last executing test programs: 43.516402896s ago: executing program 2 (id=3): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa480}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) 43.406596045s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey72WYTYzadmP18YHafZ+bZnee7z7w8+zy7AXStoewhidgREb9GxEAju7jAUOPp+tXzkzeunp9MYmHhtT+SvNy1q+cny6Ll67YXmeE0Iv0wKXay2OzZcycn6vXamSI/OnfqrdHZs+eeeOfUxInaidrp8SNHDh8ae/qp8Sc7EmcW17V978/s3/viG5denjx26c0fv87qu6PY3hxHpwxlgf+5kGvd9mind1axnU3ppLfCirAqPRGRNVdffv4PRE/caryBeOGDSisHrKvs3rSl/eb5BWATS6LqGgDVKG/02fffcrlDXY8N4cqzjS9AWdzXi6WxpTfSokxfy/fbThqKiGPzf32eLbFO4xAAAM0+nvzsaH9EvHfjq5eyvsdARJTjQffkj7/lj7uKOZTBiPh/ROyOiLsiYk9E3F2UvTci7ltjfW7v/6SX1/iWy8r6f88Uc1uL+39l7y8Ge4rczjz+vuT4dL12sPhMhqNvS5YfW2Yf3z7/yyfttjX3/7Il23/ZFyzqcbm3ZYBuamJuIu+UdsCVixH7epeKP7k5E5BExN6I2Le6t95VJqYf+3J/u0Irx7+MDswzLXyRhTefxT8fLfGXkub5yenb5idHt0a9dnC0PCpu99PPH73abv9rir8DrtQaz03t31pkMGmer53t7P7/5fGf9iev5/PM/cW6dyfm5s6MRfQnR/P8ovXjt15b5svy2fE/fGDp83938Zos/vsjIjuIH4iIByPioaLuD0fEIxFxYJkYf3hu5fgjraj9L0ZMLXn9u3n8t7T/6hM9J7//pt3+/1n7H85Tw8Wa/Pq3gqWqk10uWiu4ls8OAAAA/ivS/DfwSTpyM52mIyON3/Dvif+l9ZnZucePz7x9eqrxW/nB6EvLka6BYjy0Pl2vjSXzxTs2xkfHi7Hicrz0UDFu/GnPtjw/MjlTn6o4duh229uc/5nfe6quHbDOti25drz/jlcEqEDrPHq6OHvhlXAxgM3K/7Whe61w/jf/DwbYZNz/oXstdf5faMmbC4DNyf0fupfzH7pU+l3VNQAq5P4PXWkt/+tfx8TWjVGNahIbtVHyRESZSDdEfSTWKVH1lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g4AAP//K2Lmiw==") 42.56081669s ago: executing program 2 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0x35b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 42.156258316s ago: executing program 2 (id=19): setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x1, 0x6, 0x2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x2bda, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 42.156125956s ago: executing program 32 (id=19): setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x1, 0x6, 0x2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x2bda, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 38.165013279s ago: executing program 5 (id=69): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000700)="c87b35043e70167a3e59c95cf2d2470a409aed8df615eda880680920e7ea2e4413084cba0ac21d664201fbe69bf2660ea3918ef0b6727862bbd91dfce9385577a868d3a94c", 0x45}, {0x0}, {&(0x7f00000009c0)="8fc0b2a81484cc772382f160be90c69e671bd63af074a263c6b4ad7db8683d47a7c6ef6afcab4f657c041926c2d44a244baed8cd0f37d434bb44167b50e348d991ba6a7ccb45b3c145d06835e8ba9e499823a6aa5bc71a4a3c2cb14d0560a9cdf65a95c0a98a77ab116ba74c27a023bd062d409f9aeecec3c46e9f005831b28971a8", 0x82}, {0x0}], 0x4}}], 0x1, 0x24044000) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000", 0x3e}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740b", 0x11c}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c7", 0xbc}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 38.076440878s ago: executing program 5 (id=71): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x58cd, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x453, &(0x7f0000000640)="$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") 37.988147495s ago: executing program 5 (id=72): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(0x0, 0x0, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 36.978464475s ago: executing program 5 (id=82): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00', 0x2}], 0x1}, 0x80054) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x225451, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x131, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 36.875674523s ago: executing program 5 (id=83): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaa", 0x90}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x15e}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e6153", 0xea}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 36.234300541s ago: executing program 5 (id=91): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 36.229971961s ago: executing program 33 (id=91): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.474943654s ago: executing program 6 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x18, 0x1, 0x0) r3 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x80, 0x2, 0x167}, &(0x7f0000001040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 2.348419602s ago: executing program 1 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 2.1476747s ago: executing program 1 (id=476): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xa, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 2.052191038s ago: executing program 0 (id=478): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) ptrace(0x10, r0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8080c61) wait4(r0, 0x0, 0x20000000, 0x0) 2.051849708s ago: executing program 1 (id=479): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x21d2, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0xffffffff, 0x17}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000300"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) 1.935484899s ago: executing program 3 (id=481): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001140)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7fffffff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.768203284s ago: executing program 3 (id=482): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x5) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1a7}}, './file0\x00'}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000000)="6d8b140a930c806ec6b601dce1d37047d642a7c86773c88eeda34910c80eb0277fcd6b99afe42e5950a77cbf930fbbcb4008a02842e524b3ae76b2c9", &(0x7f0000000040)=""/22, &(0x7f00000000c0)="a0121f80ca4f7390111356a2efaac972c62937c2a41c94906f5107be2ef4de9c7bf197", &(0x7f0000000680)="198f78c752b2f1daf7a6c86effa364506c48569fcdae389385fa0aa3925daa3b48a361b41b47898fab3ea2b29c1833da65a4b85bca803a67ff71cee4c34c16df8c6baef7ef0ade0205841a36b694b3fa3c050123ebb7996a14238fc187e308c80d6b1f5a26e1589f97753bbbd980232f5aeb79076ce0b8f64f9d7572b0cfe4651235b3f8b2739b8801ab2fea63b2f5eb49034054777bea0307c61a1eeaaa2ae9f92e63d72ca87565bce68a907d293da7989283675be985b23994f169e8f0b475ea4fd4c03b934fe929a05aa18e", 0x3, r2, 0x4}, 0x38) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, 0x0, 0x800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) io_pgetevents(0x0, 0xe, 0x0, &(0x7f0000000680), &(0x7f0000000100), 0x0) 1.768009253s ago: executing program 3 (id=483): io_setup(0x8, &(0x7f0000000040)=0x0) r1 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000003c0)={&(0x7f0000000380)=""/48, 0x30}) syz_pidfd_open(r1, 0x0) io_submit(r0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) writev(r4, &(0x7f00000002c0), 0x0) eventfd2(0x7, 0x801) io_submit(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.732782727s ago: executing program 4 (id=484): preadv(0xffffffffffffffff, 0x0, 0x0, 0xc267, 0xffffff7c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg(r3, 0x0, 0x40000181) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.689835251s ago: executing program 3 (id=485): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x8001}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3656}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 1.659448123s ago: executing program 0 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001400038008000140000000000800024000ebff0640000000180a0101000b000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008"], 0xc8}}, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x52020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x3, 0x1, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x4}, 0x8) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_create_resource$binfmt(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') linkat(r5, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 1.388292987s ago: executing program 4 (id=487): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1.388072017s ago: executing program 0 (id=488): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x9, 0x7, 0x0, 0x2, 0x101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x5, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x9, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x0, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x2, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 1.290695296s ago: executing program 0 (id=489): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRESHEX, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6) 1.208038873s ago: executing program 3 (id=490): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffce0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) lseek(r0, 0x0, 0x3) 1.12824167s ago: executing program 0 (id=491): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000002) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x571, 0x4, 0x11723705, 0x2, r4, 0xfffffffa, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) 766.947002ms ago: executing program 1 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) unshare(0x60000600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x100, @mcast1, 0x3}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000680012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c002e0000000000000000000c001e00a00000000000000008001b00fbff", @ANYRES32=0x0, @ANYBLOB="1b977fb90ad7d848ed6f5b11aed3da209288af47fdfa3a7bf2421f8bd2f4c1292debb8c3e237b956225d9cc0ad91357e7bf499c40842b17c0d95c9d237e3c4b334d82f4c07b1291a2f6ba5937bcd9cb5ddcf3c6969c76fbab8ac40810036501895c5da8d351c9ae220b026855fb2841d51bde26ef4d4e9f55e229451bb707d544257bbae4c5e81e49afe417a20cd01547a16a5bdd774cfc2b783838c232bc23b5f49b1030106"], 0x90}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) sendfile(r4, r4, 0x0, 0xe3aa6ea) 604.154757ms ago: executing program 1 (id=493): r0 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x7550e2b984561186, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 516.238134ms ago: executing program 4 (id=494): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 486.835497ms ago: executing program 6 (id=495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x95}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) waitid(0x2, r6, &(0x7f0000000000), 0x4, &(0x7f0000000080)) 463.454809ms ago: executing program 6 (id=496): socket(0x28, 0x5, 0x0) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = timerfd_create(0x0, 0x0) io_submit(0x0, 0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x2000) 454.8423ms ago: executing program 4 (id=497): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003f40)={[{@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0xfe, 0x28c, &(0x7f0000004240)="$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") r0 = open(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0xfffffffffffffff7, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x103042, 0x0) ftruncate(r2, 0x2007fff) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) ftruncate(r2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x7, 0x94e, 0x0, 'queue1\x00', 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) gettimeofday(0x0, &(0x7f0000002980)) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 392.286235ms ago: executing program 0 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x3, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 364.155568ms ago: executing program 6 (id=499): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 349.459569ms ago: executing program 3 (id=500): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200), 0x0) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x21dd, &(0x7f0000000340)={0x0, 0x7604, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 264.831717ms ago: executing program 4 (id=501): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x400c044) 200.356942ms ago: executing program 6 (id=502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$eJzs3M9vFGUfAPDvbLu0wMtLRSQBUQtobExsoaBw8IKJiQdNjHiQY9MWUlnA0B6ENLIkBs8k3o1H400Tr3o0nvwD8ODBxJAQ5QJ4WjO7M9vt/uh2S2nT7ueTLDzP7PPM8zwz88w+M09nAuhbo+k/ScT/IuJuROytRZcnGK399+jB4vTjB4vTUa5Uzv2dVNM9TOOZPN/uLDJWiCh8kTStsGb++o1LU6XS7LUoV+MTC5c/nZi/fuP1uctTF2cvzl6ZPHPm1MkTp9+cfKM563DXRrUpL23Xw0OfXz188N3zd96fHmxeWWM7Ospz/VPumjTybdvBK43r2wb2NIST1nbd3NDKsGrD2WFYTPv/Yuno+c2uELBhKpVKZajz1+VKs1stS4AtK4nNrgGwOfIf+vT6N//UlhQ3Yvix6e6frV0APXywWLkZMf2o3v7BKGRpik3Xt6kVxkw9GY2Ij8v/fp1+YqX7EH+sU4EAQN/7+Ww2DEyiafxXiAMN6f6fzaGMRMQzEbEvIp6NiP0R8VzEsrTLJBGVFcrf37ygXv4P2SxC4d5a27Ya6fjvrWxuK/9k5eZJRgay2J6IfMA8ezzbJmNRHLowV5o90WH9O7qU3zj+Sz9p+flYMKvHvcGmwebM1MLU2lrb6v6tiEODze1PBtMdl0/jJBFxMCIO9bDekYbw3GvfHq5Hmi4rure/qtJmSm9d5s8q30S8Wtv/5Vi2/5dKTBrnJwst85MTw1GaPT6RHgXH25bx62+3P+hUftf2//hnc5Z3Tv907kmbXZfu/10Nx3/k87dL7R9JIpL6fO18RGWgtzJu//5ldb2jx1q/W+vxvyP5qBrO+9dnUwsL105E7Ejea10+uZQ3j+fp0/aPHWvf//dledIt8XxEpAfxCxHxYsRAXvcjEXE0Ito0re6Xt1/+pNN3qzz+n5q0/TNtz3/L9v/SfP0qA3nmdMnApSN3H3c4eWTt37vy/j9VDY1lS9qf/5Jlp4jV1vTJth4AAABsDYWo/u1/YbweLhTGx2v3gPbHrkLp6vzCSxFxZab2jMBIFAsX5kqz+Q25kSgm+f3PkYb4ZFP8ZHbf+KuBndX4+PTV0sxmNx763O5qn09a+n/qrx7v8wJb0DZ6Dg3oUbf+f+DOBlUE2HB+/6F/NfT/Tm+2KPtLGdie/P5D/2rX/2/Gdys+u+CcAVtfRV+GvrZy/+/+vk1g6xqMD+vh6mPPbZ+2BbYj43/oS70+199boDLU/qvhaPPGgOGnU42dbcralEA6slrHFRYjYnWJd66liHwI2PkND4XeVjgUrV8NxEq5kvbvcYiIcsdc6VbpWp+LB9b94M/fibLeh833S/20uMrd/aQB1/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC28l8AAAD//w1dzgU=") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x2000000000006) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) 95.396921ms ago: executing program 6 (id=503): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) 56.831345ms ago: executing program 4 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 0s ago: executing program 1 (id=505): syz_io_uring_setup(0x214e, 0x0, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r4, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 34.663070][ T28] audit: type=1400 audit(1771393949.148:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.686086][ T28] audit: type=1400 audit(1771393949.178:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.688263][ T3302] cgroup: Unknown subsys name 'net' [ 34.714047][ T28] audit: type=1400 audit(1771393949.198:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.854773][ T3302] cgroup: Unknown subsys name 'cpuset' [ 34.861068][ T3302] cgroup: Unknown subsys name 'rlimit' [ 34.972654][ T28] audit: type=1400 audit(1771393949.458:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.996164][ T28] audit: type=1400 audit(1771393949.468:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.023745][ T28] audit: type=1400 audit(1771393949.468:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.044309][ T28] audit: type=1400 audit(1771393949.468:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.064688][ T28] audit: type=1400 audit(1771393949.488:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.085109][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.089564][ T28] audit: type=1400 audit(1771393949.488:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.121539][ T28] audit: type=1400 audit(1771393949.508:71): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.195110][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.299061][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.385150][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.392332][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.399604][ T3315] bridge_slave_0: entered allmulticast mode [ 36.406269][ T3315] bridge_slave_0: entered promiscuous mode [ 36.413609][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.420742][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.427922][ T3315] bridge_slave_1: entered allmulticast mode [ 36.434506][ T3315] bridge_slave_1: entered promiscuous mode [ 36.477058][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.499238][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.512196][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.550259][ T3315] team0: Port device team_slave_0 added [ 36.570221][ T3315] team0: Port device team_slave_1 added [ 36.578726][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.599826][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.635395][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.642524][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.649676][ T3322] bridge_slave_0: entered allmulticast mode [ 36.656184][ T3322] bridge_slave_0: entered promiscuous mode [ 36.667372][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.674515][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.681633][ T3322] bridge_slave_1: entered allmulticast mode [ 36.688198][ T3322] bridge_slave_1: entered promiscuous mode [ 36.706176][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.713183][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.739140][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.750427][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.757438][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.783424][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.806023][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.828528][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.859832][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.882996][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.890302][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.897699][ T3318] bridge_slave_0: entered allmulticast mode [ 36.904389][ T3318] bridge_slave_0: entered promiscuous mode [ 36.928467][ T3322] team0: Port device team_slave_0 added [ 36.938792][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.945956][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.953131][ T3318] bridge_slave_1: entered allmulticast mode [ 36.959762][ T3318] bridge_slave_1: entered promiscuous mode [ 36.978044][ T3315] hsr_slave_0: entered promiscuous mode [ 36.984281][ T3315] hsr_slave_1: entered promiscuous mode [ 36.991050][ T3322] team0: Port device team_slave_1 added [ 37.004377][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.011495][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.018686][ T3317] bridge_slave_0: entered allmulticast mode [ 37.025213][ T3317] bridge_slave_0: entered promiscuous mode [ 37.037874][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.054090][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.061205][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.068506][ T3317] bridge_slave_1: entered allmulticast mode [ 37.074947][ T3317] bridge_slave_1: entered promiscuous mode [ 37.082426][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.100937][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.108008][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.134013][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.147475][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.154462][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.180459][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.217582][ T3318] team0: Port device team_slave_0 added [ 37.225242][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.253052][ T3318] team0: Port device team_slave_1 added [ 37.259984][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.273197][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.280356][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.287564][ T3314] bridge_slave_0: entered allmulticast mode [ 37.294089][ T3314] bridge_slave_0: entered promiscuous mode [ 37.329500][ T3317] team0: Port device team_slave_0 added [ 37.335138][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.342391][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.349765][ T3314] bridge_slave_1: entered allmulticast mode [ 37.356424][ T3314] bridge_slave_1: entered promiscuous mode [ 37.365079][ T3322] hsr_slave_0: entered promiscuous mode [ 37.371133][ T3322] hsr_slave_1: entered promiscuous mode [ 37.377102][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.382828][ T3322] Cannot create hsr debugfs directory [ 37.400176][ T3317] team0: Port device team_slave_1 added [ 37.411161][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.418247][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.444286][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.458789][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.465806][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.491861][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.520144][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.539693][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.546790][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.572831][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.584672][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.598945][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.606046][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.632076][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.661915][ T3314] team0: Port device team_slave_0 added [ 37.671448][ T3314] team0: Port device team_slave_1 added [ 37.705149][ T3318] hsr_slave_0: entered promiscuous mode [ 37.711166][ T3318] hsr_slave_1: entered promiscuous mode [ 37.717155][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.722895][ T3318] Cannot create hsr debugfs directory [ 37.757128][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.764231][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.790373][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.814696][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.821740][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.847733][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.866098][ T3317] hsr_slave_0: entered promiscuous mode [ 37.872167][ T3317] hsr_slave_1: entered promiscuous mode [ 37.878127][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.883856][ T3317] Cannot create hsr debugfs directory [ 37.921862][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.944754][ T3314] hsr_slave_0: entered promiscuous mode [ 37.950757][ T3314] hsr_slave_1: entered promiscuous mode [ 37.956883][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.962627][ T3314] Cannot create hsr debugfs directory [ 37.968239][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.000089][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.024524][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.088510][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.097217][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.119553][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.129899][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.162063][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.173101][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.183240][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.193358][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.234081][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.242870][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.252609][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.262026][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.309758][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.318863][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.329380][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.339599][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.352731][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.384253][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.397137][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.413159][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.420250][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.429377][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.436458][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.470633][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.479836][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.493850][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.510524][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.524007][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.531094][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.543632][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.550815][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.562941][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.570263][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.579381][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.599270][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.608941][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.616041][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.629136][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.636676][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.679111][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.686282][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.725004][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.736979][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.748361][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.755494][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.775497][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.807239][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.814429][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.891249][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.907689][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.970051][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.001026][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.104943][ T3317] veth0_vlan: entered promiscuous mode [ 39.130908][ T3318] veth0_vlan: entered promiscuous mode [ 39.150657][ T3322] veth0_vlan: entered promiscuous mode [ 39.165950][ T3314] veth0_vlan: entered promiscuous mode [ 39.172574][ T3318] veth1_vlan: entered promiscuous mode [ 39.184687][ T3317] veth1_vlan: entered promiscuous mode [ 39.191477][ T3322] veth1_vlan: entered promiscuous mode [ 39.199363][ T3314] veth1_vlan: entered promiscuous mode [ 39.228501][ T3314] veth0_macvtap: entered promiscuous mode [ 39.238353][ T3315] veth0_vlan: entered promiscuous mode [ 39.245132][ T3314] veth1_macvtap: entered promiscuous mode [ 39.260321][ T3315] veth1_vlan: entered promiscuous mode [ 39.272176][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.287728][ T3318] veth0_macvtap: entered promiscuous mode [ 39.296839][ T3317] veth0_macvtap: entered promiscuous mode [ 39.303369][ T3322] veth0_macvtap: entered promiscuous mode [ 39.311018][ T3318] veth1_macvtap: entered promiscuous mode [ 39.319470][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.328148][ T3317] veth1_macvtap: entered promiscuous mode [ 39.343923][ T3322] veth1_macvtap: entered promiscuous mode [ 39.352204][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.361487][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.370577][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.379780][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.389136][ T3315] veth0_macvtap: entered promiscuous mode [ 39.405241][ T3315] veth1_macvtap: entered promiscuous mode [ 39.413532][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.422129][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.436375][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.445695][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.455213][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.472576][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.484695][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.497206][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.505084][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.513841][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.529554][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.545340][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546871][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.554678][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.580916][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.592578][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.602857][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.633823][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.651343][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.660434][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.681176][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.712613][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.729165][ T3488] ======================================================= [ 39.729165][ T3488] WARNING: The mand mount option has been deprecated and [ 39.729165][ T3488] and is ignored by this kernel. Remove the mand [ 39.729165][ T3488] option from the mount to silence this warning. [ 39.729165][ T3488] ======================================================= [ 39.747405][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.767539][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 39.767582][ T28] audit: type=1400 audit(1771393954.258:103): avc: denied { mount } for pid=3487 comm="syz.2.6" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 39.781410][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.815243][ T3488] loop2: detected capacity change from 0 to 512 [ 39.831166][ T28] audit: type=1400 audit(1771393954.298:104): avc: denied { tracepoint } for pid=3487 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.851187][ T28] audit: type=1400 audit(1771393954.308:105): avc: denied { mounton } for pid=3487 comm="syz.2.6" path="/1/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 39.885644][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.938402][ T3488] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.6: iget: bad extra_isize 90 (inode size 256) [ 39.975789][ T3488] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.984024][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 39.999698][ C1] EXT4-fs (loop2): initial error at time 1771393954: ext4_xattr_inode_iget:441: inode 11 [ 40.009625][ C1] EXT4-fs (loop2): last error at time 1771393954: ext4_xattr_inode_iget:441: inode 11 [ 40.015405][ T3488] EXT4-fs (loop2): Remounting filesystem read-only [ 40.041203][ C1] hrtimer: interrupt took 28859 ns [ 40.054507][ T28] audit: type=1400 audit(1771393954.538:106): avc: denied { prog_load } for pid=3497 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.077922][ T3488] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.090193][ T28] audit: type=1400 audit(1771393954.558:107): avc: denied { bpf } for pid=3497 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.116955][ T3500] loop3: detected capacity change from 0 to 512 [ 40.123667][ T3500] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.141850][ T3501] Zero length message leads to an empty skb [ 40.151189][ T28] audit: type=1400 audit(1771393954.568:108): avc: denied { create } for pid=3497 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.177673][ T3488] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 40.189472][ T3503] vcan0: tx drop: invalid sa for name 0x00000000000007db [ 40.205137][ T3500] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 40.232487][ T28] audit: type=1400 audit(1771393954.588:109): avc: denied { mount } for pid=3498 comm="syz.3.4" name="/" dev="hugetlbfs" ino=4070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 40.261965][ T3500] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.4: attempt to clear invalid blocks 2 len 1 [ 40.277133][ T3488] EXT4-fs (loop2): 1 orphan inode deleted [ 40.284631][ T3500] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.286194][ T3500] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, [ 40.295386][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 40.295411][ C1] EXT4-fs (loop3): initial error at time 1771393954: ext4_clear_blocks:876: inode 13 [ 40.295437][ C1] EXT4-fs (loop3): last error at time 1771393954: ext4_clear_blocks:876: inode 13 [ 40.329063][ T3500] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 40.343306][ T28] audit: type=1400 audit(1771393954.598:110): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.343715][ T3488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.375054][ T28] audit: type=1400 audit(1771393954.598:111): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.383002][ T3500] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4: invalid indirect mapped block 1819239214 (level 0) [ 40.423678][ T3500] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.432402][ T28] audit: type=1400 audit(1771393954.598:112): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.469509][ T3500] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4: invalid indirect mapped block 1819239214 (level 1) [ 40.483773][ T3500] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.484913][ T3500] EXT4-fs (loop3): 1 truncate cleaned up [ 40.500693][ T3500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.545308][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.568950][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.653636][ T3495] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.728836][ T3515] syz.4.12 (3515) used greatest stack depth: 9728 bytes left [ 40.836571][ T3526] syz_tun: entered allmulticast mode [ 40.844838][ T3525] syz_tun: left allmulticast mode [ 40.939141][ T1377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.363164][ T1377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.400618][ T3557] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3557 comm=syz.0.27 [ 41.511591][ T3533] chnl_net:caif_netlink_parms(): no params data found [ 41.662495][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.670944][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.679596][ T3533] bridge_slave_0: entered allmulticast mode [ 41.686488][ T3533] bridge_slave_0: entered promiscuous mode [ 41.693540][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.710592][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.719048][ T3533] bridge_slave_1: entered allmulticast mode [ 41.725980][ T3533] bridge_slave_1: entered promiscuous mode [ 41.739019][ T3572] io-wq is not configured for unbound workers [ 41.755026][ T3533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.772145][ T3533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.795488][ T3533] team0: Port device team_slave_0 added [ 41.803639][ T3533] team0: Port device team_slave_1 added [ 41.844514][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.852360][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.900260][ T3533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.953881][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.977274][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.021424][ T3533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.070623][ T3533] hsr_slave_0: entered promiscuous mode [ 42.076978][ T3533] hsr_slave_1: entered promiscuous mode [ 42.083004][ T3533] debugfs: 'hsr0' already exists in 'hsr' [ 42.089033][ T3533] Cannot create hsr debugfs directory [ 42.172388][ T3595] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.186709][ T3597] : renamed from veth0_to_bond (while UP) [ 42.214054][ T3598] loop0: detected capacity change from 0 to 128 [ 42.232615][ T3533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.247253][ T3533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.263239][ T3533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.284054][ T3598] FAT-fs (loop0): bogus number of reserved sectors [ 42.301599][ T3533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.308679][ T3598] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 42.334850][ T3598] FAT-fs (loop0): Can't find a valid FAT filesystem [ 42.427698][ T3595] netlink: 'syz.0.36': attribute type 39 has an invalid length. [ 42.477670][ T1377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.504367][ T3595] hsr_slave_1 (unregistering): left promiscuous mode [ 42.546484][ T1377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.804648][ T3533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.868890][ T3533] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.885197][ T1377] bridge_slave_1: left allmulticast mode [ 42.894244][ T1377] bridge_slave_1: left promiscuous mode [ 42.899974][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.929996][ T1377] bridge_slave_0: left allmulticast mode [ 42.936170][ T1377] bridge_slave_0: left promiscuous mode [ 42.952751][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.015746][ T3627] loop3: detected capacity change from 0 to 128 [ 43.108252][ T3627] syz.3.42: attempt to access beyond end of device [ 43.108252][ T3627] loop3: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 43.137787][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.159039][ T3627] syz.3.42: attempt to access beyond end of device [ 43.159039][ T3627] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 43.173775][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.193792][ T1377] bond0 (unregistering): Released all slaves [ 43.218800][ T36] kworker/u8:2: attempt to access beyond end of device [ 43.218800][ T36] loop3: rw=1, sector=154, nr_sectors = 2 limit=128 [ 43.243266][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.250529][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.270395][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.277561][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.323901][ T1377] hsr_slave_0: left promiscuous mode [ 43.331491][ T1377] hsr_slave_1: left promiscuous mode [ 43.344557][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.356321][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.374325][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.382751][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.396860][ T1377] veth1_macvtap: left promiscuous mode [ 43.402617][ T1377] veth0_macvtap: left promiscuous mode [ 43.408369][ T1377] veth1_vlan: left promiscuous mode [ 43.413781][ T1377] veth0_vlan: left promiscuous mode [ 43.552220][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 43.565170][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 43.694252][ T3533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.760602][ T3678] Illegal XDP return value 4292472832 on prog (id 6) dev syz_tun, expect packet loss! [ 43.827778][ T3533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.222080][ T3533] veth0_vlan: entered promiscuous mode [ 44.256023][ T3533] veth1_vlan: entered promiscuous mode [ 44.279849][ T3533] veth0_macvtap: entered promiscuous mode [ 44.343605][ T3533] veth1_macvtap: entered promiscuous mode [ 44.374686][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.395664][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.418171][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.434353][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.469394][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.484020][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.970766][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 44.970784][ T28] audit: type=1400 audit(1771393959.458:196): avc: denied { create } for pid=3766 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.346281][ T3644] Bluetooth: hci0: command 0x1003 tx timeout [ 45.354364][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.380712][ T3782] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 45.386711][ T28] audit: type=1400 audit(1771393959.808:197): avc: denied { create } for pid=3778 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 45.511215][ T28] audit: type=1400 audit(1771393959.818:198): avc: denied { sys_admin } for pid=3778 comm="syz.1.73" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.567006][ T28] audit: type=1400 audit(1771393960.058:199): avc: denied { read } for pid=3785 comm="syz.4.76" path="socket:[6572]" dev="sockfs" ino=6572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.714271][ T3791] syzkaller0: entered promiscuous mode [ 45.715651][ T28] audit: type=1400 audit(1771393960.208:200): avc: denied { ioctl } for pid=3789 comm="syz.0.77" path="socket:[5626]" dev="sockfs" ino=5626 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.734143][ T3791] syzkaller0: entered allmulticast mode [ 46.048940][ T28] audit: type=1400 audit(1771393960.528:201): avc: denied { read } for pid=3801 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.213289][ T28] audit: type=1400 audit(1771393960.698:202): avc: denied { mounton } for pid=3806 comm="syz.5.82" path="/6/file0" dev="cgroup" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 46.252257][ T28] audit: type=1400 audit(1771393960.738:203): avc: denied { unmount } for pid=3533 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.400513][ T28] audit: type=1400 audit(1771393960.888:204): avc: denied { bpf } for pid=3811 comm="syz.1.85" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.423150][ T28] audit: type=1400 audit(1771393960.888:205): avc: denied { perfmon } for pid=3811 comm="syz.1.85" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.603195][ T3818] loop1: detected capacity change from 0 to 256 [ 46.883451][ T70] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.941667][ T3830] SELinux: failed to load policy [ 46.970290][ T3836] loop3: detected capacity change from 0 to 128 [ 46.989674][ T70] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.999269][ T3836] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.016104][ T3836] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.049386][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.101893][ T70] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.183020][ T70] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.378141][ T3849] team_slave_0: entered promiscuous mode [ 47.384902][ T3849] team_slave_1: entered promiscuous mode [ 47.406413][ T3849] macvtap1: entered promiscuous mode [ 47.412572][ T3849] team0: entered promiscuous mode [ 47.497297][ T3849] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 47.531518][ T3849] team0: Device macvtap1 is already an upper device of the team interface [ 47.595629][ T3849] team0: left promiscuous mode [ 47.613912][ T3849] team_slave_0: left promiscuous mode [ 47.620312][ T3849] team_slave_1: left promiscuous mode [ 47.856733][ T3831] chnl_net:caif_netlink_parms(): no params data found [ 47.907362][ T70] bridge_slave_1: left allmulticast mode [ 47.919372][ T70] bridge_slave_1: left promiscuous mode [ 47.931573][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.965891][ T70] bridge_slave_0: left allmulticast mode [ 47.978397][ T70] bridge_slave_0: left promiscuous mode [ 48.001225][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.004586][ T3849] syz.0.97 (3849) used greatest stack depth: 9224 bytes left [ 48.075198][ T3864] process 'syz.1.102' launched '/dev/fd/5' with NULL argv: empty string added [ 48.445654][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.473098][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.491380][ T70] bond0 (unregistering): Released all slaves [ 48.508349][ T3893] syz.3.108 uses obsolete (PF_INET,SOCK_PACKET) [ 48.657432][ T70] hsr_slave_0: left promiscuous mode [ 48.676437][ T70] hsr_slave_1: left promiscuous mode [ 48.687861][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.784004][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.792303][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.803970][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.805965][ T3901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.109'. [ 48.834237][ T70] veth1_macvtap: left promiscuous mode [ 48.843976][ T70] veth0_macvtap: left promiscuous mode [ 48.849570][ T70] veth1_vlan: left promiscuous mode [ 48.867185][ T70] veth0_vlan: left promiscuous mode [ 49.065786][ T70] team0 (unregistering): Port device team_slave_1 removed [ 49.099009][ T70] team0 (unregistering): Port device team_slave_0 removed [ 49.161218][ T3910] loop0: detected capacity change from 0 to 128 [ 49.282816][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.299602][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.321793][ T3831] bridge_slave_0: entered allmulticast mode [ 49.340250][ T3831] bridge_slave_0: entered promiscuous mode [ 49.367901][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.396440][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.436057][ T3831] bridge_slave_1: entered allmulticast mode [ 49.452521][ T3831] bridge_slave_1: entered promiscuous mode [ 49.734067][ T3904] syzkaller1: entered promiscuous mode [ 49.753204][ T3904] syzkaller1: entered allmulticast mode [ 50.070409][ T3831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.092435][ T3831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.185059][ T3831] team0: Port device team_slave_0 added [ 50.191870][ T3831] team0: Port device team_slave_1 added [ 50.275268][ T3831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.282295][ T3831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.373712][ T3831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.396259][ T3831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.403528][ T3831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.462797][ T3831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.499546][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 50.499565][ T28] audit: type=1400 audit(1771393964.988:230): avc: denied { name_connect } for pid=3944 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 50.581439][ T3831] hsr_slave_0: entered promiscuous mode [ 50.587259][ T28] audit: type=1400 audit(1771393965.058:231): avc: denied { shutdown } for pid=3944 comm="syz.3.119" lport=43080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.624665][ T3831] hsr_slave_1: entered promiscuous mode [ 50.630757][ T3831] debugfs: 'hsr0' already exists in 'hsr' [ 50.653973][ T3831] Cannot create hsr debugfs directory [ 50.659544][ T28] audit: type=1400 audit(1771393965.108:232): avc: denied { listen } for pid=3944 comm="syz.3.119" lport=43080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.695953][ T28] audit: type=1400 audit(1771393965.178:233): avc: denied { module_request } for pid=3831 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 50.749378][ T3961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 50.775081][ T28] audit: type=1400 audit(1771393965.238:234): avc: denied { read } for pid=3959 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.958807][ T3972] loop1: detected capacity change from 0 to 1024 [ 50.984372][ T3972] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 51.011631][ T3972] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 51.043256][ T3831] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.051228][ T3972] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.070661][ T3972] EXT4-fs error (device loop1): ext4_get_journal_inode:5865: inode #32: comm syz.1.123: iget: special inode unallocated [ 51.083448][ T3972] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 51.083625][ T3972] EXT4-fs (loop1): no journal found [ 51.093747][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 51.093783][ C1] EXT4-fs (loop1): initial error at time 1771393965: ext4_get_journal_inode:5865: inode 32 [ 51.093837][ C1] EXT4-fs (loop1): last error at time 1771393965: ext4_get_journal_inode:5865: inode 32 [ 51.134810][ T3831] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.145736][ T3972] EXT4-fs (loop1): can't get journal size [ 51.152612][ T3831] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.165600][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.182132][ T3982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 51.188467][ T3831] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.201980][ T28] audit: type=1400 audit(1771393965.668:235): avc: denied { ioctl } for pid=3980 comm="syz.0.124" path="socket:[6017]" dev="sockfs" ino=6017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.241422][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.261130][ T28] audit: type=1400 audit(1771393965.688:236): avc: denied { create } for pid=3981 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.281358][ T28] audit: type=1400 audit(1771393965.688:237): avc: denied { setopt } for pid=3971 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.328168][ T28] audit: type=1400 audit(1771393965.818:238): avc: denied { mount } for pid=3995 comm="syz.1.127" name="/" dev="hugetlbfs" ino=6035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 51.392038][ T4003] netlink: 'syz.1.129': attribute type 13 has an invalid length. [ 51.405948][ T28] audit: type=1400 audit(1771393965.848:239): avc: denied { execute } for pid=3995 comm="syz.1.127" path="/file1" dev="hugetlbfs" ino=6036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.487947][ T4010] loop1: detected capacity change from 0 to 512 [ 51.513480][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.129: iget: bad extra_isize 90 (inode size 256) [ 51.527079][ T4010] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.527351][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.129: error while reading EA inode 11 err=-117 [ 51.536786][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.536802][ C0] EXT4-fs (loop1): initial error at time 1771393966: ext4_xattr_inode_iget:441: inode 11 [ 51.536844][ C0] EXT4-fs (loop1): last error at time 1771393966: ext4_xattr_inode_iget:441: inode 11 [ 51.575056][ T4010] loop1: lost filesystem error report for type 5 error -117 [ 51.583807][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.129: iget: bad extra_isize 90 (inode size 256) [ 51.606718][ T4010] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.607256][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.129: error while reading EA inode 11 err=-117 [ 51.630860][ T4010] loop1: lost filesystem error report for type 5 error -117 [ 51.634236][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.129: iget: bad extra_isize 90 (inode size 256) [ 51.669684][ T4010] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 51.669905][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.129: error while reading EA inode 18 err=-117 [ 51.692669][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.700063][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.704227][ T4010] loop1: lost filesystem error report for type 5 error -117 [ 51.731741][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.129: iget: bad extra_isize 90 (inode size 256) [ 51.769801][ T4010] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 51.770040][ T4010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.129: error while reading EA inode 18 err=-117 [ 51.834014][ T4010] loop1: lost filesystem error report for type 5 error -117 [ 51.834312][ T4010] EXT4-fs (loop1): 1 orphan inode deleted [ 51.879016][ T4010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.906368][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.935000][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.040517][ T4020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.096266][ T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.105504][ T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.134307][ T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.155760][ T3831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.187832][ T56] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.201565][ T3831] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.238247][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.245420][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.268265][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.275481][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.314630][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.349014][ T3831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.413111][ T4042] mmap: syz.3.136 (4042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.653841][ T4050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 52.660547][ T4050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.676731][ T3831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.694217][ T4050] vhci_hcd vhci_hcd.0: Device attached [ 52.711225][ T4050] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 52.717899][ T4050] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.729259][ T4050] vhci_hcd vhci_hcd.0: Device attached [ 52.823396][ T4051] vhci_hcd: connection closed [ 52.823419][ T4057] vhci_hcd: connection closed [ 52.832098][ T12] vhci_hcd vhci_hcd.3: stop threads [ 52.844200][ T12] vhci_hcd vhci_hcd.3: release socket [ 52.849937][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 52.856406][ T12] vhci_hcd vhci_hcd.3: stop threads [ 52.861803][ T12] vhci_hcd vhci_hcd.3: release socket [ 52.869335][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 52.885903][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 52.950292][ T3831] veth0_vlan: entered promiscuous mode [ 52.959135][ T3831] veth1_vlan: entered promiscuous mode [ 52.978498][ T3831] veth0_macvtap: entered promiscuous mode [ 52.987248][ T3831] veth1_macvtap: entered promiscuous mode [ 52.999737][ T3831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.013031][ T3831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.028164][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.043775][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.056473][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.065908][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.135634][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.148155][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.160542][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.173176][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.185644][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.198057][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.210621][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.223157][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.235659][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.248058][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.1.140 [ 53.448952][ T4083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 53.460821][ T4083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 53.847726][ T4098] syzkaller0: entered promiscuous mode [ 53.884600][ T4098] syzkaller0: create flow: hash 918053779 index 1 [ 53.895854][ T4097] syzkaller0: delete flow: hash 918053779 index 1 [ 53.995954][ T4107] loop1: detected capacity change from 0 to 1764 [ 54.012473][ T4107] ISOFS: Unable to identify CD-ROM format. [ 54.753892][ T4139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.780730][ T4141] serio: Serial port ttyS3 [ 55.032245][ T4139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.125829][ T4139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.218312][ T4139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.340609][ T70] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.490514][ T1377] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.545388][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 56.183200][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.388517][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 56.429678][ T357] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.582805][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 56.582823][ T28] audit: type=1400 audit(1771393971.068:264): avc: denied { map } for pid=4165 comm="syz.1.170" path="socket:[7482]" dev="sockfs" ino=7482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.612971][ T28] audit: type=1400 audit(1771393971.078:265): avc: denied { read } for pid=4165 comm="syz.1.170" path="socket:[7482]" dev="sockfs" ino=7482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.811278][ T4142] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.870011][ T4174] cgroup: fork rejected by pids controller in /syz3 [ 56.878527][ T4142] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.908549][ T4177] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.173'. [ 56.945431][ T4142] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.976505][ T4171] loop6: detected capacity change from 0 to 128 [ 56.995818][ T4142] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.011335][ T4171] syz.6.171: attempt to access beyond end of device [ 57.011335][ T4171] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 57.090842][ T4171] syz.6.171: attempt to access beyond end of device [ 57.090842][ T4171] loop6: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 57.105039][ T4171] syz.6.171: attempt to access beyond end of device [ 57.105039][ T4171] loop6: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 57.120150][ T4171] Buffer I/O error on dev loop6, logical block 69, async page read [ 57.128360][ T4171] syz.6.171: attempt to access beyond end of device [ 57.128360][ T4171] loop6: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 57.142769][ T4171] Buffer I/O error on dev loop6, logical block 70, async page read [ 57.151301][ T4171] syz.6.171: attempt to access beyond end of device [ 57.151301][ T4171] loop6: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 57.165121][ T4171] Buffer I/O error on dev loop6, logical block 71, async page read [ 57.173142][ T4171] syz.6.171: attempt to access beyond end of device [ 57.173142][ T4171] loop6: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 57.187050][ T4171] Buffer I/O error on dev loop6, logical block 72, async page read [ 57.195102][ T4171] syz.6.171: attempt to access beyond end of device [ 57.195102][ T4171] loop6: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 57.210656][ T4171] Buffer I/O error on dev loop6, logical block 69, async page read [ 57.220237][ T4171] syz.6.171: attempt to access beyond end of device [ 57.220237][ T4171] loop6: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 57.234846][ T4171] Buffer I/O error on dev loop6, logical block 70, async page read [ 57.242853][ T4171] syz.6.171: attempt to access beyond end of device [ 57.242853][ T4171] loop6: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 57.257320][ T4171] Buffer I/O error on dev loop6, logical block 71, async page read [ 57.265543][ T4171] syz.6.171: attempt to access beyond end of device [ 57.265543][ T4171] loop6: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 57.279670][ T4171] Buffer I/O error on dev loop6, logical block 72, async page read [ 57.290313][ T4171] Buffer I/O error on dev loop6, logical block 69, async page read [ 57.298426][ T4171] Buffer I/O error on dev loop6, logical block 70, async page read [ 57.309705][ T357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.358377][ T28] audit: type=1400 audit(1771393971.848:266): avc: denied { create } for pid=4199 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.381981][ T28] audit: type=1400 audit(1771393971.868:267): avc: denied { bind } for pid=4199 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.438837][ T357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.457880][ T4209] loop6: detected capacity change from 0 to 1024 [ 57.461008][ T28] audit: type=1400 audit(1771393971.898:268): avc: denied { setopt } for pid=4199 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.484016][ T4209] EXT4-fs: Ignoring removed bh option [ 57.504322][ T28] audit: type=1400 audit(1771393971.898:269): avc: denied { write } for pid=4199 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.541165][ T357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.544461][ T4209] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.565811][ T28] audit: type=1400 audit(1771393971.918:270): avc: denied { nlmsg_write } for pid=4203 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 57.588231][ T4209] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.177: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.602280][ T4209] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.602528][ T4209] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 57.611625][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 57.611654][ C0] EXT4-fs (loop6): initial error at time 1771393972: ext4_map_blocks:776: inode 3: block 2 [ 57.611690][ C0] EXT4-fs (loop6): last error at time 1771393972: ext4_map_blocks:776: inode 3: block 2 [ 57.644202][ T28] audit: type=1400 audit(1771393971.918:271): avc: denied { audit_write } for pid=4203 comm="syz.4.178" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.646304][ T4209] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.177: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.681476][ T4209] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.681557][ T28] audit: type=1400 audit(1771393972.018:272): avc: denied { connect } for pid=4215 comm="syz.4.179" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.710957][ T4209] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.177: Failed to acquire dquot type 0 [ 57.722234][ T4209] loop6: lost filesystem error report for type 5 error -117 [ 57.722572][ T4209] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 57.741393][ T4209] loop6: lost filesystem error report for type 5 error -117 [ 57.748342][ T4209] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.177: mark_inode_dirty error [ 57.755222][ T357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.756446][ T4209] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.777614][ T4209] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 57.845666][ T4209] EXT4-fs (loop6): 1 orphan inode deleted [ 57.864050][ T36] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.889040][ T4209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.907491][ T4234] netlink: 52 bytes leftover after parsing attributes in process `syz.1.181'. [ 57.926173][ T36] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.926407][ T36] EXT4-fs error (device loop6): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 0 [ 57.947535][ T357] bridge_slave_1: left allmulticast mode [ 57.953753][ T357] bridge_slave_1: left promiscuous mode [ 57.961507][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.978887][ T357] bridge_slave_0: left allmulticast mode [ 57.990665][ T357] bridge_slave_0: left promiscuous mode [ 57.998667][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.006154][ T4209] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.045852][ T3831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.062215][ T3831] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.078297][ T3831] loop6: lost filesystem error report for type 5 error -117 [ 58.090728][ T3831] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 58.110039][ T3831] loop6: lost filesystem error report for type 5 error -117 [ 58.110242][ T3831] EXT4-fs error (device loop6): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 58.129782][ T3831] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.150759][ T4247] netlink: 14 bytes leftover after parsing attributes in process `syz.6.182'. [ 58.177017][ T357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.187031][ T357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.196676][ T357] bond0 (unregistering): Released all slaves [ 58.216625][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.238910][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.249580][ T4247] bond0 (unregistering): Released all slaves [ 58.257454][ T4251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.183'. [ 58.270770][ T4251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 58.301554][ T357] hsr_slave_0: left promiscuous mode [ 58.308490][ T357] hsr_slave_1: left promiscuous mode [ 58.314364][ T357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.321795][ T357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.329631][ T357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.349056][ T357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.366833][ T357] veth1_macvtap: left promiscuous mode [ 58.372493][ T357] veth0_macvtap: left promiscuous mode [ 58.378425][ T357] veth1_vlan: left promiscuous mode [ 58.383714][ T357] veth0_vlan: left promiscuous mode [ 58.533097][ T357] team0 (unregistering): Port device team_slave_1 removed [ 58.543412][ T357] team0 (unregistering): Port device team_slave_0 removed [ 58.668742][ T4214] chnl_net:caif_netlink_parms(): no params data found [ 58.725179][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 58.769811][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.779833][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.791466][ T4214] bridge_slave_0: entered allmulticast mode [ 58.798250][ T4214] bridge_slave_0: entered promiscuous mode [ 58.805708][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.812888][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.820485][ T4214] bridge_slave_1: entered allmulticast mode [ 58.827469][ T4214] bridge_slave_1: entered promiscuous mode [ 58.885377][ T4214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.906708][ T4304] loop4: detected capacity change from 0 to 1024 [ 58.913462][ T4304] EXT4-fs: Ignoring removed orlov option [ 58.920506][ T4214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.935877][ T4304] EXT4-fs: Ignoring removed nobh option [ 58.967415][ T4304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.985189][ T4214] team0: Port device team_slave_0 added [ 58.992779][ T4214] team0: Port device team_slave_1 added [ 59.013993][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.021146][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.047478][ T4214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.059236][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.066437][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.092752][ T4214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.137931][ T4214] hsr_slave_0: entered promiscuous mode [ 59.145766][ T4214] hsr_slave_1: entered promiscuous mode [ 59.192361][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.506674][ T4214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.553178][ T4214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.593730][ T4214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.637174][ T4214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.769434][ T4214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.820674][ T4391] syzkaller0: entered promiscuous mode [ 59.828322][ T4391] syzkaller0: entered allmulticast mode [ 59.846542][ T4214] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.879034][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.886257][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.910655][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.926841][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.934034][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.951940][ T70] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.972262][ T1377] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.005609][ T1377] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.032339][ T4214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.044440][ T4214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.230770][ T4214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.293612][ T4441] uprobe: syz.4.199:4441 failed to unregister, leaking uprobe [ 60.535071][ T4498] netlink: 14 bytes leftover after parsing attributes in process `syz.1.203'. [ 60.547946][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 60.594461][ T4506] netlink: 'syz.4.204': attribute type 5 has an invalid length. [ 60.620327][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 60.691057][ T4214] veth0_vlan: entered promiscuous mode [ 60.703667][ T4214] veth1_vlan: entered promiscuous mode [ 60.751096][ T4214] veth0_macvtap: entered promiscuous mode [ 60.769625][ T4214] veth1_macvtap: entered promiscuous mode [ 60.786926][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.799799][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.811628][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.829987][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.859753][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.880236][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.969582][ T4528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 61.367585][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 61.378958][ T4550] hsr_slave_0: left promiscuous mode [ 61.403657][ T4550] hsr_slave_1: left promiscuous mode [ 61.504814][ T4552] loop6: detected capacity change from 0 to 128 [ 61.706600][ T4558] syzkaller0: entered promiscuous mode [ 61.712254][ T4558] syzkaller0: entered allmulticast mode [ 62.196259][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 62.196278][ T28] audit: type=1400 audit(1771393976.688:295): avc: denied { block_suspend } for pid=4576 comm="syz.0.229" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.247363][ T4580] syzkaller0: entered promiscuous mode [ 62.261315][ T4580] syzkaller0: entered allmulticast mode [ 62.275088][ T4580] tipc: Started in network mode [ 62.285543][ T4580] tipc: Node identity f29f483a78b3, cluster identity 4711 [ 62.293646][ T4580] tipc: Enabled bearer , priority 0 [ 62.303299][ T4579] tipc: Resetting bearer [ 62.312700][ T4579] tipc: Disabling bearer [ 62.345185][ T4585] netlink: 'syz.4.232': attribute type 13 has an invalid length. [ 62.418482][ T28] audit: type=1400 audit(1771393976.908:296): avc: denied { name_bind } for pid=4587 comm="syz.6.233" path="socket:[9376]" dev="sockfs" ino=9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 62.505910][ T28] audit: type=1400 audit(1771393976.988:297): avc: denied { read write } for pid=4590 comm="syz.4.234" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.532106][ T28] audit: type=1400 audit(1771393976.988:298): avc: denied { open } for pid=4590 comm="syz.4.234" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.556732][ T28] audit: type=1400 audit(1771393977.018:299): avc: denied { ioctl } for pid=4590 comm="syz.4.234" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.594619][ T28] audit: type=1400 audit(1771393977.078:300): avc: denied { connect } for pid=4598 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.669473][ T28] audit: type=1400 audit(1771393977.158:301): avc: denied { read } for pid=4604 comm="syz.3.239" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.693117][ T28] audit: type=1400 audit(1771393977.158:302): avc: denied { open } for pid=4604 comm="syz.3.239" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.718772][ T28] audit: type=1400 audit(1771393977.158:303): avc: denied { ioctl } for pid=4604 comm="syz.3.239" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.744703][ T4608] xfrm0: entered promiscuous mode [ 62.756134][ T4609] loop3: detected capacity change from 0 to 256 [ 62.795866][ T28] audit: type=1400 audit(1771393977.278:304): avc: denied { bind } for pid=4610 comm="syz.4.241" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.905139][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 63.331072][ T4648] xfrm0: entered promiscuous mode [ 63.352488][ T4650] xt_hashlimit: size too large, truncated to 1048576 [ 63.359579][ T4646] loop1: detected capacity change from 0 to 4096 [ 63.373296][ T4646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.430757][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.569505][ T4657] syzkaller0: entered promiscuous mode [ 63.577133][ T4657] syzkaller0: entered allmulticast mode [ 63.681786][ T4665] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.739096][ T4665] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.779049][ T4676] loop1: detected capacity change from 0 to 128 [ 63.792380][ T4676] FAT-fs (loop1): bogus number of reserved sectors [ 63.802241][ T4665] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.815094][ T4676] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 63.826528][ T4676] FAT-fs (loop1): Can't find a valid FAT filesystem [ 63.945049][ T4665] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.441160][ T4454] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.460000][ T4454] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.494386][ T357] team0: Port device team_slave_0 removed [ 64.535725][ T4709] xfrm0: entered promiscuous mode [ 64.552869][ T4454] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.604060][ T4454] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.693141][ T4782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.283'. [ 65.796878][ T4782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.283'. [ 65.986754][ T4790] syzkaller0: entered promiscuous mode [ 65.992336][ T4790] syzkaller0: entered allmulticast mode [ 66.195603][ T4796] netlink: 'syz.6.287': attribute type 39 has an invalid length. [ 67.502747][ T4830] netlink: 'syz.3.300': attribute type 3 has an invalid length. [ 68.769066][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 68.769101][ T28] audit: type=1400 audit(1771393983.258:334): avc: denied { mounton } for pid=4857 comm="syz.1.309" path="/proc/185/task" dev="proc" ino=11125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 68.903177][ T4863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 68.973978][ T4867] loop0: detected capacity change from 0 to 2048 [ 69.005508][ T4869] syzkaller0: entered promiscuous mode [ 69.021142][ T4869] syzkaller0: entered allmulticast mode [ 69.027565][ T3304] loop0: p1 < > p4 [ 69.032869][ T3304] loop0: p4 size 8388608 extends beyond EOD, truncated [ 69.059992][ T4867] loop0: p1 < > p4 [ 69.065944][ T4867] loop0: p4 size 8388608 extends beyond EOD, truncated [ 69.098114][ T28] audit: type=1400 audit(1771393983.588:335): avc: denied { read } for pid=4866 comm="syz.0.313" name="loop0p1" dev="devtmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.152840][ T28] audit: type=1400 audit(1771393983.588:336): avc: denied { open } for pid=4866 comm="syz.0.313" path="/dev/loop0p1" dev="devtmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.201482][ T4872] EXT4-fs (loop0p1): unable to read superblock [ 69.216393][ T28] audit: type=1400 audit(1771393983.678:337): avc: denied { create } for pid=4870 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.245705][ T4874] syzkaller0: entered promiscuous mode [ 69.251357][ T4874] syzkaller0: entered allmulticast mode [ 69.325191][ T28] audit: type=1400 audit(1771393983.818:338): avc: denied { allowed } for pid=4877 comm="syz.6.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.363032][ T28] audit: type=1400 audit(1771393983.848:339): avc: denied { create } for pid=4877 comm="syz.6.318" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.516791][ T4885] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 69.525807][ T28] audit: type=1400 audit(1771393984.008:340): avc: denied { execute } for pid=4884 comm="syz.3.320" path="/23/file0" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.564999][ T4885] ref_ctr increment failed for inode: 0x8b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c533600 [ 69.585370][ T4887] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 69.613991][ T4887] ref_ctr decrement failed for inode: 0x8b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c533600 [ 69.625846][ T4887] uprobe: syz.3.320:4887 failed to unregister, leaking uprobe [ 69.738285][ T28] audit: type=1400 audit(1771393984.228:341): avc: denied { map } for pid=4892 comm="syz.3.322" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.835480][ T28] audit: type=1400 audit(1771393984.258:342): avc: denied { read write } for pid=4892 comm="syz.3.322" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.994621][ T4898] loop0: detected capacity change from 0 to 512 [ 70.032931][ T4898] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.072583][ T4898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.109097][ T4898] EXT4-fs (loop0): 1 truncate cleaned up [ 70.138987][ T4898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.254846][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.325'. [ 70.300298][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.350085][ T4904] loop6: detected capacity change from 0 to 1024 [ 70.385757][ T4904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.411494][ T4904] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: comm syz.6.327: inode #8: comm syz.6.327: iget: illegal inode # [ 70.425007][ T28] audit: type=1400 audit(1771393984.898:343): avc: denied { setattr } for pid=4903 comm="syz.6.327" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.506389][ T4904] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.327: error while reading EA inode 8 err=-117 [ 70.587499][ T3831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.339311][ T4931] only policy match revision 0 supported [ 71.339327][ T4931] unable to load match [ 71.518549][ T4936] can: request_module (can-proto-0) failed. [ 71.530860][ T4939] loop0: detected capacity change from 0 to 1024 [ 71.588476][ T4936] wireguard0: entered promiscuous mode [ 71.602469][ T4936] wireguard0: entered allmulticast mode [ 71.630872][ T4474] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.917954][ T3403] IPVS: starting estimator thread 0... [ 72.004142][ T4971] IPVS: using max 1776 ests per chain, 88800 per kthread [ 72.274251][ T5010] netlink: 'syz.4.370': attribute type 4 has an invalid length. [ 72.325322][ T5012] netlink: 'syz.4.370': attribute type 4 has an invalid length. [ 73.108896][ T5046] team0 (unregistering): Port device team_slave_0 removed [ 73.119888][ T5046] team0 (unregistering): Port device team_slave_1 removed [ 73.663999][ T3644] Bluetooth: hci0: command 0x1003 tx timeout [ 73.670300][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.792927][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 73.792947][ T28] audit: type=1400 audit(1771393988.278:601): avc: denied { open } for pid=5075 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.029336][ T28] audit: type=1400 audit(1771393988.518:602): avc: denied { open } for pid=5069 comm="syz.6.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.088577][ T28] audit: type=1400 audit(1771393988.538:603): avc: denied { create } for pid=5069 comm="syz.6.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 74.127666][ T28] audit: type=1400 audit(1771393988.538:604): avc: denied { create } for pid=5069 comm="syz.6.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 74.180545][ T28] audit: type=1400 audit(1771393988.538:605): avc: denied { create } for pid=5069 comm="syz.6.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 74.282897][ T28] audit: type=1400 audit(1771393988.768:606): avc: denied { read write } for pid=3831 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.337197][ T28] audit: type=1400 audit(1771393988.808:607): avc: denied { bpf } for pid=5080 comm="syz.6.400" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 74.361712][ T28] audit: type=1400 audit(1771393988.808:608): avc: denied { mount } for pid=5080 comm="syz.6.400" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 74.388939][ T28] audit: type=1400 audit(1771393988.808:609): avc: denied { create } for pid=5080 comm="syz.6.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 74.436206][ T28] audit: type=1400 audit(1771393988.928:610): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.541836][ T5084] batman_adv: batadv0: Adding interface: ipvlan2 [ 74.548419][ T5084] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.578959][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.599591][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.617563][ T5084] batman_adv: batadv0: Interface activated: ipvlan2 [ 74.805863][ T5091] syzkaller0: entered promiscuous mode [ 74.811410][ T5091] syzkaller0: entered allmulticast mode [ 75.082037][ T5107] syzkaller0: entered promiscuous mode [ 75.087772][ T5107] syzkaller0: entered allmulticast mode [ 76.130302][ T5160] xfrm0: entered promiscuous mode [ 76.914412][ T5183] syzkaller0: entered promiscuous mode [ 76.931182][ T5183] syzkaller0: entered allmulticast mode [ 77.541681][ T5205] netlink: 164 bytes leftover after parsing attributes in process `syz.3.447'. [ 77.783805][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 77.809876][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.828650][ T5211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.850406][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.875448][ T5211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.622573][ T5237] batadv_slave_0: Caught tx_queue_len zero misconfig [ 78.827003][ T28] kauditd_printk_skb: 295 callbacks suppressed [ 78.827020][ T28] audit: type=1400 audit(1771393993.318:906): avc: denied { read write } for pid=4214 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.040017][ T28] audit: type=1400 audit(1771393993.358:907): avc: denied { execmem } for pid=5244 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 79.101614][ T28] audit: type=1400 audit(1771393993.408:908): avc: denied { allowed } for pid=5244 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 79.354458][ T28] audit: type=1400 audit(1771393993.838:909): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.397100][ T28] audit: type=1400 audit(1771393993.878:910): avc: denied { map_create } for pid=5247 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.442286][ T28] audit: type=1400 audit(1771393993.878:911): avc: denied { prog_load } for pid=5247 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.487249][ T5251] netlink: 'syz.4.464': attribute type 10 has an invalid length. [ 79.508777][ T5251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.464'. [ 79.514039][ T28] audit: type=1400 audit(1771393993.878:912): avc: denied { map_create } for pid=5247 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.547293][ T5251] dummy0: entered promiscuous mode [ 79.560554][ T5251] dummy0: entered allmulticast mode [ 79.573971][ T28] audit: type=1400 audit(1771393993.878:913): avc: denied { prog_load } for pid=5247 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.579633][ T5251] bridge0: port 3(dummy0) entered blocking state [ 79.603079][ T28] audit: type=1400 audit(1771393993.878:914): avc: denied { map_create } for pid=5247 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.622425][ T5251] bridge0: port 3(dummy0) entered disabled state [ 79.640186][ T5251] bridge0: port 3(dummy0) entered blocking state [ 79.642592][ T28] audit: type=1400 audit(1771393993.878:915): avc: denied { prog_load } for pid=5247 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.646688][ T5251] bridge0: port 3(dummy0) entered forwarding state [ 80.549305][ T5273] vlan2: entered promiscuous mode [ 80.564207][ T5273] vlan2: entered allmulticast mode [ 80.582358][ T5273] hsr_slave_1: entered allmulticast mode [ 80.716637][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 82.421923][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 82.431998][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 82.448626][ T5331] bridge0: entered promiscuous mode [ 82.454932][ T5331] bridge0: entered allmulticast mode [ 82.681055][ T5339] serio: Serial port ttyS3 [ 82.880389][ T5348] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 82.897936][ T5348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.916745][ T5348] bond1: (slave ip6gretap1): making interface the new active one [ 82.926281][ T5348] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 82.949134][ T5348] veth3: entered promiscuous mode [ 82.956117][ T5348] bond1: (slave veth3): Enslaving as an active interface with a down link [ 82.974150][ T5348] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 83.091590][ T5363] ================================================================== [ 83.099894][ T5363] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 83.108548][ T5363] [ 83.110893][ T5363] write to 0xffff888104e99a68 of 8 bytes by task 5357 on cpu 0: [ 83.118543][ T5363] shmem_file_splice_read+0x470/0x600 [ 83.123955][ T5363] splice_direct_to_actor+0x26e/0x670 [ 83.129381][ T5363] do_splice_direct+0x119/0x1a0 [ 83.134283][ T5363] do_sendfile+0x382/0x650 [ 83.138729][ T5363] __x64_sys_sendfile64+0x105/0x150 [ 83.143954][ T5363] x64_sys_call+0x2dc4/0x3020 [ 83.148672][ T5363] do_syscall_64+0x12c/0x370 [ 83.153288][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.159193][ T5363] [ 83.161521][ T5363] write to 0xffff888104e99a68 of 8 bytes by task 5363 on cpu 1: [ 83.169153][ T5363] shmem_file_splice_read+0x470/0x600 [ 83.174561][ T5363] splice_direct_to_actor+0x26e/0x670 [ 83.179949][ T5363] do_splice_direct+0x119/0x1a0 [ 83.184861][ T5363] do_sendfile+0x382/0x650 [ 83.189324][ T5363] __x64_sys_sendfile64+0x105/0x150 [ 83.194530][ T5363] x64_sys_call+0x2dc4/0x3020 [ 83.199227][ T5363] do_syscall_64+0x12c/0x370 [ 83.203853][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.209774][ T5363] [ 83.212116][ T5363] value changed: 0x0000000000000a05 -> 0x0000000000000a08 [ 83.219242][ T5363] [ 83.221572][ T5363] Reported by Kernel Concurrency Sanitizer on: [ 83.227744][ T5363] CPU: 1 UID: 0 PID: 5363 Comm: syz.3.500 Not tainted syzkaller #0 PREEMPT(full) [ 83.236958][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.247022][ T5363] ================================================================== [ 83.302439][ T5362] syzkaller0: entered promiscuous mode [ 83.334128][ T5362] syzkaller0: entered allmulticast mode [ 83.869135][ T28] kauditd_printk_skb: 170 callbacks suppressed [ 83.869151][ T28] audit: type=1400 audit(1771393998.358:1086): avc: denied { read write } for pid=4214 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.099290][ T28] audit: type=1400 audit(1771394000.588:1087): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0