last executing test programs: 13m47.62313446s ago: executing program 4 (id=349): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 13m47.360507764s ago: executing program 4 (id=353): socket(0x8000000010, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100080, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m46.725940883s ago: executing program 4 (id=365): socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x7309, &(0x7f0000000040)={0x0, 0x3960, 0x13c40, 0x0, 0x3ca}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m46.725838653s ago: executing program 32 (id=365): socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x7309, &(0x7f0000000040)={0x0, 0x3960, 0x13c40, 0x0, 0x3ca}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m55.338876652s ago: executing program 33 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x5, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xfffffff2, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x77, 0x385, 0x3ff, 0x100, 0x2, 0x5, 0x4, 0x7, 0xb9, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x5, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x0, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x1, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff29, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 9m40.247865635s ago: executing program 5 (id=1842): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48020000", @ANYRES32=r4, @ANYBLOB="83040500000000002800128008000100736974001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 9m39.285632899s ago: executing program 5 (id=1848): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000031000/0x2000)=nil, 0x2000) socket(0x29, 0x5, 0x0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendfile(r0, r2, 0x0, 0xfffa83) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9m37.967606818s ago: executing program 5 (id=1860): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpgrp(0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, 0x0, 0x40841) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030ec0007f03e3f7000000d884cff9ca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 9m35.300130368s ago: executing program 5 (id=1865): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_init_net_socket$x25(0x9, 0x5, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) getpid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, &(0x7f0000000200)={0xfba, {{0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}}, {{0xa, 0x4e23, 0x3, @private0, 0xc}}}, 0x108) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550d, &(0x7f0000001080)) r2 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet6(r2, 0x0, 0xc0) socket$netlink(0x10, 0x3, 0x0) 9m34.075508566s ago: executing program 5 (id=1868): socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) getpid() mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x53086000) 9m33.966690048s ago: executing program 5 (id=1871): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 9m33.930639348s ago: executing program 34 (id=1871): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 6m49.657924065s ago: executing program 3 (id=2438): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f0000000280)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]}) timer_create(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=0xffffffffffffffff, 0xfbc35d5c7ea6f28b, 0x0, 0x7ff, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r0, r1, 0x11, 0x0, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB], 0x20) syz_pidfd_open(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f0000000400)=ANY=[]) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000180)="80fd01ff03", 0x5}], 0x1, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 6m48.60597931s ago: executing program 3 (id=2446): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x71, 0x6, 0x400, 0x1, 0x7, r1}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7) sendmsg$nl_route(r0, 0x0, 0x4004000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) 6m47.580602106s ago: executing program 3 (id=2449): socket(0x28, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x109217, 0x0, 0x43a1bd78, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9ff096ab5ee0d9e554274de7437782eb01001800000000000000100000001000000004000000010000000000"], 0x0, 0x2c, 0x0, 0x8, 0xfffffffa}, 0x28) r9 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r9, 0x110, 0x4, 0x0, 0x4) listen(r8, 0x50) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x1000}, 0x1c) listen(r7, 0x50) listen(r7, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids'], 0xb) 6m46.870316316s ago: executing program 3 (id=2453): connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x4, &(0x7f0000000000)=[{0x5, 0xf4, 0x0, 0x5}, {0x0, 0x1, 0x0, 0xa}, {0x5, 0xf6, 0x2, 0x80}, {0x0, 0x8, 0x1}]}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xb1, 0x9, 0x3, 0x36061, r1, 0x80000000, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0xd, @void, @value, @value=r1}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x9, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {0x0}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) 6m46.057040968s ago: executing program 3 (id=2456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x100, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x20000400) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000100039042abd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e22000005000900290000000800140005000000080003000a0101006c03168010"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0xde74, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 6m45.592278565s ago: executing program 3 (id=2459): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41e27af3a3a924308cb010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d0499ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f44363853e21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4cea22d95bd7bea39c5dcffb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5dda71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d572ed87cf12b9ce4e527266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f327b3669c159abfa125ee992a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b450c894a3e95d26e14259fdb65aa49761847cc1c13f18742072e80cbed0d5622618817583d0365f807882e539ff07c9205d3ee72efb8dd6853a02f49abd1b38d4571666a4d7d98c4f34f082eea025ac7b9e9fd030791df5d98a03ed76cdbb3241f96f22b6dd0da2bd8105c3408eeb8543ebc5de0849c1f31bd94033655fd11430fd1"], 0x4, 0x272, &(0x7f0000001f40)="$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") socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) socket$kcm(0x11, 0xa, 0x300) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4081) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 6m45.591924485s ago: executing program 35 (id=2459): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$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") socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) socket$kcm(0x11, 0xa, 0x300) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4081) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 5m0.799566143s ago: executing program 6 (id=2730): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000001380)={[{@block_validity}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@orlov}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@inlinecrypt}, {@data_ordered}]}, 0x3, 0x57b, &(0x7f0000001440)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) tee(r3, r4, 0x9, 0xa) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5a59, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) 5m0.115937593s ago: executing program 6 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}}, 0x8004) r2 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) ptrace(0x10, r2) syz_pidfd_open(r2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r3, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00'}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) 4m58.343016429s ago: executing program 6 (id=2744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setgid(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x3, 0x0, 0x0, 0x5, 0xffff, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = dup3(0xffffffffffffffff, r2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @empty, 0x4005}, 0x1c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20008041) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f000500000008000400c20002"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001e00010000000000000000003bcb0000010000070000000008000000000000000000000000000000781fd348cbe9fea11676ffc09f6f469a47429226ab81c790558295c921610a650ddbdc82e97574d86569bdb96c2751ae815a7f9248a5ea82d26937b9e2fa723be82fd27a05b53d76132efe7489"], 0x2c}}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000480)=@ethtool_test={0x1a, 0x9, 0x10}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getresgid(&(0x7f0000000440), &(0x7f00000006c0), &(0x7f0000000700)=0x0) setresgid(0x0, 0x0, r10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcf", 0x5}], 0x1, 0x1) 4m58.067553903s ago: executing program 6 (id=2746): r0 = socket$inet(0x2, 0x1, 0x0) dup(0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x646, &(0x7f0000000740)="$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") r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) fsopen(&(0x7f0000000180)='proc\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x7, 0x0, 0x8, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x4, 0x7, 0x4, 0xcb6, 0x8]}, &(0x7f00000002c0)=0x78) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) io_setup(0x10, &(0x7f0000000200)=0x0) io_getevents(r9, 0x1, 0x0, &(0x7f0000000680), &(0x7f0000000140)={0x0, 0x3938700}) 4m56.048229493s ago: executing program 6 (id=2751): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0xf8, 0x1c8, 0x3c8, 0xf8, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc0}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x90a3b4a3e4f91378) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x38, 0x38]}}}}]}) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r4, @ANYBLOB=',wfd', @ANYRESHEX]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x2b, 0x1, 0x1) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4044) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x3}}, {@x25={0x805, {0x0, 0x3, 0xfb, "d05dbab632"}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x0, 0x3, 0x0, 0x100, 0xfffffffffffffffc, 0x6, r3}) 4m54.449746816s ago: executing program 6 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = getpid() r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000680)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80, 0x0}, 0x4000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6ee1c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcfc, 0x5}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x13, 0x0, &(0x7f0000000000)=0x56) sendmsg$sock(r3, &(0x7f0000002f40)={&(0x7f00000000c0)=@x25, 0x80, 0x0, 0x0, &(0x7f0000002f00)=[@mark={{0x14, 0x1, 0x24, 0x94a8}}], 0x18}, 0x24008899) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8c8, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @rand_addr=0x64010100}, {0x300}, 0xfdfdffff, {0x2, 0x0, @empty}}) r9 = socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x3d5f, 0x80000, 0x3, 0x33f}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) sendmmsg$inet(r9, &(0x7f0000000240), 0x0, 0x0) unshare(0x44040200) 4m38.120976466s ago: executing program 36 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = getpid() r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000680)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80, 0x0}, 0x4000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6ee1c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcfc, 0x5}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x13, 0x0, &(0x7f0000000000)=0x56) sendmsg$sock(r3, &(0x7f0000002f40)={&(0x7f00000000c0)=@x25, 0x80, 0x0, 0x0, &(0x7f0000002f00)=[@mark={{0x14, 0x1, 0x24, 0x94a8}}], 0x18}, 0x24008899) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8c8, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$eJzs3U9oHOfZAPBnZMl/FDAm34e/YBxnbOcDBxxltYqVikCTzWpkT7LaFburYlNKamI5CMtJSBra+JKYQtKWQumpxzTX3HprKbTQQ9tToTn00lsgp5JC/xEIBZWd3ZUleVeSHVtOmt/PSDM788y8zztaz7Mj7bwbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAk1dlSaTKJWl5fPJ8OV51tNua3WN/f3683TDZ4ekO7EUnnK/bvj0/+0V32vzdWH+58OxFHu4+Oxv7OZH9cu+/woSf/Z3Skv/0WCd2u4zuMSyIOdJK6cnFlZenVu5DILvrBL291i9Hezymr563I5ytnszRvNdKZ6enSY+fmWulcXstaF1rtbD6tNrNKe6wXPzMzlWYTFxqL9bOzlVqWnqo+kk7OzDzxaLlUmk6fnVjIKs1Wo/7Ys9Gqnstrtbx+togpl74dnZgnOk/E5/J22s4q82l6eXllaWq7XDtBk4NW7Ok+f44+fOij1z/8+/JS5wk5bCdJrwPlyclyeXL6zMyZJ0ql0XKpvHFBaZNYi4iRiE7EXXnS8gVyZ07ccAeM9Op/1CKPeizG+UgH/BuLasxGMxox33n8p7GbInr69f//H/vrH7Zqd33971f5B26sPhJF/T/WfXRsWP0fmOtu/nst3ohrcSUuxkqsxFK8egvbru7r9m5XMx65ve369TuNZMPys5FFPfJoRSPymI9KsSTtLUljJqZjOkrxfJyLuWhFGnORRy2yaMWFaEU7suIZVY1mZFGJdjSiGWmcimo8EmlMxkzMxFSkkcVEXIhGLEY9zsZsVIq9XI7l4rhPbcr38IH4xYt//Ojdzvxa0OQWHUzeiiiC/rZF0E3lfsv6v9p5zXBThPr/JbB3q5V38vQNn8lqv/4DAAAA/7WS4rfvnev/sXiwmJvLa9nX73VaAAAAwB1U/OX/aGdSvMXrwUg61/+lAZEf7HpuAAAAwJ2RFPfYJRExHg915y7HcrwVSzHolwARcWi3UwQAAAA+o+Lv/8c6k/GIN4sF/eFShlz/AwAAAF803xs2xv6H/TF2Wwv7kl+NRcRYcn3h/MPJ1UonrnJ1T3e73uRra3tszx1JDvZ2UkymR6/dl0TEaDU7mvRHv/x3b/Dbj4vvR0bXNh821n/SbG6ZQGydQPEofhjHuzHHLxWT+3qbjCbdVsbn8lo2UW3UniyGROx8tV9/afk7EZ3Wv1+fP5jE5eWVpYkXXl65VORyvbP59au9ARRvGkdxi1z6w//Gg4N7PFbciNFrd7zbbml9/0e6m49s3Wayvs2340Q35sR4dzreX9Ntc3+nzcmJJyejUjk40s7Ot19fXdf7XhaTaz0fu62evx0nN/zoTp4akEV5QxYv3ZxFef3x39mx2JDFma+e7Dd/cnMW7x5/8/y/fttIsqntspi6hSxW90RszgLgXrlcjPpzowodKKrQp6tdnfrfrbudYlXpBvTs4Fz7zxutrL3K6G+/rtaNxubqPrJ2YtxZdV+Nbl051Y051X09MXpkQF25PuCM/sryK7/rndEff/8nP/3Gsd//rGj3tqrb+/FIN6Y3ift/M6TGdvq8f1NVfa+zxXtD223Vyklcj9jzrauvxOHX3rj26PLViy8uvbj0Urk8NV16vFQ6U97bix0rXjFskSkAX17bf8bO0Ih+nUke33RVHZc21t37195SMBEvxMuxEpfidHG3QUQ8NLjd8XVvQzi9zVXr+LpPeDndu7acfbYbuvna8kZseS127QowiSGxU+uO2P/9uJh8cjd+GgCwO05sU4eTvWuhw14hJKe3ue7eWMs3XR3H8Fo+yFfu3qEAgC+NrPlxMt5+J2k284XnJ2dmJivtc1nabFSfS5v57NkszevtrFk9V6mfzdKFZqPdqPZ/cTybtdLW4sJCo9lO5xrNNEZa+fnik9/T3ke/t7L5Sr2dV1sLtazSytJqo96uVNvpbN6qpguLz9Ty1v6sWWzcWsiq+VxerbTzRj1tNRab1WwiTVtZ1gs8lzXTfDart/O5vDNbTxea+XyleT0iaovzWTqbtarNfKHd6O6w31Zen2s054vdTtzc/b/s9vEGgM+D1964duXiysrSq7c38+ctY5LuzL3uIwCw0Y1yfa8zAQAAAAAAAAAAAAAAhll7//+h/kxn6Xa3/Y3Eju4R3BPbxeyLW7npcN9nuVXxLszE3oGr9kbs7PjctZkk4q2V6KZx4HNwoO7dzDefeurKsJhn3nzg3M72Ezu9UzbeORix9+c/6i55enjwd3v//was6g/7fAs9/SBi5DaOz2oyYNWnq/001tm72+clAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjkPwEAAP//MkpLmg==") r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @rand_addr=0x64010100}, {0x300}, 0xfdfdffff, {0x2, 0x0, @empty}}) r9 = socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x3d5f, 0x80000, 0x3, 0x33f}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) sendmmsg$inet(r9, &(0x7f0000000240), 0x0, 0x0) unshare(0x44040200) 2m52.604152268s ago: executing program 9 (id=4255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x11, 0x6, @random="c62599a33a3d"}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m52.529646259s ago: executing program 9 (id=4257): msgsnd(0x0, &(0x7f0000000140)={0x1}, 0x8, 0x0) open(0x0, 0x200, 0x41) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x3, 0x0, 0xd, 0x1, 0x8, 0x10, 0x129}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x100, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7, 0xffffffffffffffff}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xa}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x104}}, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) ioctl$PTP_SYS_OFFSET(r8, 0x40043d0d, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x200000d4}, 0x24008000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) 2m52.43630954s ago: executing program 9 (id=4258): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2m52.347172312s ago: executing program 9 (id=4260): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000001580)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0xc7}}, {@data_err_ignore}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m51.448329485s ago: executing program 9 (id=4267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xfe4d}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x4, 0x4, 0xa}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}}, 0x0) 2m50.872038674s ago: executing program 9 (id=4281): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m50.871830823s ago: executing program 37 (id=4281): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m47.912090647s ago: executing program 4 (id=4283): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 2m47.849515378s ago: executing program 4 (id=4327): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 2m46.692240735s ago: executing program 4 (id=4346): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f00000000c0)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 2m46.666243945s ago: executing program 38 (id=4346): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f00000000c0)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 589.675631ms ago: executing program 7 (id=5917): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 528.043963ms ago: executing program 7 (id=5922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x796378c48efb5449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 456.294224ms ago: executing program 7 (id=5926): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 450.781853ms ago: executing program 7 (id=5929): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xb0000}, 0x805, 0xffffffff, 0x0, 0x8, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 400.549884ms ago: executing program 7 (id=5935): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 400.508574ms ago: executing program 2 (id=5936): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x7, 0x100) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x3c72, 0xc00) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x1, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0xa, 0x24, "4708f47f6a23bbe312fa24d1926dc7d2b637f8eb808d6c7cb0fe78f46b4c1aa5c0ad99614351f83c3536cbfd037d2c31b0fa366a8c8d5f5eb5a2593e8b0337d9", "64525d7045be56711c1311059a2049bba367ff0d3ba0d07bccfbc54e8dffb920d07f84ba476e208fd9a1083e66c07f548673256d9de432cecdf66aba457ddfe5", "aef238d5fea484a094bce86e4bc81c947fa28c49ecc347daa061210a2e290143", [0x4, 0x6]}}) 342.790735ms ago: executing program 2 (id=5940): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5608, 0x4) 342.715055ms ago: executing program 7 (id=5941): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x900}}, 0x20}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) semop(0x0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) 272.384786ms ago: executing program 2 (id=5943): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) close(r0) 272.257096ms ago: executing program 2 (id=5945): timerfd_create(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0x8) 272.115496ms ago: executing program 8 (id=5947): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x400020000023894) 243.103207ms ago: executing program 8 (id=5949): timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) 198.784637ms ago: executing program 0 (id=5950): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x82b6376ea19c0fc7) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="8a1a459fe971", 0x0, 0x49, 0x0, 0x40003, 0x0}) 198.619817ms ago: executing program 2 (id=5951): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x10081, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c040) 198.338247ms ago: executing program 2 (id=5952): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x9}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x3fffffff9}, 0x2c10, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000340)=')\x00', 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2e}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xebd7df2f4bea77a7}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x54}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000000c0)=0x28, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8005c}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)) 198.286307ms ago: executing program 0 (id=5953): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) 198.192847ms ago: executing program 8 (id=5955): r0 = syz_clone(0x22a00311, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000140)={&(0x7f0000001140)="9b42", 0x2}) 100.240399ms ago: executing program 0 (id=5956): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x18, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) 99.940519ms ago: executing program 1 (id=5957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001900)=@delchain={0x2c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}}, 0x0) 99.869849ms ago: executing program 8 (id=5958): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x8000, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 99.799989ms ago: executing program 1 (id=5959): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xf) 99.750579ms ago: executing program 1 (id=5960): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x1409, 0xb34bf073712c37ed, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000) 69.948699ms ago: executing program 0 (id=5961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0x58) 69.550259ms ago: executing program 1 (id=5962): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 45.65413ms ago: executing program 0 (id=5963): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 406µs ago: executing program 8 (id=5964): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x2b, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62043fff590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 323.89µs ago: executing program 1 (id=5965): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x7, 0x200, 0x0}) 105.31µs ago: executing program 0 (id=5966): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, 0x0, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) r6 = syz_io_uring_setup(0x1060, &(0x7f00000003c0)={0x0, 0x50b6, 0x2, 0x3, 0x167}, &(0x7f0000000500), &(0x7f0000000040), &(0x7f0000000000)) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x551b42, 0xa4) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './bus\x00'}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x8) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x0, 0x9, 0xe, 0x2f}) write$tun(0xffffffffffffffff, 0x0, 0x107c) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_enter(r6, 0xfffffdff, 0xe875, 0x3, &(0x7f0000000240)={[0xfffffffffffffffc]}, 0x8) 59.55µs ago: executing program 8 (id=5967): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f00000030c0)=[{&(0x7f0000000080)=""/118, 0x76}, {0x0}], 0x2) 0s ago: executing program 1 (id=5968): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="00004305", 0x4, 0x40050, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x80, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): allmulticast mode [ 745.307555][T18410] bridge_slave_0: entered promiscuous mode [ 745.318908][T18410] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.329980][T18410] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.345885][T18410] bridge_slave_1: entered allmulticast mode [ 745.358626][T18410] bridge_slave_1: entered promiscuous mode [ 745.368375][T18442] rdma_rxe: rxe_newlink: failed to add lo [ 745.389915][T18410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.402681][T18410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.433212][T18410] team0: Port device team_slave_0 added [ 745.441504][T18410] team0: Port device team_slave_1 added [ 745.465983][T18410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.473990][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.504186][T18410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.517348][T18410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.526076][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.556913][T18410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.599312][T18410] hsr_slave_0: entered promiscuous mode [ 745.605524][T18410] hsr_slave_1: entered promiscuous mode [ 745.612566][T18410] debugfs: 'hsr0' already exists in 'hsr' [ 745.618408][T18410] Cannot create hsr debugfs directory [ 745.974678][ T28] audit: type=1400 audit(1782501442.370:3865): avc: denied { write } for pid=18455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.025205][ T28] audit: type=1400 audit(1782501442.420:3866): avc: denied { write } for pid=18476 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.114596][T18410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 746.136026][T18410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.151384][T18410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 746.173642][T18410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.191161][T18410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 746.192705][ T28] audit: type=1400 audit(1782501442.580:3867): avc: denied { write } for pid=18479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.216566][T18502] rdma_rxe: rxe_newlink: failed to add lo [ 746.245779][T18410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.272535][ T28] audit: type=1400 audit(1782501442.670:3868): avc: denied { write } for pid=18504 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.274281][T18410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.333592][T18410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.416873][T18410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.451837][T18410] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.472109][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.479210][T15042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.502201][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.509300][T15042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.575573][ T28] audit: type=1400 audit(1782501442.970:3869): avc: denied { write } for pid=18508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.651478][ T28] audit: type=1400 audit(1782501443.050:3870): avc: denied { write } for pid=18535 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.694671][T18542] bond2: option primary_reselect: invalid value (254) [ 746.718449][T18542] bond2 (unregistering): Released all slaves [ 746.850529][ T28] audit: type=1400 audit(1782501443.240:3871): avc: denied { write } for pid=18548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.902545][T18410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.030863][ T28] audit: type=1400 audit(1782501443.430:3872): avc: denied { write } for pid=18584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.095583][T18410] veth0_vlan: entered promiscuous mode [ 747.104269][T18410] veth1_vlan: entered promiscuous mode [ 747.131291][T18410] veth0_macvtap: entered promiscuous mode [ 747.139521][T18410] veth1_macvtap: entered promiscuous mode [ 747.153208][T18410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.167958][T18410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.181161][T15042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.190235][T15042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.201062][T15042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.211994][T15042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.319239][ T28] audit: type=1400 audit(1782501443.720:3873): avc: denied { mount } for pid=18538 comm="syz.1.4316" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 747.420568][ T28] audit: type=1400 audit(1782501443.810:3874): avc: denied { mounton } for pid=18601 comm="syz.4.4283" path="/0/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 747.498979][T18611] rdma_rxe: rxe_newlink: failed to add lo [ 748.048420][T18673] bpf: Bad value for 'uid' [ 748.585794][T15042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.921553][T18746] lo speed is unknown, defaulting to 1000 [ 749.129356][T18746] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.136466][T18746] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.145865][T18746] bridge_slave_0: entered allmulticast mode [ 749.154140][T18746] bridge_slave_0: entered promiscuous mode [ 749.170801][T18746] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.178848][T18746] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.187375][T18746] bridge_slave_1: entered allmulticast mode [ 749.195036][T18746] bridge_slave_1: entered promiscuous mode [ 749.224777][T18746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.239273][T18746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.265119][T18746] team0: Port device team_slave_0 added [ 749.274551][T18746] team0: Port device team_slave_1 added [ 749.294693][T18746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.303814][T18746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.331981][T18746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.344041][T18746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.351390][T18746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.387336][T18746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.416234][T18746] hsr_slave_0: entered promiscuous mode [ 749.422540][T18746] hsr_slave_1: entered promiscuous mode [ 749.428591][T18746] debugfs: 'hsr0' already exists in 'hsr' [ 749.453620][T18746] Cannot create hsr debugfs directory [ 749.464258][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4357'. [ 749.625166][T18825] rdma_rxe: rxe_newlink: failed to add lo [ 749.796964][T18746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 749.808416][T18746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.820961][T18746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 749.833728][T18746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.844679][T18746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 749.856459][T18746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.864405][T18746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 749.875910][T18746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.914393][T18746] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.922434][T18746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.930829][T18746] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.938976][T18746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.966574][T15042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.076623][T18746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.105887][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.120575][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.164315][T18746] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.191345][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.199613][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.217000][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.224100][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.421554][T15042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.486707][T15042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.604268][T15042] bridge_slave_1: left allmulticast mode [ 750.617773][T15042] bridge_slave_1: left promiscuous mode [ 750.627758][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.639380][T15042] bridge_slave_0: left allmulticast mode [ 750.647111][T15042] bridge_slave_0: left promiscuous mode [ 750.654379][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.735167][T15042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.746992][T15042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.757244][T15042] bond0 (unregistering): Released all slaves [ 750.767588][T18746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.856574][T15042] hsr_slave_0: left promiscuous mode [ 750.868747][T15042] hsr_slave_1: left promiscuous mode [ 750.874858][T15042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.882571][T15042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.894321][T15042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.902167][T15042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.919363][T15042] veth1_macvtap: left promiscuous mode [ 750.928959][T15042] veth0_macvtap: left promiscuous mode [ 750.939711][T15042] veth1_vlan: left promiscuous mode [ 750.946277][T15042] veth0_vlan: left promiscuous mode [ 751.074111][T15042] team0 (unregistering): Port device team_slave_1 removed [ 751.080366][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 751.080424][ T28] audit: type=1400 audit(1782501447.470:3911): avc: denied { write } for pid=18995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.111543][T15042] team0 (unregistering): Port device team_slave_0 removed [ 751.137606][ T28] audit: type=1400 audit(1782501447.530:3912): avc: denied { write } for pid=19011 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.196358][T18746] veth0_vlan: entered promiscuous mode [ 751.219329][T18746] veth1_vlan: entered promiscuous mode [ 751.278864][T18746] veth0_macvtap: entered promiscuous mode [ 751.294649][T18746] veth1_macvtap: entered promiscuous mode [ 751.314012][T18746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.323413][T18746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.343344][ T3763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.355294][ T28] audit: type=1400 audit(1782501447.750:3913): avc: denied { write } for pid=19016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.385774][ T3763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.406385][ T28] audit: type=1400 audit(1782501447.750:3914): avc: denied { write } for pid=19036 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.440617][ T3763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.456918][ T3763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.589007][ T28] audit: type=1400 audit(1782501447.980:3915): avc: denied { write } for pid=19046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.643599][ T28] audit: type=1400 audit(1782501448.020:3916): avc: denied { setcurrent } for pid=19063 comm="syz.0.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 751.670502][ T28] audit: type=1400 audit(1782501448.050:3917): avc: denied { write } for pid=19066 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.830968][ T28] audit: type=1400 audit(1782501448.220:3918): avc: denied { write } for pid=19072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.876745][ T28] audit: type=1400 audit(1782501448.270:3919): avc: denied { write } for pid=19093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.021798][ T28] audit: type=1400 audit(1782501448.420:3920): avc: denied { write } for pid=19095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.294251][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 752.804481][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 753.117701][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 753.191500][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4415'. [ 753.453069][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 753.566336][T19217] team0: Port device team_slave_0 removed [ 753.590409][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 754.710140][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4431'. [ 754.743911][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4431'. [ 754.755792][T15042] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.770801][T15042] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.787384][T15042] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.797443][T15042] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.865823][T19270] netlink: 'syz.1.4437': attribute type 18 has an invalid length. [ 754.887371][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'. [ 754.904760][T19270] netlink: 'syz.1.4437': attribute type 18 has an invalid length. [ 754.914088][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'. [ 754.915857][T19274] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.255698][T19299] loop0: detected capacity change from 0 to 1024 [ 755.265411][T19299] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 755.265411][T19299] [ 755.323478][T19304] netlink: 'syz.8.4451': attribute type 18 has an invalid length. [ 755.343832][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4451'. [ 755.362226][T15042] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.362260][T19304] netlink: 'syz.8.4451': attribute type 18 has an invalid length. [ 755.362334][T15042] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.371510][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4451'. [ 755.402368][T15042] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.413857][T15042] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.474412][T19315] rdma_rxe: rxe_newlink: failed to add lo [ 756.275568][T19329] loop0: detected capacity change from 0 to 512 [ 756.285678][T19329] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 756.335158][T19329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.348800][T19329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.398422][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811a89d000: rx timeout, send abort [ 756.408125][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811a89d000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 756.471599][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 756.471637][ T28] audit: type=1400 audit(1782501452.870:3930): avc: denied { read } for pid=19335 comm="syz.8.4464" path="socket:[59610]" dev="sockfs" ino=59610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 756.522736][ T28] audit: type=1400 audit(1782501452.870:3931): avc: denied { bind } for pid=19339 comm="syz.2.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 756.656723][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 756.728713][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4477'. [ 756.775117][T19377] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4478'. [ 757.091308][T19402] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4488'. [ 757.121748][T19404] loop0: detected capacity change from 0 to 1024 [ 757.143512][T19404] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 757.143512][T19404] [ 757.245198][ T28] audit: type=1400 audit(1782501453.640:3932): avc: denied { ioctl } for pid=19408 comm="syz.0.4491" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 757.894650][T19433] lo speed is unknown, defaulting to 1000 [ 759.403934][T19515] rdma_rxe: rxe_newlink: failed to add lo [ 760.024720][ T28] audit: type=1400 audit(1782501456.420:3933): avc: denied { cmd } for pid=19530 comm="syz.2.4537" path="socket:[58834]" dev="sockfs" ino=58834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 760.462132][T19556] __nla_validate_parse: 1 callbacks suppressed [ 760.462146][T19556] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4544'. [ 761.505148][T19575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4553'. [ 761.702970][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4562'. [ 762.280851][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4566'. [ 762.553719][T19621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.581502][T19621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.751881][T19630] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4574'. [ 762.764242][T19628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.801280][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4570'. [ 762.847479][T19628] 8021q: adding VLAN 0 to HW filter on device bond5 [ 762.865482][ T3389] lo speed is unknown, defaulting to 1000 [ 763.442550][T19676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.483213][T19676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.493785][T19676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.494905][ T28] audit: type=1400 audit(1782501459.890:3934): avc: denied { write } for pid=19670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.507163][T19676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 763.541244][T19676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.554953][T19676] veth1_vlan: left promiscuous mode [ 763.566450][T19676] veth1_vlan: entered promiscuous mode [ 763.575736][T19676] veth1_macvtap: left promiscuous mode [ 763.575848][ T28] audit: type=1400 audit(1782501459.960:3935): avc: denied { write } for pid=19688 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.582560][T19676] veth0_macvtap: left promiscuous mode [ 763.612331][T19676] veth0_macvtap: entered promiscuous mode [ 763.620371][T19676] veth1_macvtap: entered promiscuous mode [ 763.631094][T19676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.642317][T19676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.652179][T19676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.661869][T19676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.669892][T19676] batadv_slave_0: entered promiscuous mode [ 763.704707][T19676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.716485][T15046] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 763.761670][ T3763] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.778787][ T3763] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.789240][ T3763] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.798335][ T3763] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.262858][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4594'. [ 764.276493][T19707] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4593'. [ 764.373096][ T28] audit: type=1400 audit(1782501460.770:3936): avc: denied { write } for pid=19710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.436759][ T28] audit: type=1400 audit(1782501460.800:3937): avc: denied { write } for pid=19725 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.783950][ T28] audit: type=1400 audit(1782501461.180:3938): avc: denied { bind } for pid=19744 comm="syz.7.4608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 765.335260][ T28] audit: type=1400 audit(1782501461.720:3939): avc: denied { create } for pid=19772 comm="syz.8.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 765.429533][ T28] audit: type=1400 audit(1782501461.760:3940): avc: denied { write } for pid=19772 comm="syz.8.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 765.587243][ T28] audit: type=1400 audit(1782501461.980:3941): avc: denied { write } for pid=19773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.664671][ T28] audit: type=1400 audit(1782501462.030:3942): avc: denied { write } for pid=19793 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.917355][ T28] audit: type=1400 audit(1782501462.310:3943): avc: denied { write } for pid=19804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.014092][T19825] tipc: Enabling of bearer rejected, failed to enable media [ 766.096225][T19834] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 766.300765][T19834] 8021q: adding VLAN 0 to HW filter on device bond6 [ 766.620337][T19862] blkio.reset_stats is deprecated [ 767.660434][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4646'. [ 767.689368][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 767.720647][T19879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4646'. [ 767.738759][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4646'. [ 768.812999][T19904] bridge_slave_0: left allmulticast mode [ 768.820088][T19904] bridge_slave_0: left promiscuous mode [ 768.826888][T19904] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.943624][T19904] bridge_slave_1: left allmulticast mode [ 768.953698][T19904] bridge_slave_1: left promiscuous mode [ 768.988311][T19904] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.026110][T19904] bond0: (slave bond_slave_0): Releasing backup interface [ 769.116806][T19904] bond0: (slave bond_slave_1): Releasing backup interface [ 769.207717][T19904] team0: Port device team_slave_0 removed [ 769.254320][T19904] team0: Port device team_slave_1 removed [ 769.288723][T19904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.328499][T19904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.382279][T19904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.419951][T19904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.467954][T19904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 769.543052][T19909] team0: Mode changed to "broadcast" [ 769.929823][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4669'. [ 770.094349][T19950] bridge0: entered allmulticast mode [ 770.131510][T19952] netlink: 'syz.8.4672': attribute type 39 has an invalid length. [ 770.237357][T19957] bridge0: entered allmulticast mode [ 770.556588][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 770.556610][ T28] audit: type=1400 audit(1782501466.950:3946): avc: denied { setopt } for pid=19965 comm="syz.2.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 771.842507][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4692'. [ 772.489499][ T28] audit: type=1400 audit(1782501468.880:3947): avc: denied { bind } for pid=20031 comm="syz.0.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.541435][T20032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.647040][T20032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.745441][T20032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.808594][T20032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.887120][T15046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.916036][T15046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.930192][T15046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.968517][T15046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.204952][T15042] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.227329][T15042] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.237102][T15042] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.248116][T15042] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.294356][T20059] syzkaller0: entered promiscuous mode [ 773.301389][T20059] syzkaller0: entered allmulticast mode [ 773.313299][T20059] tipc: Started in network mode [ 773.318854][T20059] tipc: Node identity 029b90f3eacb, cluster identity 4711 [ 773.327380][T20059] tipc: Enabled bearer , priority 0 [ 773.336968][T20058] tipc: Resetting bearer [ 773.345924][T20058] tipc: Disabling bearer [ 773.565738][ T28] audit: type=1400 audit(1782501725.966:3948): avc: denied { setopt } for pid=20072 comm="syz.7.4714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 774.121858][T20103] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 774.140553][T20103] team0: No ports can be present during mode change [ 774.239607][T20113] macvtap1: entered promiscuous mode [ 774.245036][T20113] macvtap1: entered allmulticast mode [ 774.349640][ T28] audit: type=1400 audit(1782501726.756:3949): avc: denied { create } for pid=20124 comm="syz.1.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 774.806932][ T28] audit: type=1400 audit(1782501727.206:3950): avc: denied { bind } for pid=20132 comm="syz.2.4738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 774.889496][ T28] audit: type=1326 audit(1782501727.286:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.7.4736" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e2875ce59 code=0x0 [ 774.936840][T20139] openvswitch: netlink: Flow key attr not present in new flow. [ 775.369252][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 775.378064][T20157] sz1: rxe_newlink: already configured on lo [ 776.002088][ T28] audit: type=1400 audit(1782501728.386:3952): avc: denied { map } for pid=20161 comm="syz.1.4748" path="socket:[61716]" dev="sockfs" ino=61716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 776.225530][ T28] audit: type=1400 audit(1782501728.386:3953): avc: denied { read } for pid=20161 comm="syz.1.4748" path="socket:[61716]" dev="sockfs" ino=61716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 776.302472][T20168] macvlan0: entered promiscuous mode [ 777.548640][T20167] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4750'. [ 777.693059][ T28] audit: type=1400 audit(1782501730.066:3954): avc: denied { bind } for pid=20184 comm="syz.7.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 778.399865][T20227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4767'. [ 778.727711][T20245] lo speed is unknown, defaulting to 1000 [ 779.794169][T20276] lo speed is unknown, defaulting to 1000 [ 780.230332][ T28] audit: type=1326 audit(1782501732.626:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20311 comm="syz.8.4796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x0 [ 780.909255][ T28] audit: type=1400 audit(1782501733.236:3956): avc: denied { remount } for pid=20330 comm="syz.2.4802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 781.208622][T20338] bridge0: entered promiscuous mode [ 781.215232][T20338] bridge0: entered allmulticast mode [ 781.222889][T20338] team0: Port device bridge0 added [ 781.234513][T20338] bridge0: port 1(team0) entered blocking state [ 781.241744][T20338] bridge0: port 1(team0) entered disabled state [ 781.248589][T20338] team0: entered allmulticast mode [ 781.254679][T20338] team_slave_1: entered allmulticast mode [ 781.262804][T20338] team0: left allmulticast mode [ 781.267694][T20338] team_slave_1: left allmulticast mode [ 781.574014][T20356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.586355][T20356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.644746][ T30] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.656081][ T30] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.672279][ T30] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.682954][ T30] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.996997][T20372] netlink: 'syz.1.4817': attribute type 27 has an invalid length. [ 782.096917][T20372] bond0: (slave bond_slave_1): Releasing backup interface [ 782.723639][T20374] loop0: detected capacity change from 0 to 1024 [ 782.773838][T20374] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 782.807914][T20374] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.4818: lblock 2 mapped to illegal pblock 2 (length 1) [ 782.856924][T20374] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 782.859138][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 782.875134][ C0] EXT4-fs (loop0): initial error at time 1782501735: ext4_map_blocks:791: inode 3: block 2 [ 782.885638][ C0] EXT4-fs (loop0): last error at time 1782501735: ext4_map_blocks:791: inode 3: block 2 [ 782.897467][T20374] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 782.912153][T20374] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.4818: lblock 0 mapped to illegal pblock 48 (length 1) [ 782.957405][T20374] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 782.958047][T20374] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 783.039399][T20374] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.4818: Failed to acquire dquot type 0 [ 783.072871][T20374] loop0: lost filesystem error report for type 5 error -117 [ 783.153004][T20374] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 783.417724][T20374] loop0: lost filesystem error report for type 5 error -117 [ 783.425772][T20374] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.4818: mark_inode_dirty error [ 783.688103][T20374] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 783.694048][T20374] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 783.732819][T20374] EXT4-fs (loop0): 1 orphan inode deleted [ 783.757435][ T30] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 783.767035][T20374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.791906][ T30] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 783.792085][ T30] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 783.792147][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 783.792168][ T30] loop0: lost filesystem error report for type 5 error -117 [ 783.888201][T20374] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 783.967184][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.976832][T18746] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 783.997905][T18746] loop0: lost filesystem error report for type 5 error -117 [ 783.998095][T18746] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 784.032028][T18746] loop0: lost filesystem error report for type 5 error -117 [ 784.032141][T18746] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 784.075741][T18746] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 784.236393][T20396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.428732][T20401] tipc: Enabling of bearer rejected, failed to enable media [ 784.487960][T20415] syzkaller0: entered promiscuous mode [ 784.499860][T20415] syzkaller0: entered allmulticast mode [ 784.535412][T20428] netlink: 'syz.7.4831': attribute type 6 has an invalid length. [ 784.737382][T20434] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4833'. [ 784.792131][T20436] loop0: detected capacity change from 0 to 512 [ 784.822470][T20436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.850125][T20436] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 784.972853][T20450] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.4834: lblock 23 mapped to illegal pblock 18 (length 1) [ 785.043960][T20453] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.4834: lblock 23 mapped to illegal pblock 18 (length 1) [ 785.075198][T20443] bridge0: entered promiscuous mode [ 785.080763][T20443] bridge0: entered allmulticast mode [ 785.088281][T20443] team0: Port device bridge0 added [ 785.103977][T20443] bridge0: port 1(team0) entered blocking state [ 785.115589][T20443] bridge0: port 1(team0) entered disabled state [ 785.127770][T20443] team0: entered allmulticast mode [ 785.140139][T20443] team_slave_0: entered allmulticast mode [ 785.146318][T20443] team_slave_1: entered allmulticast mode [ 785.153899][T20443] team0: left allmulticast mode [ 785.158996][T20443] team_slave_0: left allmulticast mode [ 785.165491][T20443] team_slave_1: left allmulticast mode [ 785.212690][T20435] syz.0.4834 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 785.226433][T20435] CPU: 1 UID: 0 PID: 20435 Comm: syz.0.4834 Not tainted syzkaller #0 PREEMPT(lazy) [ 785.226461][T20435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.226472][T20435] Call Trace: [ 785.226479][T20435] [ 785.226486][T20435] __dump_stack+0x1d/0x30 [ 785.226529][T20435] dump_stack_lvl+0x95/0xd0 [ 785.226547][T20435] dump_stack+0x15/0x1b [ 785.226622][T20435] dump_header+0x80/0x240 [ 785.226673][T20435] oom_kill_process+0x295/0x350 [ 785.226776][T20435] out_of_memory+0x981/0xbc0 [ 785.226804][T20435] try_charge_memcg+0x621/0xa00 [ 785.226920][T20435] charge_memcg+0x6d/0x120 [ 785.226948][T20435] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 785.226976][T20435] swap_cache_alloc_folio+0x47b/0x5e0 [ 785.227038][T20435] swap_cluster_readahead+0x3d2/0x460 [ 785.227092][T20435] swapin_readahead+0xd8/0x8a0 [ 785.227113][T20435] ? _raw_spin_unlock+0x9/0x30 [ 785.227156][T20435] ? swap_put_entries_cluster+0x49c/0x4c0 [ 785.227184][T20435] ? __entry_text_end+0x11228/0x102179 [ 785.227262][T20435] ? __rcu_read_unlock+0x4e/0x70 [ 785.227282][T20435] ? swap_cache_get_folio+0x1f7/0x200 [ 785.227308][T20435] do_swap_page+0x2a2/0x1ec0 [ 785.227410][T20435] ? __css_rstat_updated+0xbb/0x280 [ 785.227498][T20435] ? __rcu_read_lock+0x36/0x50 [ 785.227516][T20435] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 785.227541][T20435] handle_mm_fault+0xb3c/0x2da0 [ 785.227597][T20435] do_user_addr_fault+0x634/0x1060 [ 785.227621][T20435] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 785.227720][T20435] ? trace_page_fault_user+0x1f/0xa0 [ 785.227796][T20435] exc_page_fault+0x62/0xa0 [ 785.227875][T20435] asm_exc_page_fault+0x26/0x30 [ 785.227948][T20435] RIP: 0033:0x7f47d73ea140 [ 785.228006][T20435] Code: c1 ea 12 48 8d 1c 16 48 8d b4 24 00 01 00 00 4c 8d 74 1d 00 48 89 d8 49 89 f7 eb 50 66 0f 1f 44 00 00 4c 89 e6 bf 01 00 00 00 ab ba 12 00 85 c0 0f 85 cb 09 00 00 48 b8 db 34 b6 d7 82 de 1b [ 785.228021][T20435] RSP: 002b:00007fffaf4d3bf0 EFLAGS: 00010246 [ 785.228036][T20435] RAX: 0000000000000000 RBX: 00000000000bfab5 RCX: ffffffffffffffe8 [ 785.228067][T20435] RDX: 0000000000000000 RSI: 00007fffaf4d3d10 RDI: 0000000000000001 [ 785.228081][T20435] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 785.228093][T20435] R10: 00007fffaf4d3cf0 R11: 0000000000000246 R12: 00007fffaf4d3d10 [ 785.228160][T20435] R13: 00007f47d779609c R14: 00000000000bfae7 R15: 00007fffaf4d3cf0 [ 785.228191][T20435] [ 785.228210][T20435] memory: usage 307200kB, limit 307200kB, failcnt 175 [ 785.477807][T20435] memory+swap: usage 242384kB, limit 9007199254740988kB, failcnt 0 [ 785.489975][T20435] kmem: usage 239272kB, limit 9007199254740988kB, failcnt 0 [ 785.555355][T20435] Memory cgroup stats for /syz0: [ 785.555750][T20435] cache 16384 [ 785.564734][T20435] rss 1478656 [ 785.568427][T20435] shmem 0 [ 785.576560][T20435] mapped_file 0 [ 785.592166][T20435] dirty 0 [ 785.604093][T20435] writeback 0 [ 785.607547][T20435] workingset_refault_anon 23 [ 785.616873][T20435] workingset_refault_file 144 [ 785.621781][T20435] swap 454656 [ 785.625170][T20435] swapcached 8945664 [ 785.629061][T20435] pgpgin 61382 [ 785.633092][T20435] pgpgout 61017 [ 785.636630][T20435] pgfault 83436 [ 785.640135][T20435] pgmajfault 14 [ 785.643719][T20435] inactive_anon 0 [ 785.647400][T20435] active_anon 0 [ 785.650919][T20435] inactive_file 4096 [ 785.654857][T20435] active_file 12288 [ 785.658681][T20435] unevictable 1478656 [ 785.663630][T20435] hierarchical_memory_limit 314572800 [ 785.669174][T20435] hierarchical_memsw_limit 9223372036854771712 [ 785.675421][T20435] total_cache 16384 [ 785.729596][T20435] total_rss 1478656 [ 785.733727][T20435] total_shmem 0 [ 785.737319][T20435] total_mapped_file 0 [ 785.741958][T20435] total_dirty 0 [ 785.745670][T20435] total_writeback 0 [ 785.766840][T20435] total_workingset_refault_anon 23 [ 785.774693][T20435] total_workingset_refault_file 144 [ 785.781118][T20435] total_swap 454656 [ 785.785210][T20435] total_swapcached 8945664 [ 785.790116][T20435] total_pgpgin 61382 [ 785.794257][T20435] total_pgpgout 61017 [ 785.798710][T20435] total_pgfault 83436 [ 785.803326][T20435] total_pgmajfault 14 [ 785.807510][T20435] total_inactive_anon 0 [ 785.812845][T20435] total_active_anon 0 [ 785.858458][T20435] total_inactive_file 4096 [ 785.920822][T20435] total_active_file 12288 [ 785.963458][T20435] total_unevictable 1478656 [ 785.996395][T20435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4834,pid=20435,uid=0 [ 786.116047][T20435] Memory cgroup out of memory: Killed process 20435 (syz.0.4834) total-vm:94300kB, anon-rss:2684kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 786.389910][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.461042][T20484] loop0: detected capacity change from 0 to 512 [ 786.471082][T20484] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 786.505060][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4844'. [ 787.026819][T20459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.079742][T20459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.434460][T20510] xt_hashlimit: size too large, truncated to 1048576 [ 787.485328][T20459] vlan1: left allmulticast mode [ 787.490628][T20459] veth0_vlan: left allmulticast mode [ 787.534663][ T3781] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.553037][ T3781] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.568978][ T3781] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.598475][ T3781] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.639094][ T3781] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.671826][ T3781] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.692719][ T3781] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.715370][ T3781] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.934406][T20536] netlink: 'syz.2.4855': attribute type 1 has an invalid length. [ 787.955995][T20536] bond7: entered promiscuous mode [ 787.964554][T20536] 8021q: adding VLAN 0 to HW filter on device bond7 [ 787.999724][T20536] macvtap1: entered allmulticast mode [ 788.022097][T20536] macvtap2: entered allmulticast mode [ 788.048223][T20536] bond7: (slave bridge4): making interface the new active one [ 788.068128][T20536] bridge4: entered promiscuous mode [ 788.076602][T20536] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 788.642049][T20578] netlink: 4136 bytes leftover after parsing attributes in process `syz.8.4868'. [ 788.676730][T20578] netlink: 4136 bytes leftover after parsing attributes in process `syz.8.4868'. [ 789.173341][T20600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20600 comm=syz.8.4873 [ 789.446148][ T28] audit: type=1326 audit(1782501741.846:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.473629][ T28] audit: type=1326 audit(1782501741.846:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.500722][ T28] audit: type=1326 audit(1782501741.846:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.526443][ T28] audit: type=1326 audit(1782501741.846:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.553026][ T28] audit: type=1326 audit(1782501741.846:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.581720][T20615] bridge0: entered allmulticast mode [ 789.589711][ T28] audit: type=1326 audit(1782501741.846:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.625496][ T28] audit: type=1326 audit(1782501741.846:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.663206][ T28] audit: type=1326 audit(1782501741.846:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.690792][ T28] audit: type=1326 audit(1782501741.846:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.718123][ T28] audit: type=1326 audit(1782501741.846:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20610 comm="syz.8.4879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397cc6ce59 code=0x7ffc0000 [ 789.877811][T20618] xt_hashlimit: size too large, truncated to 1048576 [ 790.043116][T20626] tipc: Enabling of bearer rejected, failed to enable media [ 790.266608][T20651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'. [ 791.321281][T20688] bridge0: left promiscuous mode [ 791.888592][T20711] loop0: detected capacity change from 0 to 512 [ 791.903264][T20711] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 791.936050][T20711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.946089][T20711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.055054][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4906'. [ 792.844555][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4920'. [ 792.944377][T20763] sz1: rxe_newlink: already configured on lo [ 793.432707][T20779] loop0: detected capacity change from 0 to 512 [ 793.627141][T20779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.760206][T20779] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.761140][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.993046][T20815] sz1: rxe_newlink: already configured on lo [ 797.194838][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 797.194856][ T28] audit: type=1326 audit(2000000004.990:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20816 comm="syz.7.4941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x0 [ 797.479086][T20833] loop0: detected capacity change from 0 to 512 [ 797.535095][T20833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.547815][T20833] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.612711][ T28] audit: type=1400 audit(2000000005.410:4093): avc: denied { write } for pid=20824 comm="syz.0.4938" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 798.104464][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.235339][ T28] audit: type=1326 audit(2000000006.030:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.271911][ T28] audit: type=1326 audit(2000000006.030:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.327882][T20858] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4951'. [ 798.341517][ T28] audit: type=1326 audit(2000000006.030:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.375808][ T28] audit: type=1326 audit(2000000006.030:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.416984][ T28] audit: type=1326 audit(2000000006.030:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.450960][ T28] audit: type=1326 audit(2000000006.030:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.477766][ T28] audit: type=1326 audit(2000000006.080:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.507267][ T28] audit: type=1326 audit(2000000006.080:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.0.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 798.592152][T20877] sz1: rxe_newlink: already configured on lo [ 798.636860][T20883] loop0: detected capacity change from 0 to 512 [ 798.647757][T20883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 798.668539][T20883] EXT4-fs (loop0): 1 truncate cleaned up [ 798.678260][T20883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.780659][T20889] team0: Port device bridge0 removed [ 798.800990][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.926163][T20903] loop0: detected capacity change from 0 to 256 [ 798.998213][T20910] loop0: detected capacity change from 0 to 512 [ 799.023031][T20910] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.4965: EA inode hash validation failed [ 799.039308][T20910] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 799.077587][T20910] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.4965: corrupted inode contents [ 799.135667][T20910] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 799.135828][T20910] EXT4-fs (loop0): Remounting filesystem read-only [ 799.145062][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 799.145081][ C0] EXT4-fs (loop0): initial error at time 2000000006: ext4_do_update_inode:5742: inode 15 [ 799.145106][ C0] EXT4-fs (loop0): last error at time 2000000006: ext4_do_update_inode:5742: inode 15 [ 799.182048][T20910] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30) [ 799.194304][T20910] EXT4-fs (loop0): 1 orphan inode deleted [ 799.201688][T20910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.276030][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4967'. [ 799.314338][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.535617][T20934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4970'. [ 800.945967][T20990] syz.8.4979 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 800.966955][T20990] CPU: 1 UID: 0 PID: 20990 Comm: syz.8.4979 Not tainted syzkaller #0 PREEMPT(lazy) [ 800.966983][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.966995][T20990] Call Trace: [ 800.967001][T20990] [ 800.967076][T20990] __dump_stack+0x1d/0x30 [ 800.967097][T20990] dump_stack_lvl+0x95/0xd0 [ 800.967114][T20990] dump_stack+0x15/0x1b [ 800.967161][T20990] dump_header+0x80/0x240 [ 800.967180][T20990] oom_kill_process+0x295/0x350 [ 800.967321][T20990] out_of_memory+0x981/0xbc0 [ 800.967373][T20990] try_charge_memcg+0x621/0xa00 [ 800.967494][T20990] charge_memcg+0x6d/0x120 [ 800.967522][T20990] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 800.967573][T20990] swap_cache_alloc_folio+0x47b/0x5e0 [ 800.967600][T20990] swap_cluster_readahead+0x2b1/0x460 [ 800.967630][T20990] swapin_readahead+0xd8/0x8a0 [ 800.967721][T20990] ? _raw_spin_unlock+0x9/0x30 [ 800.967752][T20990] ? swap_put_entries_cluster+0x49c/0x4c0 [ 800.967782][T20990] ? __rcu_read_unlock+0x4e/0x70 [ 800.967803][T20990] ? swap_cache_get_folio+0x1f7/0x200 [ 800.967843][T20990] do_swap_page+0x2a2/0x1ec0 [ 800.967870][T20990] ? __css_rstat_updated+0xbb/0x280 [ 800.967941][T20990] ? __rcu_read_lock+0x36/0x50 [ 800.967962][T20990] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 800.967984][T20990] handle_mm_fault+0xb3c/0x2da0 [ 800.968078][T20990] do_user_addr_fault+0x634/0x1060 [ 800.968104][T20990] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 800.968124][T20990] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 800.968160][T20990] ? trace_page_fault_user+0x1f/0xa0 [ 800.968187][T20990] exc_page_fault+0x62/0xa0 [ 800.968269][T20990] asm_exc_page_fault+0x26/0x30 [ 800.968290][T20990] RIP: 0033:0x7f397cc27fb8 [ 800.968305][T20990] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 800.968361][T20990] RSP: 002b:00007ffc8073fa60 EFLAGS: 00010246 [ 800.968378][T20990] RAX: 0000000000000000 RBX: 000055556994c500 RCX: 00007f397cc2d68e [ 800.968390][T20990] RDX: 00007ffc8073fab0 RSI: 0000000000000000 RDI: 0000000000000000 [ 800.968402][T20990] RBP: 00007f397cee7da0 R08: 0000000000000000 R09: 0000000000000000 [ 800.968435][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000c38ba [ 800.968447][T20990] R13: 00007f397cee609c R14: 00000000000c36b3 R15: 00007f397cee6090 [ 800.968466][T20990] [ 800.968582][T20990] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 801.216896][T20990] memory+swap: usage 10256kB, limit 9007199254740988kB, failcnt 0 [ 801.225133][T20990] kmem: usage 2048kB, limit 9007199254740988kB, failcnt 0 [ 801.233245][T20990] Memory cgroup stats for /syz8: [ 801.233417][T20990] cache 0 [ 801.242042][T20990] rss 0 [ 801.244980][T20990] shmem 0 [ 801.247964][T20990] mapped_file 0 [ 801.253641][T20990] dirty 0 [ 801.256726][T20990] writeback 0 [ 801.260892][T20990] workingset_refault_anon 28 [ 801.265713][T20990] workingset_refault_file 0 [ 801.270795][T20990] swap 8228864 [ 801.274238][T20990] swapcached 8343552 [ 801.278188][T20990] pgpgin 163112 [ 801.282109][T20990] pgpgout 163112 [ 801.285778][T20990] pgfault 235036 [ 801.290307][T20990] pgmajfault 2080 [ 801.294059][T20990] inactive_anon 0 [ 801.297715][T20990] active_anon 0 [ 801.301536][T20990] inactive_file 0 [ 801.305376][T20990] active_file 0 [ 801.308868][T20990] unevictable 0 [ 801.312643][T20990] hierarchical_memory_limit 314572800 [ 801.318104][T20990] hierarchical_memsw_limit 9223372036854771712 [ 801.325833][T20990] total_cache 0 [ 801.329948][T20990] total_rss 0 [ 801.333267][T20990] total_shmem 0 [ 801.336801][T20990] total_mapped_file 0 [ 801.341129][T20990] total_dirty 0 [ 801.344727][T20990] total_writeback 0 [ 801.348593][T20990] total_workingset_refault_anon 28 [ 801.355157][T20990] total_workingset_refault_file 0 [ 801.361969][T20990] total_swap 8228864 [ 801.366158][T20990] total_swapcached 8343552 [ 801.373562][T20990] total_pgpgin 163112 [ 801.378171][T20990] total_pgpgout 163112 [ 801.383226][T20990] total_pgfault 235036 [ 801.387424][T20990] total_pgmajfault 2080 [ 801.392009][T20990] total_inactive_anon 0 [ 801.396303][T20990] total_active_anon 0 [ 801.400707][T20990] total_inactive_file 0 [ 801.405050][T20990] total_active_file 0 [ 801.409958][T20990] total_unevictable 0 [ 801.413998][T20990] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2768,pid=14144,uid=0 [ 801.429357][T20990] Memory cgroup out of memory: Killed process 14144 (syz.8.2768) total-vm:96084kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 801.628106][T21023] lo speed is unknown, defaulting to 1000 [ 801.738852][T21028] serio: Serial port ptm0 [ 801.981463][T21048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4996'. [ 802.089955][T21052] loop0: detected capacity change from 0 to 1024 [ 802.097844][T21052] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 802.097844][T21052] [ 802.222214][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 802.222274][ T28] audit: type=1400 audit(2000000010.020:4148): avc: denied { create } for pid=21045 comm="syz.8.4995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 803.087569][T20497] IPVS: starting estimator thread 0... [ 803.183199][T21082] IPVS: using max 2208 ests per chain, 110400 per kthread [ 803.278974][T21086] lo speed is unknown, defaulting to 1000 [ 803.597753][T21093] loop0: detected capacity change from 0 to 1024 [ 803.608465][T21093] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 803.608465][T21093] [ 803.688717][T21099] loop0: detected capacity change from 0 to 512 [ 803.765176][T21099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 803.784356][T21099] System zones: 1-12 [ 803.881042][T21099] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5011: error while reading EA inode 32 err=-116 [ 803.946732][T21099] loop0: lost filesystem error report for type 5 error -117 [ 803.949145][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 803.962903][ C1] EXT4-fs (loop0): initial error at time 2000000011: ext4_xattr_inode_iget:446 [ 803.971893][ C1] EXT4-fs (loop0): last error at time 2000000011: ext4_xattr_inode_iget:446 [ 803.985375][T21099] EXT4-fs (loop0): Remounting filesystem read-only [ 804.006400][T21099] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 804.067101][T21099] EXT4-fs (loop0): 1 orphan inode deleted [ 804.098397][T21099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.179102][T21112] netlink: 'syz.7.5015': attribute type 21 has an invalid length. [ 804.187711][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5015'. [ 804.246438][T21099] sctp: [Deprecated]: syz.0.5011 (pid 21099) Use of int in max_burst socket option. [ 804.246438][T21099] Use struct sctp_assoc_value instead [ 804.279847][T21114] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5016'. [ 804.283623][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5014'. [ 804.372029][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.086093][ T28] audit: type=1400 audit(2000000012.880:4149): avc: denied { read } for pid=21128 comm="syz.1.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 805.413266][ T28] audit: type=1400 audit(2000000013.200:4150): avc: denied { create } for pid=21138 comm="syz.0.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 805.465100][T21143] loop0: detected capacity change from 0 to 256 [ 805.494230][T21143] vfat: Deprecated parameter 'posix' [ 805.500740][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5025'. [ 805.510029][T21143] FAT-fs: "posix" option is obsolete, not supported now [ 805.527378][T21143] FAT-fs (loop0): codepage cp775 not found [ 805.553561][T21150] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5026'. [ 805.565404][T21143] loop0: detected capacity change from 0 to 128 [ 806.121187][ T28] audit: type=1400 audit(2000000013.920:4151): avc: denied { create } for pid=21169 comm="syz.7.5033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 806.224116][T21173] netlink: 'syz.1.5034': attribute type 21 has an invalid length. [ 806.241857][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'. [ 806.482058][T21179] lo speed is unknown, defaulting to 1000 [ 807.590622][T21209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5044'. [ 807.918629][T21214] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5046'. [ 808.341294][T21216] loop0: detected capacity change from 0 to 1024 [ 808.412892][T21216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 808.444283][T21216] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.672071][ T28] audit: type=1400 audit(2000000016.290:4152): avc: denied { nosuid_transition } for pid=21215 comm="syz.0.5047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 808.836530][ T28] audit: type=1400 audit(2000000016.290:4153): avc: denied { transition } for pid=21215 comm="syz.0.5047" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 809.154579][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 809.159785][ T28] audit: type=1400 audit(2000000016.290:4154): avc: denied { entrypoint } for pid=21215 comm="syz.0.5047" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2105 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 809.263505][T21209] tipc: Resetting bearer [ 809.809371][T21209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.968419][T21209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.144188][ T28] audit: type=1400 audit(2000000016.290:4155): avc: denied { noatsecure } for pid=21215 comm="syz.0.5047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 810.382679][T21209] veth0_vlan: left promiscuous mode [ 812.537216][T20497] lo speed is unknown, defaulting to 1000 [ 812.543208][T20497] sz1: Port: 1 Link DOWN [ 812.558240][T20497] lo speed is unknown, defaulting to 1000 [ 812.589927][ T3763] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.633249][ T3763] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.665165][ T3763] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.704900][T21276] loop0: detected capacity change from 0 to 128 [ 812.732003][ T3763] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.781569][T21260] lo speed is unknown, defaulting to 1000 [ 812.899807][ T3763] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.943676][ T3763] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.998035][ T28] audit: type=1400 audit(2000000020.790:4156): avc: denied { write } for pid=21274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.060665][ T3763] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.100593][ T3763] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.143462][ T28] audit: type=1400 audit(2000000020.940:4157): avc: denied { write } for pid=21294 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.174397][T21272] lo speed is unknown, defaulting to 1000 [ 813.655553][ T28] audit: type=1400 audit(2000000021.450:4158): avc: denied { write } for pid=21302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.821389][ T28] audit: type=1400 audit(2000000021.620:4159): avc: denied { write } for pid=21321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.867467][T21323] syzkaller0: entered promiscuous mode [ 813.869806][ T28] audit: type=1400 audit(2000000021.660:4160): avc: denied { ioctl } for pid=21322 comm="syz.0.5069" path="socket:[64416]" dev="sockfs" ino=64416 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 813.875887][T21323] syzkaller0: entered allmulticast mode [ 813.925994][T21329] TC_ACT_REPEAT abuse ? [ 814.015351][ T28] audit: type=1400 audit(2000000021.810:4161): avc: denied { write } for pid=21328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.073705][ T28] audit: type=1400 audit(2000000021.870:4162): avc: denied { write } for pid=21346 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.218052][T21351] loop0: detected capacity change from 0 to 512 [ 814.249609][ T28] audit: type=1400 audit(2000000022.040:4163): avc: denied { write } for pid=21349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.282848][ T28] audit: type=1400 audit(2000000022.060:4164): avc: denied { write } for pid=21366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.320241][T21351] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 814.337364][T21351] EXT4-fs (loop0): Remounting filesystem read-only [ 814.344345][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 814.344394][ C0] EXT4-fs (loop0): initial error at time 2000000022: ext4_mb_generate_buddy:1317 [ 814.344464][ C0] EXT4-fs (loop0): last error at time 2000000022: ext4_mb_generate_buddy:1317 [ 814.392004][T21351] EXT4-fs (loop0): 1 truncate cleaned up [ 814.403584][T21351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.403662][ T28] audit: type=1400 audit(2000000022.200:4165): avc: denied { write } for pid=21369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.420828][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5075'. [ 814.445416][ T28] audit: type=1400 audit(2000000022.240:4166): avc: denied { write } for pid=21381 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.586333][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.616810][ T28] audit: type=1400 audit(2000000022.410:4167): avc: denied { write } for pid=21383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.660188][ T28] audit: type=1400 audit(2000000022.460:4168): avc: denied { write } for pid=21401 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.924535][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5082'. [ 815.540034][T21434] netlink: 'syz.7.5086': attribute type 4 has an invalid length. [ 816.237264][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5092'. [ 816.402860][T21454] sctp: [Deprecated]: syz.7.5093 (pid 21454) Use of int in max_burst socket option. [ 816.402860][T21454] Use struct sctp_assoc_value instead [ 816.442199][T21452] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 818.276185][T21505] geneve0: entered allmulticast mode [ 818.317116][T21505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5111'. [ 819.031931][T21529] lo speed is unknown, defaulting to 1000 [ 819.136833][T21534] sz1: rxe_newlink: already configured on lo [ 819.370518][T21544] loop0: detected capacity change from 0 to 1024 [ 819.392201][T21544] __quota_error: 446 callbacks suppressed [ 819.392217][T21544] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 819.420863][T21544] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 819.430498][T21544] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.5125: Failed to acquire dquot type 0 [ 819.442464][T21544] loop0: lost filesystem error report for type 5 error -5 [ 819.442970][T21544] EXT4-fs (loop0): 1 truncate cleaned up [ 819.450155][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 819.450177][ C1] EXT4-fs (loop0): initial error at time 2000000027: ext4_acquire_dquot:7041 [ 819.450203][ C1] EXT4-fs (loop0): last error at time 2000000027: ext4_acquire_dquot:7041 [ 819.493131][T21544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.566368][T21544] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 819.577420][ T28] audit: type=1400 audit(2000000027.360:4615): avc: denied { write } for pid=21541 comm="syz.0.5125" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 819.608787][T21544] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 819.614743][T21556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5125'. [ 819.636534][T21544] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.5125: Failed to acquire dquot type 0 [ 819.711160][T21544] IPVS: Error connecting to the multicast addr [ 819.848075][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.860133][T21567] loop0: detected capacity change from 0 to 1024 [ 820.869630][T21567] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 820.869630][T21567] [ 821.134887][ T28] audit: type=1400 audit(2000000028.930:4616): avc: denied { lock } for pid=21558 comm="syz.1.5129" path="socket:[66065]" dev="sockfs" ino=66065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 821.897832][T21582] lo speed is unknown, defaulting to 1000 [ 822.043595][T21581] loop0: detected capacity change from 0 to 1024 [ 822.113544][T21581] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 822.113544][T21581] [ 822.300227][ T28] audit: type=1400 audit(2000000030.100:4617): avc: denied { ioctl } for pid=21584 comm="syz.0.5138" path="socket:[66136]" dev="sockfs" ino=66136 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 822.326057][T21585] netlink: 'syz.0.5138': attribute type 13 has an invalid length. [ 822.432943][ T28] audit: type=1400 audit(2000000030.220:4618): avc: denied { map } for pid=21584 comm="syz.0.5138" path="socket:[66137]" dev="sockfs" ino=66137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 822.546895][T21592] rdma_rxe: rxe_newlink: failed to add lo [ 823.318008][T21607] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5142'. [ 824.749511][T21634] lo speed is unknown, defaulting to 1000 [ 825.968046][T21647] loop0: detected capacity change from 0 to 1024 [ 825.992125][T21647] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 825.992125][T21647] [ 826.212814][T21654] loop0: detected capacity change from 0 to 512 [ 826.220465][T21654] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 826.254480][T21654] rdma_rxe: rxe_newlink: failed to add lo [ 826.261251][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.270317][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.395504][T21656] lo speed is unknown, defaulting to 1000 [ 826.577726][T21659] lo speed is unknown, defaulting to 1000 [ 827.011292][T21666] netlink: 'syz.0.5160': attribute type 27 has an invalid length. [ 827.110329][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5160'. [ 827.172574][T21666] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 827.472425][T21669] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5162'. [ 828.652064][T21680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5166'. [ 828.850261][T21691] lo speed is unknown, defaulting to 1000 [ 828.943468][T21696] netlink: 'syz.1.5170': attribute type 4 has an invalid length. [ 828.996342][T21696] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5170'. [ 829.381824][T21711] netlink: 'syz.1.5176': attribute type 1 has an invalid length. [ 829.418925][T21711] netlink: 'syz.1.5176': attribute type 4 has an invalid length. [ 829.441787][T21706] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5174'. [ 829.463952][T21711] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5176'. [ 829.643825][T21706] IPVS: Error connecting to the multicast addr [ 830.350497][T21727] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5179'. [ 830.350599][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5179'. [ 832.687845][T21742] tunl0: Caught tx_queue_len zero misconfig [ 833.254376][T21746] lo speed is unknown, defaulting to 1000 [ 833.900353][T21735] xt_hashlimit: size too large, truncated to 1048576 [ 833.973662][T21753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5187'. [ 834.116071][T21757] bridge0 (unregistering): left promiscuous mode [ 834.124817][T21757] team0: Port device bridge0 removed [ 834.744848][T21753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5187'. [ 835.064198][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5190'. [ 835.718057][T21787] lo speed is unknown, defaulting to 1000 [ 835.803728][T21790] loop0: detected capacity change from 0 to 512 [ 835.827621][T21790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.846545][T21790] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.921000][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.849552][T21796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 837.278614][T21831] rdma_rxe: rxe_newlink: failed to add lo [ 837.452118][T21838] IPVS: persistence engine module ip_vs_pe_R not found [ 837.725055][T21846] lo speed is unknown, defaulting to 1000 [ 839.792771][T21863] loop0: detected capacity change from 0 to 512 [ 839.856876][T21863] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 839.878118][T21863] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 840.013352][T21863] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 840.270136][T21863] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 840.309896][T21863] System zones: 0-2, 18-18, 34-35 [ 840.653545][T21863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.937787][ T28] audit: type=1400 audit(2000000048.720:4619): avc: denied { write } for pid=21862 comm="syz.0.5214" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 840.984683][T21863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=21863 comm=syz.0.5214 [ 841.018242][ T28] audit: type=1400 audit(2000000048.770:4620): avc: denied { getopt } for pid=21862 comm="syz.0.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 841.108518][ T28] audit: type=1400 audit(2000000048.900:4621): avc: denied { mounton } for pid=21862 comm="syz.0.5214" path="/119/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 841.293471][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.459903][ T28] audit: type=1400 audit(2000000049.250:4622): avc: denied { mount } for pid=21890 comm="syz.8.5220" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 841.975002][T21922] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 843.703931][T21952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5232'. [ 844.978857][T21976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.986127][T21976] IPv6: NLM_F_CREATE should be set when creating new route [ 844.993472][T21976] IPv6: NLM_F_CREATE should be set when creating new route [ 845.001374][T21976] IPv6: NLM_F_CREATE should be set when creating new route [ 845.436515][T21975] loop0: detected capacity change from 0 to 4096 [ 845.509233][T21975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.542427][ T28] audit: type=1400 audit(2000000053.340:4623): avc: denied { write } for pid=21967 comm="syz.0.5242" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 845.806961][T21983] netlink: 'syz.1.5244': attribute type 7 has an invalid length. [ 846.549704][T21984] lo speed is unknown, defaulting to 1000 [ 846.656517][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.077726][ T28] audit: type=1400 audit(2000000054.870:4624): avc: denied { setopt } for pid=22002 comm="syz.0.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 847.156165][T22013] netlink: 276 bytes leftover after parsing attributes in process `syz.7.5250'. [ 847.170882][T22013] netlink: 276 bytes leftover after parsing attributes in process `syz.7.5250'. [ 848.353217][T15054] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.469376][T15054] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.580725][T15054] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.981317][T15054] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.047098][T22032] netlink: 'syz.0.5254': attribute type 1 has an invalid length. [ 849.056234][T22032] netlink: 'syz.0.5254': attribute type 4 has an invalid length. [ 849.069906][T22032] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5254'. [ 849.316933][T15054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.325682][ T28] audit: type=1400 audit(2000000057.120:4625): avc: denied { write } for pid=22053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.374874][ T28] audit: type=1400 audit(2000000057.140:4626): avc: denied { write } for pid=22069 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.378191][T15054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.411951][T15054] bond0 (unregistering): Released all slaves [ 849.416465][T22072] loop0: detected capacity change from 0 to 128 [ 849.428178][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 849.441955][T22072] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 849.457712][T22072] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.473668][T15054] IPVS: stopping master sync thread 17552 ... [ 849.507969][ T28] audit: type=1400 audit(2000000057.300:4627): avc: denied { write } for pid=22071 comm="syz.0.5263" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 849.593851][ T28] audit: type=1400 audit(2000000057.380:4628): avc: denied { setattr } for pid=22071 comm="syz.0.5263" path="/129/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 849.618713][T15054] hsr_slave_0: left promiscuous mode [ 849.629243][T15054] hsr_slave_1: left promiscuous mode [ 849.635293][T15054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.643099][T15054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.645448][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5263'. [ 849.672766][T15054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.684027][T15054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.715107][T15054] batadv0: left allmulticast mode [ 849.719236][ T28] audit: type=1400 audit(2000000057.510:4629): avc: denied { write } for pid=22076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.720955][T15054] batadv0: left promiscuous mode [ 849.786242][T15054] veth1_macvtap: left promiscuous mode [ 849.796546][ T28] audit: type=1400 audit(2000000057.580:4630): avc: denied { write } for pid=22093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.808664][T15054] veth0_macvtap: left promiscuous mode [ 849.847008][T15054] veth1_vlan: left promiscuous mode [ 849.853553][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5265'. [ 849.956056][T15054] team0 (unregistering): Port device team_slave_1 removed [ 849.970850][T15054] team0 (unregistering): Port device team_slave_0 removed [ 850.040716][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 850.084422][T22098] netlink: 'syz.2.5267': attribute type 4 has an invalid length. [ 850.128982][T22098] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5267'. [ 850.188494][T18746] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 850.204123][T22104] lo speed is unknown, defaulting to 1000 [ 850.318245][ T28] audit: type=1400 audit(2000000058.110:4631): avc: denied { write } for pid=22103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.395211][ T28] audit: type=1400 audit(2000000058.190:4632): avc: denied { write } for pid=22119 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.466426][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 850.563744][T15054] IPVS: stop unused estimator thread 0... [ 850.657939][ T28] audit: type=1400 audit(2000000058.450:4633): avc: denied { write } for pid=22126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.743487][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 851.144568][T22154] loop0: detected capacity change from 0 to 512 [ 851.224114][T22154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 851.327018][T22154] EXT4-fs (loop0): too many log groups per flexible block group [ 851.337291][T22154] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 851.461648][T22154] EXT4-fs (loop0): mount failed [ 851.818122][T22179] SET target dimension over the limit! [ 851.923965][T22187] loop0: detected capacity change from 0 to 2048 [ 851.965435][T22187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.995030][T22182] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 852.266214][T22196] netlink: 'syz.8.5285': attribute type 4 has an invalid length. [ 852.301459][T22199] tipc: Cannot configure node identity twice [ 852.313539][T22197] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5286'. [ 852.331347][T22196] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5285'. [ 852.425668][T22192] lo speed is unknown, defaulting to 1000 [ 852.815223][T22163] No such timeout policy "syz1" [ 852.893232][T22190] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 853.740622][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.251999][T22220] lo speed is unknown, defaulting to 1000 [ 855.521723][T22241] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5296'. [ 857.904064][T22277] netlink: 'syz.0.5303': attribute type 4 has an invalid length. [ 857.977083][T22277] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5303'. [ 858.294650][T22289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22289 comm=syz.7.5305 [ 858.378159][T22277] loop0: detected capacity change from 0 to 128 [ 858.578919][T22277] vfat: Unknown parameter '' [ 858.586252][T22288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5308'. [ 858.977802][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 858.977818][ T28] audit: type=1400 audit(2000000066.770:4651): avc: denied { name_connect } for pid=22287 comm="syz.1.5308" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 859.545444][T22301] netlink: 'syz.8.5312': attribute type 1 has an invalid length. [ 859.559162][T22301] netlink: 'syz.8.5312': attribute type 4 has an invalid length. [ 859.812254][T22301] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.5312'. [ 860.799894][T22328] loop0: detected capacity change from 0 to 512 [ 860.813034][T22323] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5315'. [ 860.822772][T22328] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 861.583949][T22328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.688821][T22328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.736114][T22336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5319'. [ 861.784262][ T28] audit: type=1400 audit(2000000069.580:4652): avc: denied { write } for pid=22334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.810378][T22344] netlink: 'syz.7.5321': attribute type 4 has an invalid length. [ 861.812936][ T28] audit: type=1400 audit(2000000069.580:4653): avc: denied { write } for pid=22354 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.849406][T22344] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5321'. [ 863.259643][T22384] random: crng reseeded on system resumption [ 863.396422][ T28] audit: type=1400 audit(2000000071.060:4654): avc: denied { read } for pid=22378 comm="syz.0.5325" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 863.427688][ T28] audit: type=1400 audit(2000000071.060:4655): avc: denied { ioctl } for pid=22378 comm="syz.0.5325" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 863.458927][ T28] audit: type=1400 audit(2000000071.180:4656): avc: denied { write } for pid=22364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.483935][ T28] audit: type=1400 audit(2000000071.220:4657): avc: denied { write } for pid=22389 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.631414][T22408] netlink: 276 bytes leftover after parsing attributes in process `syz.8.5330'. [ 864.641389][T22408] netlink: 276 bytes leftover after parsing attributes in process `syz.8.5330'. [ 864.774062][T22407] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5329'. [ 865.080274][T22417] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 865.868475][ T28] audit: type=1400 audit(2000000073.650:4658): avc: denied { write } for pid=22413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.921116][ T28] audit: type=1400 audit(2000000073.710:4659): avc: denied { write } for pid=22440 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.968253][T22447] pim6reg: entered allmulticast mode [ 865.995689][T22421] pim6reg: left allmulticast mode [ 866.008026][T22450] netlink: 'syz.0.5339': attribute type 4 has an invalid length. [ 866.049296][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5341'. [ 866.052377][T22446] netlink: 'syz.2.5338': attribute type 1 has an invalid length. [ 866.065205][T22450] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5339'. [ 866.155306][ T28] audit: type=1400 audit(2000000073.950:4660): avc: denied { write } for pid=22448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.192834][T22446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 866.213354][ T28] audit: type=1400 audit(2000000074.010:4661): avc: denied { write } for pid=22472 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.257032][T22461] bond8: entered allmulticast mode [ 866.325337][T22450] loop0: detected capacity change from 0 to 128 [ 866.342061][T22450] vfat: Unknown parameter '' [ 867.047656][T22503] loop0: detected capacity change from 0 to 512 [ 867.065239][T22503] EXT4-fs (loop0): invalid inodes per group: 0 [ 867.065239][T22503] [ 867.501984][T22503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5348'. [ 867.531083][T22503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5348'. [ 867.547141][T22503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5348'. [ 867.634914][T22526] loop0: detected capacity change from 0 to 512 [ 867.642910][T22526] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 867.659902][T22526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.669105][T22526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.814121][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5355'. [ 867.967876][T22536] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 867.980195][T22528] IPVS: stopping backup sync thread 22536 ... [ 868.005275][T22533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22533 comm=syz.8.5357 [ 868.008057][T22538] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5358'. [ 869.182684][T22543] netlink: 'syz.8.5359': attribute type 1 has an invalid length. [ 869.252305][T22543] bond0: (slave veth3): Enslaving as an active interface with a down link [ 869.267139][T22543] bond0: (slave dummy0): making interface the new active one [ 869.275252][T22543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 869.284524][T22543] netlink: 'syz.8.5359': attribute type 10 has an invalid length. [ 869.297518][T22543] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5359'. [ 869.306510][T22543] dummy0: entered promiscuous mode [ 869.317242][T22543] bond0: (slave dummy0): Releasing active interface [ 869.644342][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5364'. [ 870.223011][T22578] loop0: detected capacity change from 0 to 512 [ 870.232895][T22578] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 870.270389][T22578] rdma_rxe: rxe_newlink: failed to add lo [ 870.288190][T22578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.298837][T22578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.446690][T22577] IPVS: stopping backup sync thread 22582 ... [ 870.453072][T22582] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 872.922809][T22598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5383'. [ 872.959285][T22603] @0Ù: renamed from bond_slave_1 [ 873.121283][T22606] xt_CT: No such helper "snmp_trap" [ 874.557511][T22626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 874.565431][T22626] IPv6: NLM_F_CREATE should be set when creating new route [ 874.572941][T22626] IPv6: NLM_F_CREATE should be set when creating new route [ 874.580559][T22626] IPv6: NLM_F_CREATE should be set when creating new route [ 875.160465][T22623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5380'. [ 876.657481][T22630] sctp: [Deprecated]: syz.1.5384 (pid 22630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 876.657481][T22630] Use struct sctp_sack_info instead [ 877.582741][T22633] bond3: entered allmulticast mode [ 877.614338][T22633] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5385'. [ 877.951697][T22643] lo: Caught tx_queue_len zero misconfig [ 877.984541][T22643] ªªªªªª: renamed from vlan0 [ 878.027842][T22643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5386'. [ 878.101666][T22652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5390'. [ 878.132661][T22643] pim6reg: entered allmulticast mode [ 878.150492][T22643] pim6reg: left allmulticast mode [ 878.212542][T22664] netlink: 'syz.8.5394': attribute type 6 has an invalid length. [ 878.390929][T22671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5395'. [ 878.487702][T22682] loop0: detected capacity change from 0 to 512 [ 878.521404][T22682] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 878.551420][T22682] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.5408: bad orphan inode 131083 [ 878.563323][T22682] loop0: lost filesystem error report for type 5 error -117 [ 878.563931][T22682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.618199][T22682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5408'. [ 878.628472][ T28] audit: type=1400 audit(2000000086.420:4662): avc: denied { write } for pid=22679 comm="syz.0.5408" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 878.657039][ T28] audit: type=1400 audit(2000000086.450:4663): avc: denied { write } for pid=22679 comm="syz.0.5408" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 879.498871][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.791869][T22704] lo speed is unknown, defaulting to 1000 [ 880.105125][T22699] loop0: detected capacity change from 0 to 1024 [ 880.356845][T22712] netlink: 'syz.7.5404': attribute type 4 has an invalid length. [ 880.400639][T22712] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5404'. [ 880.494446][T22714] tipc: Enabled bearer , priority 10 [ 880.794017][T22730] xt_hashlimit: max too large, truncated to 1048576 [ 881.984353][T22734] C: renamed from veth1_to_team [ 882.614987][T22734] netlink: 'syz.8.5412': attribute type 3 has an invalid length. [ 882.635105][T22734] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5412'. [ 882.889355][T22734] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 883.915585][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5419'. [ 885.210049][T22788] loop0: detected capacity change from 0 to 4096 [ 886.137856][T22788] EXT4-fs: error -4 creating inode table initialization thread [ 886.145676][T22788] EXT4-fs (loop0): mount failed [ 886.269192][ T28] audit: type=1400 audit(2000000094.010:4664): avc: denied { mount } for pid=22800 comm="syz.7.5424" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 887.478357][T22811] siw: device registration error -23 [ 887.686290][ T28] audit: type=1326 audit(2000000095.480:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.739990][ T28] audit: type=1326 audit(2000000095.480:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.791491][ T28] audit: type=1326 audit(2000000095.480:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.827234][ T28] audit: type=1326 audit(2000000095.480:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.884497][ T28] audit: type=1326 audit(2000000095.480:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.910810][ T28] audit: type=1326 audit(2000000095.480:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.942863][ T28] audit: type=1326 audit(2000000095.480:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.969491][ T28] audit: type=1326 audit(2000000095.480:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 887.995591][ T28] audit: type=1326 audit(2000000095.480:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22819 comm="syz.7.5430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2875ce59 code=0x7ffc0000 [ 888.094836][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5432'. [ 889.481011][T22849] random: crng reseeded on system resumption [ 889.534414][T22856] loop0: detected capacity change from 0 to 256 [ 889.639370][T22863] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5441'. [ 889.702544][T22871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5442'. [ 889.740054][T22876] netlink: 'syz.0.5443': attribute type 8 has an invalid length. [ 889.806229][T22878] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5446'. [ 889.985891][T22892] bridge0: entered allmulticast mode [ 890.986021][T22899] loop0: detected capacity change from 0 to 128 [ 891.985431][ T28] kauditd_printk_skb: 152 callbacks suppressed [ 891.985481][ T28] audit: type=1326 audit(2000000099.740:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f47d751e0ca code=0x7ffc0000 [ 892.233416][T22899] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 892.802761][T22899] FAT-fs (loop0): data area starts beyond volume (33 > 0) [ 892.927987][T22899] FAT-fs (loop0): Can't find a valid FAT filesystem [ 893.034731][ T28] audit: type=1326 audit(2000000100.820:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47d74dd68e code=0x7ffc0000 [ 893.155190][ T28] audit: type=1326 audit(2000000100.830:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47d751caeb code=0x7ffc0000 [ 893.184077][ T28] audit: type=1326 audit(2000000100.870:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47d74dd68e code=0x7ffc0000 [ 893.318081][ T28] audit: type=1326 audit(2000000100.910:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 893.494103][ T28] audit: type=1326 audit(2000000100.930:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 893.643431][ T28] audit: type=1326 audit(2000000100.930:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 893.683507][ T28] audit: type=1326 audit(2000000100.930:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 893.709870][ T28] audit: type=1326 audit(2000000100.930:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 893.737843][ T28] audit: type=1326 audit(2000000100.930:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22898 comm="syz.0.5453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d751ce59 code=0x7ffc0000 [ 893.754764][T22925] sctp: [Deprecated]: syz.8.5457 (pid 22925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 893.754764][T22925] Use struct sctp_sack_info instead [ 894.234263][T22934] loop0: detected capacity change from 0 to 1764 [ 894.245525][T22934] iso9660: Bad value for 'sbsector' [ 895.537027][T22955] sz1: rxe_newlink: already configured on lo [ 897.040167][T22977] loop0: detected capacity change from 0 to 512 [ 897.078118][T22977] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 898.165986][T22994] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5480'. [ 898.390940][T23009] rdma_rxe: rxe_newlink: failed to add lo [ 898.924869][T23018] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 899.800922][T23023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5489'. [ 899.816931][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5489'. [ 900.225675][T23034] bridge0: entered allmulticast mode [ 901.342764][T23064] lo speed is unknown, defaulting to 1000 [ 902.514554][T23087] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5512'. [ 902.621315][T23084] bond7: entered allmulticast mode [ 902.646088][T23086] bridge0: entered allmulticast mode [ 902.860924][T23104] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5518'. [ 902.974238][T23115] netlink: 'syz.7.5523': attribute type 1 has an invalid length. [ 903.006115][T23118] pim6reg: entered allmulticast mode [ 903.038339][T23118] pim6reg: left allmulticast mode [ 903.298521][T23154] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5540'. [ 903.434124][T23134] lo speed is unknown, defaulting to 1000 [ 903.562328][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 903.562343][ T28] audit: type=1326 audit(2000000111.360:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 903.613494][ T28] audit: type=1326 audit(2000000111.390:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 903.650997][ T28] audit: type=1326 audit(2000000111.390:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 903.680193][ T28] audit: type=1326 audit(2000000111.400:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 903.741858][ T28] audit: type=1326 audit(2000000111.400:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 903.811592][ T28] audit: type=1326 audit(2000000111.400:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 903.840008][ T28] audit: type=1326 audit(2000000111.400:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 903.896549][ T28] audit: type=1326 audit(2000000111.400:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23179 comm="syz.1.5552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f240795ce59 code=0x7ffc0000 [ 904.523469][T23245] netlink: 'syz.8.5581': attribute type 10 has an invalid length. [ 904.704526][ T28] audit: type=1400 audit(2000000112.500:4985): avc: denied { read write } for pid=23259 comm="syz.0.5588" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 904.732243][T23260] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 904.739798][T23258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5587'. [ 904.743467][ T28] audit: type=1400 audit(2000000112.500:4986): avc: denied { open } for pid=23259 comm="syz.0.5588" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 904.801344][T23268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5592'. [ 904.815674][T23268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5592'. [ 904.833315][T23272] netlink: 'syz.7.5593': attribute type 1 has an invalid length. [ 904.841698][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5593'. [ 905.030844][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5612'. [ 905.067603][T23295] loop0: detected capacity change from 0 to 512 [ 905.078946][T23295] EXT4-fs: Ignoring removed bh option [ 905.105844][T23295] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 906.008677][T23295] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.5602: corrupted in-inode xattr: e_value size too large [ 906.034886][T23310] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5603'. [ 906.050999][T23315] netlink: 'syz.2.5606': attribute type 3 has an invalid length. [ 906.060065][T23295] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 906.064641][T23295] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5602: couldn't read orphan inode 15 (err -117) [ 906.074082][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 906.074122][ C0] EXT4-fs (loop0): initial error at time 2000000113: ext4_iget_extra_inode:5180: inode 15 [ 906.074291][ C0] EXT4-fs (loop0): last error at time 2000000113: ext4_iget_extra_inode:5180: inode 15 [ 906.208479][T23325] netlink: 'syz.8.5611': attribute type 4 has an invalid length. [ 906.232831][T23325] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5611'. [ 906.265870][T23295] loop0: lost filesystem error report for type 5 error -117 [ 906.270154][T23295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.828257][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.182167][T23420] loop0: detected capacity change from 0 to 512 [ 907.222643][T23420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.246610][T23420] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.345299][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.556239][T23465] loop0: detected capacity change from 0 to 512 [ 908.935850][T23479] rdma_rxe: rxe_newlink: failed to add lo [ 909.551854][T23465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.565731][T23465] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.743429][T23465] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.5676: corrupted xattr block 33: invalid ea_ino [ 909.775538][T23465] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 910.537417][T23301] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 910.581257][T23465] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.5676: corrupted xattr block 33: invalid ea_ino [ 910.830832][T23465] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 910.845451][T23465] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.5676: corrupted xattr block 33: invalid ea_ino [ 910.859614][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 910.859631][ T28] audit: type=1400 audit(2000000118.640:4989): avc: denied { read } for pid=23464 comm="syz.0.5676" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 911.026289][T23465] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 911.076934][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.191792][T23505] loop0: detected capacity change from 0 to 512 [ 911.201004][T23510] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5695'. [ 911.250331][T23505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.291294][T23505] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.349381][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.366014][T23536] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.5707'. [ 911.399973][T23536] netlink: zone id is out of range [ 911.410010][T23543] loop0: detected capacity change from 0 to 1764 [ 911.416471][T23536] netlink: del zone limit has 4 unknown bytes [ 911.454245][T23543] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 911.531745][T23567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5719'. [ 911.555432][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5722'. [ 911.565805][T23575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5722'. [ 911.575537][T23567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5719'. [ 911.585535][T23567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5719'. [ 911.671217][ T28] audit: type=1400 audit(2000000119.470:4990): avc: denied { write } for pid=23595 comm="syz.0.5736" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 911.729521][T23606] loop0: detected capacity change from 0 to 1024 [ 911.765818][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5742'. [ 911.803059][T23606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.826320][ T28] audit: type=1400 audit(2000000119.620:4991): avc: denied { write } for pid=23603 comm="syz.0.5740" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 911.869159][ T28] audit: type=1400 audit(2000000119.620:4992): avc: denied { read } for pid=23603 comm="syz.0.5740" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 911.907483][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.919440][T23632] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5752'. [ 911.930268][T23632] netlink: 'syz.7.5752': attribute type 1 has an invalid length. [ 911.969621][T23640] loop0: detected capacity change from 0 to 128 [ 911.998157][T23640] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 912.016596][T23640] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 912.116555][T18746] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 912.272765][T23677] netlink: 'syz.8.5772': attribute type 28 has an invalid length. [ 912.284882][T23677] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5772'. [ 912.617524][T23741] netlink: 'syz.8.5803': attribute type 16 has an invalid length. [ 912.633777][T23741] netlink: 'syz.8.5803': attribute type 17 has an invalid length. [ 912.642150][T23741] netlink: 'syz.8.5803': attribute type 27 has an invalid length. [ 913.545499][ T28] audit: type=1400 audit(2000000121.340:4993): avc: denied { bind } for pid=23766 comm="syz.0.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 913.596191][T23775] geneve2: entered promiscuous mode [ 913.601887][T23778] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 913.630071][T23775] geneve2: entered allmulticast mode [ 913.638842][T23783] netlink: 'syz.7.5825': attribute type 10 has an invalid length. [ 913.655732][ T39] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.665033][ T39] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.677819][T23783] vxcan0: entered promiscuous mode [ 913.686869][T23783] team0: Device vxcan0 is of different type [ 913.705909][ T39] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.724172][T23795] netlink: 'syz.0.5831': attribute type 3 has an invalid length. [ 913.727016][ T39] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.133836][T23892] vlan0: entered promiscuous mode [ 914.149330][T23897] 9p: Bad value for 'rfdno' [ 914.199104][T23902] loop0: detected capacity change from 0 to 1024 [ 914.215301][T23902] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 914.233064][T23902] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.5883: lblock 2 mapped to illegal pblock 2 (length 1) [ 914.247231][T23902] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 914.247443][T23902] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 914.256497][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 914.256528][ C0] EXT4-fs (loop0): initial error at time 2000000122: ext4_map_blocks:791: inode 3: block 2 [ 914.256563][ C0] EXT4-fs (loop0): last error at time 2000000122: ext4_map_blocks:791: inode 3: block 2 [ 914.292065][T23902] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.5883: lblock 0 mapped to illegal pblock 48 (length 1) [ 914.306892][T23902] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 914.308295][T23902] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 914.327365][T23902] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.5883: Failed to acquire dquot type 0 [ 914.340014][T23902] loop0: lost filesystem error report for type 5 error -117 [ 914.340538][T23902] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 914.357430][T23902] loop0: lost filesystem error report for type 5 error -117 [ 914.359188][T23902] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.5883: mark_inode_dirty error [ 914.390250][T23902] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 914.391674][T23902] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 914.428412][T23902] EXT4-fs (loop0): 1 orphan inode deleted [ 914.434815][T23902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.449426][ T39] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 914.471852][ T39] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 914.490233][ T39] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 914.534546][T18746] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.569386][T18746] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 914.584753][T18746] loop0: lost filesystem error report for type 5 error -117 [ 914.587707][T18746] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 914.606007][T18746] loop0: lost filesystem error report for type 5 error -117 [ 914.608011][T18746] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 914.631909][T18746] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 914.724958][T23971] xt_hashlimit: size too large, truncated to 1048576 [ 914.954352][T24018] hsr0: entered promiscuous mode [ 914.965502][T24016] hsr0: left promiscuous mode [ 915.029044][T24032] loop0: detected capacity change from 0 to 1764 [ 915.283140][T22641] ================================================================== [ 915.291600][T22641] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 915.298196][T22641] [ 915.300519][T22641] write to 0xffff888107118c10 of 8 bytes by task 2978 on cpu 0: [ 915.308483][T22641] dentry_kill+0x139/0x500 [ 915.313089][T22641] finish_dput+0x16/0x1d0 [ 915.317699][T22641] dput+0x48/0x50 [ 915.321337][T22641] step_into_slowpath+0x38c/0x4c0 [ 915.326928][T22641] path_lookupat+0x2eb/0x4c0 [ 915.331621][T22641] filename_lookup+0x329/0x390 [ 915.336380][T22641] do_readlinkat+0x74/0x2f0 [ 915.340878][T22641] __x64_sys_readlink+0x47/0x60 [ 915.345816][T22641] x64_sys_call+0x2b51/0x3020 [ 915.350578][T22641] do_syscall_64+0x136/0x3c0 [ 915.355167][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.361066][T22641] [ 915.363398][T22641] read to 0xffff888107118c10 of 8 bytes by task 22641 on cpu 1: [ 915.372881][T22641] fast_dput+0x64/0x2e0 [ 915.377041][T22641] dput+0x1f/0x50 [ 915.380672][T22641] filename_unlinkat+0x217/0x410 [ 915.385717][T22641] __se_sys_unlink+0x2b/0xe0 [ 915.390573][T22641] __x64_sys_unlink+0x1f/0x30 [ 915.395261][T22641] x64_sys_call+0x2eb6/0x3020 [ 915.400131][T22641] do_syscall_64+0x136/0x3c0 [ 915.404913][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.411245][T22641] [ 915.413558][T22641] value changed: 0xffff888237807ca0 -> 0x0000000000000000 [ 915.420754][T22641] [ 915.423069][T22641] Reported by Kernel Concurrency Sanitizer on: [ 915.429257][T22641] CPU: 1 UID: 0 PID: 22641 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 915.438669][T22641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.448767][T22641] ==================================================================