audit: type=1400 audit(1781760422.941:106): avc: denied { write } for pid=3217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.201073][ T28] audit: type=1400 audit(1781760422.961:107): avc: denied { write } for pid=3228 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.446449][ T28] audit: type=1400 audit(1781760423.211:108): avc: denied { write } for pid=3232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.469494][ T28] audit: type=1400 audit(1781760423.231:109): avc: denied { write } for pid=3243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 30.863571][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 30.863589][ T28] audit: type=1400 audit(1781760432.631:117): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.892656][ T28] audit: type=1400 audit(1781760432.661:118): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.893338][ T3281] cgroup: Unknown subsys name 'net' [ 30.921488][ T28] audit: type=1400 audit(1781760432.681:119): avc: denied { unmount } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.061515][ T3281] cgroup: Unknown subsys name 'cpuset' [ 31.067657][ T3281] cgroup: Unknown subsys name 'rlimit' [ 31.197686][ T28] audit: type=1400 audit(1781760432.961:120): avc: denied { setattr } for pid=3281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.228497][ T28] audit: type=1400 audit(1781760432.961:121): avc: denied { create } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.249075][ T28] audit: type=1400 audit(1781760432.961:122): avc: denied { write } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.269648][ T28] audit: type=1400 audit(1781760432.961:123): avc: denied { read } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.290148][ T28] audit: type=1400 audit(1781760432.971:124): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.315153][ T28] audit: type=1400 audit(1781760432.971:125): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.322683][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.338558][ T28] audit: type=1400 audit(1781760432.981:126): avc: denied { read } for pid=3015 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.449523][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.743108][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.750676][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.757976][ T3293] bridge_slave_0: entered allmulticast mode [ 32.764464][ T3293] bridge_slave_0: entered promiscuous mode [ 32.784429][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.791566][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.798684][ T3293] bridge_slave_1: entered allmulticast mode [ 32.805228][ T3293] bridge_slave_1: entered promiscuous mode [ 32.818469][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.825649][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.832784][ T3300] bridge_slave_0: entered allmulticast mode [ 32.839185][ T3300] bridge_slave_0: entered promiscuous mode [ 32.860838][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.867959][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.875104][ T3300] bridge_slave_1: entered allmulticast mode [ 32.881742][ T3300] bridge_slave_1: entered promiscuous mode [ 32.907183][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.920315][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.927425][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.934592][ T3298] bridge_slave_0: entered allmulticast mode [ 32.941021][ T3298] bridge_slave_0: entered promiscuous mode [ 32.947541][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.954633][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.961884][ T3294] bridge_slave_0: entered allmulticast mode [ 32.968233][ T3294] bridge_slave_0: entered promiscuous mode [ 32.979987][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.997786][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.004917][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.012264][ T3298] bridge_slave_1: entered allmulticast mode [ 33.018746][ T3298] bridge_slave_1: entered promiscuous mode [ 33.025097][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.032193][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.039283][ T3294] bridge_slave_1: entered allmulticast mode [ 33.045699][ T3294] bridge_slave_1: entered promiscuous mode [ 33.053052][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.063255][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.076374][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.083571][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.090719][ T3299] bridge_slave_0: entered allmulticast mode [ 33.096975][ T3299] bridge_slave_0: entered promiscuous mode [ 33.117184][ T3293] team0: Port device team_slave_0 added [ 33.123574][ T3293] team0: Port device team_slave_1 added [ 33.129239][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.136348][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.143525][ T3299] bridge_slave_1: entered allmulticast mode [ 33.149766][ T3299] bridge_slave_1: entered promiscuous mode [ 33.181547][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.191830][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.201928][ T3300] team0: Port device team_slave_0 added [ 33.207844][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.214901][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.241024][ T3293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.257563][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.270919][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.280857][ T3300] team0: Port device team_slave_1 added [ 33.286699][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.293837][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.319934][ T3293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.331848][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.361189][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.371253][ T3298] team0: Port device team_slave_0 added [ 33.381876][ T3294] team0: Port device team_slave_0 added [ 33.388891][ T3294] team0: Port device team_slave_1 added [ 33.394792][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.401910][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.427855][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.444209][ T3298] team0: Port device team_slave_1 added [ 33.459289][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.466315][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.492463][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.523734][ T3299] team0: Port device team_slave_0 added [ 33.534316][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.541344][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.567353][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.578528][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.585539][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.611669][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.623254][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.630275][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.656361][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.667839][ T3299] team0: Port device team_slave_1 added [ 33.675933][ T3293] hsr_slave_0: entered promiscuous mode [ 33.681957][ T3293] hsr_slave_1: entered promiscuous mode [ 33.688243][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.695235][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.721168][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.755851][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.762939][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.788936][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.806918][ T3300] hsr_slave_0: entered promiscuous mode [ 33.812917][ T3300] hsr_slave_1: entered promiscuous mode [ 33.818773][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.824542][ T3300] Cannot create hsr debugfs directory [ 33.835521][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.842781][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.868807][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.890659][ T3294] hsr_slave_0: entered promiscuous mode [ 33.896744][ T3294] hsr_slave_1: entered promiscuous mode [ 33.902517][ T3294] debugfs: 'hsr0' already exists in 'hsr' [ 33.908246][ T3294] Cannot create hsr debugfs directory [ 33.965896][ T3298] hsr_slave_0: entered promiscuous mode [ 33.972134][ T3298] hsr_slave_1: entered promiscuous mode [ 33.978107][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.983888][ T3298] Cannot create hsr debugfs directory [ 34.007597][ T3299] hsr_slave_0: entered promiscuous mode [ 34.013705][ T3299] hsr_slave_1: entered promiscuous mode [ 34.019618][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.025486][ T3299] Cannot create hsr debugfs directory [ 34.178535][ T3293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.187292][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.197333][ T3293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.205838][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.218412][ T3293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.226739][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.237149][ T3293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.245930][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.276066][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.284931][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.298608][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.307253][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.319037][ T3294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.327444][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.335120][ T3294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.343689][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.351310][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.359913][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.371620][ T3294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.380022][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.387522][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.395786][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.409170][ T3294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.417668][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.439113][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.447800][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.455639][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.464102][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.472765][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.481232][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.488746][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.497240][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.538027][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.546664][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.554712][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.563510][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.572353][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.582916][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.591441][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.599073][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.607528][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.626302][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.642397][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.649496][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.666919][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.674028][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.696541][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.726309][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.736944][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.756852][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.764122][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.784349][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.791455][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.800465][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.819552][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.830559][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.840378][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.847461][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.858381][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.865640][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.888655][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.895779][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.907874][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.923034][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.930260][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.972133][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.988444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.995586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.016427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.023591][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.034471][ T3294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.138910][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.175794][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.266380][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.297261][ T3293] veth0_vlan: entered promiscuous mode [ 35.318125][ T3293] veth1_vlan: entered promiscuous mode [ 35.352004][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.364272][ T3293] veth0_macvtap: entered promiscuous mode [ 35.374864][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.389693][ T3293] veth1_macvtap: entered promiscuous mode [ 35.399446][ T3300] veth0_vlan: entered promiscuous mode [ 35.411532][ T3300] veth1_vlan: entered promiscuous mode [ 35.434409][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.455981][ T3298] veth0_vlan: entered promiscuous mode [ 35.463402][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.477405][ T3300] veth0_macvtap: entered promiscuous mode [ 35.488777][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.497647][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.509875][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.519802][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.538190][ T3298] veth1_vlan: entered promiscuous mode [ 35.544509][ T3300] veth1_macvtap: entered promiscuous mode [ 35.571918][ T3294] veth0_vlan: entered promiscuous mode [ 35.591444][ T3298] veth0_macvtap: entered promiscuous mode [ 35.605397][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.614408][ T3294] veth1_vlan: entered promiscuous mode [ 35.614886][ T3293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.628248][ T3294] veth0_macvtap: entered promiscuous mode [ 35.642774][ T3294] veth1_macvtap: entered promiscuous mode [ 35.654971][ T3298] veth1_macvtap: entered promiscuous mode [ 35.666316][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.696610][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.710680][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.728346][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.735680][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756088][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.767438][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.783456][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.792138][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.812658][ T3299] veth0_vlan: entered promiscuous mode [ 35.823151][ T3423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.832130][ T3423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.846227][ T3423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.859198][ T3423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.873484][ T3299] veth1_vlan: entered promiscuous mode [ 35.879960][ T3423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889219][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.904979][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.914288][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.947915][ T3299] veth0_macvtap: entered promiscuous mode [ 35.966964][ T3299] veth1_macvtap: entered promiscuous mode [ 36.015615][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.015958][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 36.015977][ T28] audit: type=1400 audit(1781760437.781:161): avc: denied { create } for pid=3509 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 36.039343][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.099361][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.100735][ T28] audit: type=1400 audit(1781760437.851:162): avc: denied { map_create } for pid=3508 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.127553][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.140496][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.152911][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.198895][ T28] audit: type=1400 audit(1781760437.961:163): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.246121][ T28] audit: type=1400 audit(1781760437.991:164): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.295084][ T28] audit: type=1400 audit(1781760437.991:165): avc: denied { open } for pid=3300 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.320465][ T28] audit: type=1400 audit(1781760437.991:166): avc: denied { ioctl } for pid=3300 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.358937][ T28] audit: type=1400 audit(1781760438.041:167): avc: denied { create } for pid=3517 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.435065][ T28] audit: type=1400 audit(1781760438.041:168): avc: denied { bind } for pid=3517 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.496555][ T28] audit: type=1400 audit(1781760438.041:169): avc: denied { listen } for pid=3517 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.560535][ T28] audit: type=1400 audit(1781760438.041:170): avc: denied { connect } for pid=3517 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.580999][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 36.764999][ T3542] process 'syz.3.9' launched '/dev/fd/7' with NULL argv: empty string added [ 37.752226][ T3599] syz.4.11 (3599) used greatest stack depth: 9280 bytes left [ 37.837297][ T3619] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12'. [ 38.017396][ T3663] netlink: 'syz.1.14': attribute type 17 has an invalid length. [ 39.253802][ T3710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.292342][ T3710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.864632][ T3728] netlink: 5 bytes leftover after parsing attributes in process `syz.4.21'. [ 39.903218][ T3728] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 39.983570][ T3728] 0ªî{X¹¦: entered allmulticast mode [ 40.010012][ T3728] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 40.088030][ T3732] syzkaller0: entered promiscuous mode [ 40.093643][ T3732] syzkaller0: entered allmulticast mode [ 40.281270][ T3741] netlink: 'syz.4.25': attribute type 11 has an invalid length. [ 40.308493][ T3741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3741 comm=syz.4.25 [ 40.392487][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 40.723575][ T3757] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 40.973640][ T3762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32'. [ 41.056862][ T3769] loop4: detected capacity change from 0 to 128 [ 41.069525][ T3772] loop2: detected capacity change from 0 to 128 [ 41.081942][ T3745] loop0: detected capacity change from 0 to 1024 [ 41.092318][ T3772] ======================================================= [ 41.092318][ T3772] WARNING: The mand mount option has been deprecated and [ 41.092318][ T3772] and is ignored by this kernel. Remove the mand [ 41.092318][ T3772] option from the mount to silence this warning. [ 41.092318][ T3772] ======================================================= [ 41.135601][ T3745] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.149994][ T3766] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 41.155887][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 41.155902][ T28] audit: type=1400 audit(1781760442.921:321): avc: denied { mount } for pid=3771 comm="syz.2.36" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.179531][ T3745] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 41.201583][ T3769] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.204951][ T28] audit: type=1400 audit(1781760442.971:322): avc: denied { write } for pid=3765 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.227036][ T3766] team0: Device wg2 is of different type [ 41.244921][ T3745] EXT4-fs (loop0): invalid journal inode [ 41.251158][ T3745] EXT4-fs (loop0): can't get journal size [ 41.267869][ T3745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.281832][ T28] audit: type=1400 audit(1781760443.051:323): avc: denied { mount } for pid=3744 comm="syz.0.27" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.339818][ T3781] loop1: detected capacity change from 0 to 512 [ 41.384695][ T3781] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.400581][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.429409][ T3781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.469794][ T3781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 41.474568][ T28] audit: type=1400 audit(1781760443.231:324): avc: denied { create } for pid=3788 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.486326][ T3781] System zones: [ 41.502201][ T3789] syzkaller0: entered promiscuous mode [ 41.508456][ T3781] 1-12 [ 41.530399][ T3789] syzkaller0: entered allmulticast mode [ 41.557271][ T3781] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.582645][ T28] audit: type=1400 audit(1781760443.271:325): avc: denied { ioctl } for pid=3788 comm="syz.0.40" path="socket:[5364]" dev="sockfs" ino=5364 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.609444][ T3781] EXT4-fs (loop1): 1 truncate cleaned up [ 41.617036][ T3781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.656127][ T28] audit: type=1400 audit(1781760443.421:326): avc: denied { ioctl } for pid=3791 comm="syz.3.41" path="socket:[5379]" dev="sockfs" ino=5379 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 41.705755][ T28] audit: type=1400 audit(1781760443.451:327): avc: denied { getopt } for pid=3791 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.825561][ T28] audit: type=1400 audit(1781760443.551:328): avc: denied { setopt } for pid=3780 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.932082][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.248838][ T28] audit: type=1400 audit(1781760444.011:329): avc: denied { tracepoint } for pid=3800 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.882975][ T28] audit: type=1400 audit(1781760444.651:330): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.226300][ T3814] loop2: detected capacity change from 0 to 512 [ 43.285258][ T3814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.338645][ T3814] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.463762][ T3298] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 43.520943][ T3298] EXT4-fs (loop2): Remounting filesystem read-only [ 43.567697][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.581414][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.611190][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.175958][ T3844] loop2: detected capacity change from 0 to 1024 [ 44.363219][ T3844] EXT4-fs (loop2): Invalid log block size: 3248 [ 44.627200][ T3849] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 45.017286][ T3849] team0 (unregistering): Port device team_slave_0 removed [ 45.058089][ T3849] team0 (unregistering): Port device team_slave_1 removed [ 45.298761][ T3863] loop0: detected capacity change from 0 to 4096 [ 45.305544][ T3863] ext4: Bad value for 'commit' [ 45.835926][ T3866] syz_tun: entered allmulticast mode [ 45.845848][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 45.855896][ T3865] syz_tun: left allmulticast mode [ 46.453431][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 46.453461][ T28] audit: type=1400 audit(1781760448.211:352): avc: denied { map } for pid=3874 comm="syz.1.67" path="socket:[6202]" dev="sockfs" ino=6202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 47.022684][ T28] audit: type=1400 audit(1781760448.211:353): avc: denied { accept } for pid=3874 comm="syz.1.67" path="socket:[6202]" dev="sockfs" ino=6202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 47.070941][ T28] audit: type=1400 audit(1781760704.531:354): avc: denied { map } for pid=3874 comm="syz.1.67" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.228728][ T28] audit: type=1400 audit(1781760704.531:355): avc: denied { read write } for pid=3874 comm="syz.1.67" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.292354][ T28] audit: type=1400 audit(1781760704.531:356): avc: denied { create } for pid=3874 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.335967][ T28] audit: type=1400 audit(1781760704.531:357): avc: denied { write } for pid=3874 comm="syz.1.67" path="socket:[5473]" dev="sockfs" ino=5473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.336094][ T28] audit: type=1400 audit(1781760704.951:358): avc: denied { create } for pid=3887 comm="syz.4.70" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.336116][ T28] audit: type=1400 audit(1781760704.961:359): avc: denied { write } for pid=3887 comm="syz.4.70" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 47.336141][ T28] audit: type=1400 audit(1781760704.961:360): avc: denied { ioctl } for pid=3882 comm="syz.2.68" path="socket:[6222]" dev="sockfs" ino=6222 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.336168][ T28] audit: type=1400 audit(1781760704.981:361): avc: denied { write } for pid=3887 comm="syz.4.70" name="file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.490691][ T3899] capability: warning: `syz.2.72' uses deprecated v2 capabilities in a way that may be insecure [ 48.025522][ T3871] loop3: detected capacity change from 0 to 512 [ 48.225919][ T3907] netlink: 112 bytes leftover after parsing attributes in process `syz.4.73'. [ 48.312285][ T3937] loop4: detected capacity change from 0 to 1024 [ 48.315866][ T3871] EXT4-fs: quotafile must be on filesystem root [ 48.342471][ T3937] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 48.376465][ T3937] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.399670][ T3937] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #32: comm syz.4.73: iget: special inode unallocated [ 48.452986][ T3937] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 48.453202][ T3937] EXT4-fs (loop4): no journal found [ 48.462591][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 48.462610][ C0] EXT4-fs (loop4): initial error at time 1781760706: ext4_get_journal_inode:5896: inode 32 [ 48.462637][ C0] EXT4-fs (loop4): last error at time 1781760706: ext4_get_journal_inode:5896: inode 32 [ 48.667027][ T3966] netlink: 'syz.3.66': attribute type 21 has an invalid length. [ 48.708301][ T3966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.66'. [ 48.806852][ T3956] loop0: detected capacity change from 0 to 512 [ 48.917856][ T3956] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.966029][ T3972] loop3: detected capacity change from 0 to 2048 [ 48.990461][ T3956] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 49.036367][ T3972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.228418][ T3981] tun0: tun_chr_ioctl cmd 2147767506 [ 49.278951][ T3984] syzkaller0: entered promiscuous mode [ 49.284548][ T3984] syzkaller0: entered allmulticast mode [ 49.420998][ T3978] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 50.500086][ T3989] loop0: detected capacity change from 0 to 512 [ 50.561324][ T3989] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.596179][ T3997] loop2: detected capacity change from 0 to 512 [ 50.613308][ T3989] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.643704][ T3997] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 50.657872][ T3989] EXT4-fs warning (device loop0): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.687897][ T3997] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 50.720978][ T3989] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 50.728014][ T3997] EXT4-fs (loop2): 1 truncate cleaned up [ 50.745558][ T3997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.763787][ T3989] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #16: comm syz.0.83: corrupted xattr block 31: invalid header [ 50.809216][ T3989] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 50.810790][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.826717][ C0] EXT4-fs (loop0): initial error at time 1781760708: ext4_xattr_delete_inode:2972: inode 16 [ 50.836932][ C0] EXT4-fs (loop0): last error at time 1781760708: ext4_xattr_delete_inode:2972: inode 16 [ 50.847264][ T3989] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 50.873923][ T3989] EXT4-fs (loop0): 1 orphan inode deleted [ 50.895116][ T3989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.005337][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.101037][ T4007] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 51.127806][ T3997] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 51.191090][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.206971][ T4008] gretap1: entered promiscuous mode [ 51.248187][ T4009] macvlan2: entered promiscuous mode [ 51.265086][ T4009] macvlan2: entered allmulticast mode [ 51.284451][ T4013] loop3: detected capacity change from 0 to 1756 [ 51.311312][ T4013] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 51.571051][ T4026] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 51.571421][ T4022] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 51.584104][ T4005] loop1: detected capacity change from 0 to 512 [ 51.611696][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 51.611712][ T28] audit: type=1400 audit(1781760709.371:381): avc: denied { write } for pid=3996 comm="syz.2.86" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.716663][ T4005] EXT4-fs: Ignoring removed i_version option [ 51.951162][ T28] audit: type=1400 audit(1781760709.711:382): avc: denied { read write } for pid=4030 comm="syz.3.93" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.100218][ T28] audit: type=1400 audit(1781760709.711:383): avc: denied { open } for pid=4030 comm="syz.3.93" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.223568][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.354751][ T28] audit: type=1400 audit(1781760710.121:384): avc: denied { sqpoll } for pid=4038 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.527281][ T4005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.808698][ T4005] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.775590][ T28] audit: type=1400 audit(1781760712.541:385): avc: denied { remount } for pid=4004 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.276583][ T4049] loop3: detected capacity change from 0 to 1024 [ 55.306488][ T4049] EXT4-fs: Ignoring removed orlov option [ 55.346325][ T4049] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 55.378471][ T4049] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.395712][ T4049] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.410203][ T4049] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.97: Invalid inode table block 0 in block_group 0 [ 55.434947][ T4049] loop3: lost filesystem error report for type 5 error -117 [ 55.435136][ T4049] EXT4-fs (loop3): Remounting filesystem read-only [ 55.442479][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 55.442497][ C1] EXT4-fs (loop3): initial error at time 1781760713: __ext4_get_inode_loc:4885 [ 55.442523][ C1] EXT4-fs (loop3): last error at time 1781760713: __ext4_get_inode_loc:4885 [ 55.516492][ T4049] Quota error (device loop3): write_blk: dquota write failed [ 55.531599][ T4049] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 55.552938][ T4049] EXT4-fs (loop3): 1 truncate cleaned up [ 55.832025][ T4054] tipc: Failed to remove unknown binding: 66,0,0/0:158530199/158530200 [ 55.848151][ T28] audit: type=1400 audit(1781760713.601:386): avc: denied { bind } for pid=4053 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.882241][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.899184][ T4054] tipc: Failed to remove unknown binding: 66,0,0/0:158530199/158530200 [ 55.926883][ T4056] loop2: detected capacity change from 0 to 512 [ 55.933340][ T4046] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.941762][ T28] audit: type=1400 audit(1781760713.691:387): avc: denied { ioctl } for pid=4055 comm="syz.2.99" path="socket:[5615]" dev="sockfs" ino=5615 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 55.981696][ T4056] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.015204][ T28] audit: type=1400 audit(1781760713.781:388): avc: denied { write } for pid=4059 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.035572][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.041507][ T4060] netlink: 128 bytes leftover after parsing attributes in process `syz.0.101'. [ 56.058714][ T4056] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.99: bad orphan inode 131083 [ 56.069614][ T4060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.085195][ T4056] loop2: lost filesystem error report for type 5 error -117 [ 56.085910][ T4056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.094889][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.206122][ T3940] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.331790][ T3940] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.351680][ T3940] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.360499][ T3940] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.412853][ T4064] loop1: detected capacity change from 0 to 256 [ 56.937242][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.287655][ T4077] syzkaller0: entered promiscuous mode [ 57.306889][ T4077] syzkaller0: entered allmulticast mode [ 57.410846][ T4079] Zero length message leads to an empty skb [ 58.657389][ T4097] loop0: detected capacity change from 0 to 1024 [ 58.679618][ T4098] loop4: detected capacity change from 0 to 512 [ 58.700115][ T4097] __quota_error: 5 callbacks suppressed [ 58.700134][ T4097] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 58.749866][ T4098] EXT4-fs: inline encryption not supported [ 58.775485][ T4097] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 58.790541][ T4097] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.113: Failed to acquire dquot type 0 [ 58.801825][ T4097] loop0: lost filesystem error report for type 5 error -117 [ 58.805942][ T4097] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, [ 58.813319][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 58.813340][ C0] EXT4-fs (loop0): initial error at time 1781760716: ext4_acquire_dquot:7032 [ 58.813365][ C0] EXT4-fs (loop0): last error at time 1781760716: ext4_acquire_dquot:7032 [ 58.844807][ T4097] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 58.846552][ T28] audit: type=1400 audit(1781760716.611:394): avc: denied { setopt } for pid=4101 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.877533][ T4098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.911151][ T4098] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.923007][ T28] audit: type=1400 audit(1781760716.611:395): avc: denied { getopt } for pid=4101 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.928194][ T4097] EXT4-fs (loop0): 1 truncate cleaned up [ 58.988258][ T4098] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.009262][ T4097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.043725][ T4098] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.112: bg 0: block 248: padding at end of block bitmap is not set [ 59.078649][ T4098] loop4: lost filesystem error report for type 5 error -117 [ 59.079023][ T4098] Quota error (device loop4): write_blk: dquota write failed [ 59.086410][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 59.086430][ C1] EXT4-fs (loop4): last error at time 1781760716: ext4_validate_block_bitmap:441 [ 59.138825][ T4098] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 59.215079][ T4098] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.112: Failed to acquire dquot type 1 [ 59.253848][ T28] audit: type=1400 audit(1781760716.991:396): avc: denied { read append } for pid=4108 comm="syz.1.116" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.291522][ T4098] loop4: lost filesystem error report for type 5 error -28 [ 59.308147][ T4098] EXT4-fs (loop4): 1 truncate cleaned up [ 59.322331][ T28] audit: type=1400 audit(1781760717.011:397): avc: denied { open } for pid=4108 comm="syz.1.116" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.386182][ T28] audit: type=1400 audit(1781760717.021:398): avc: denied { ioctl } for pid=4108 comm="syz.1.116" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.392926][ T4098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 59.611379][ T4109] netlink: 264 bytes leftover after parsing attributes in process `syz.1.116'. [ 59.630165][ T4109] netlink: 264 bytes leftover after parsing attributes in process `syz.1.116'. [ 60.604345][ T28] audit: type=1400 audit(1781760717.551:399): avc: denied { write } for pid=4114 comm="syz.2.118" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.360864][ T4123] loop3: detected capacity change from 0 to 512 [ 61.642190][ T4123] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.119: corrupted inode contents [ 61.657344][ T4123] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.660579][ T4123] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.119: mark_inode_dirty error [ 61.661272][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 61.694540][ C1] EXT4-fs (loop3): initial error at time 1781760719: ext4_do_update_inode:5690: inode 16 [ 61.708000][ C1] EXT4-fs (loop3): last error at time 1781760719: ext4_do_update_inode:5690: inode 16 [ 61.727121][ T4123] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.731136][ T4123] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.119: corrupted inode contents [ 61.759786][ T4123] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.764147][ T4123] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.119: mark_inode_dirty error [ 61.822236][ T4123] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.915745][ T4123] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.119: corrupted inode contents [ 61.939051][ T4123] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.942173][ T4123] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 62.026701][ T4123] loop3: lost filesystem error report for type 5 error -117 [ 62.034165][ T4123] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.119: corrupted inode contents [ 62.068866][ T4123] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.073683][ T4123] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.119: mark_inode_dirty error [ 62.099804][ T4123] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.107840][ T4123] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 62.135656][ T4123] loop3: lost filesystem error report for type 5 error -117 [ 62.150126][ T4123] EXT4-fs (loop3): 1 truncate cleaned up [ 62.190985][ T4123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.208051][ T4123] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.664446][ T4130] loop2: detected capacity change from 0 to 512 [ 62.722993][ T3942] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:15: Failed to release dquot type 1 [ 62.796880][ T4123] syz.3.119 (4123) used greatest stack depth: 8960 bytes left [ 62.857360][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 62.875580][ T4130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.917247][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.939105][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.999773][ T4130] EXT4-fs (loop2): 1 truncate cleaned up [ 63.027584][ T4130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.074893][ T4144] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 63.158305][ T4144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.230145][ T4139] loop4: detected capacity change from 0 to 128 [ 63.243835][ T4146] netlink: 84 bytes leftover after parsing attributes in process `syz.1.126'. [ 63.280640][ T4144] bond1: (slave ip6gretap1): making interface the new active one [ 63.286521][ T4144] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 63.618379][ T4149] ================================================================== [ 63.626525][ T4149] BUG: KCSAN: data-race in __hrtimer_rearm_deferred / print_cpu [ 63.634222][ T4149] [ 63.636565][ T4149] write to 0xffff888237c1b768 of 8 bytes by task 4139 on cpu 0: [ 63.644204][ T4149] __hrtimer_rearm_deferred+0x531/0x650 [ 63.649778][ T4149] irqentry_exit+0x58f/0x610 [ 63.654412][ T4149] sysvec_apic_timer_interrupt+0x44/0x80 [ 63.660068][ T4149] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 63.666163][ T4149] bdev_open+0x38/0x7d0 [ 63.670342][ T4149] bdev_file_open_by_dev+0x1cc/0x230 [ 63.675644][ T4149] setup_bdev_super+0x46/0x370 [ 63.680441][ T4149] get_tree_bdev_flags+0x21c/0x300 [ 63.685583][ T4149] get_tree_bdev+0x1f/0x30 [ 63.690054][ T4149] ext4_get_tree+0x1c/0x30 [ 63.694498][ T4149] vfs_get_tree+0x57/0x1d0 [ 63.698948][ T4149] do_new_mount+0x288/0x8d0 [ 63.703496][ T4149] path_mount+0x4ad/0xb90 [ 63.707856][ T4149] __se_sys_mount+0x28c/0x2e0 [ 63.712549][ T4149] __x64_sys_mount+0x67/0x80 [ 63.717199][ T4149] x64_sys_call+0x2d61/0x3020 [ 63.721899][ T4149] do_syscall_64+0x136/0x3c0 [ 63.726531][ T4149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.732440][ T4149] [ 63.734777][ T4149] read to 0xffff888237c1b768 of 8 bytes by task 4149 on cpu 1: [ 63.742336][ T4149] print_cpu+0x2fb/0x5d0 [ 63.746623][ T4149] timer_list_show+0x107/0x170 [ 63.751416][ T4149] seq_read_iter+0x2d9/0x8f0 [ 63.756039][ T4149] proc_reg_read_iter+0x110/0x180 [ 63.761091][ T4149] copy_splice_read+0x47a/0x6b0 [ 63.765976][ T4149] splice_direct_to_actor+0x261/0x680 [ 63.771377][ T4149] do_splice_direct+0x119/0x1a0 [ 63.776263][ T4149] do_sendfile+0x37d/0x640 [ 63.780694][ T4149] __x64_sys_sendfile64+0x105/0x150 [ 63.785900][ T4149] x64_sys_call+0x2dc4/0x3020 [ 63.790597][ T4149] do_syscall_64+0x136/0x3c0 [ 63.795220][ T4149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.801121][ T4149] [ 63.803539][ T4149] value changed: 0x7fffffffffffffff -> 0x0000000ecf4ec1ed [ 63.810647][ T4149] [ 63.812970][ T4149] Reported by Kernel Concurrency Sanitizer on: [ 63.819294][ T4149] CPU: 1 UID: 0 PID: 4149 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.828503][ T4149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 63.838654][ T4149] ================================================================== [ 63.862215][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 63.862233][ T28] audit: type=1400 audit(1781760721.621:409): avc: denied { shutdown } for pid=4153 comm="syz.3.128" lport=52081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.873675][ T4146] loop1: detected capacity change from 0 to 1024 [ 63.928286][ T4146] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 63.945558][ T4146] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.982053][ T4146] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.126: iget: special inode unallocated [ 64.028587][ T4146] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 64.028987][ T4146] EXT4-fs (loop1): no journal found [ 64.038358][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.038439][ C1] EXT4-fs (loop1): initial error at time 1781760721: ext4_get_journal_inode:5896: inode 32 [ 64.038511][ C1] EXT4-fs (loop1): last error at time 1781760721: ext4_get_journal_inode:5896: inode 32 [ 64.224117][ T4139] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.276628][ T4139] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.387998][ T4161] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2 [ 64.428652][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.460976][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.