last executing test programs: 51.247643883s ago: executing program 4 (id=5): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 51.115701505s ago: executing program 4 (id=9): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x1ff, 0x11004, 0x0, 0x2, 0x7578, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b7000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="0000520006"], 0x2c}}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x0, 0x6, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x4}, 0x94) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffff, 0x0, 0x0, 0x17}) r2 = syz_open_pts(r1, 0x101000) r3 = dup3(r2, r1, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) r4 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000763000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) 49.835179639s ago: executing program 4 (id=19): r0 = socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a}, 0x94) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r5, &(0x7f00000001c0)='./file0\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000000000000370000", @ANYBLOB, @ANYRES64=0x0], 0x10) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='geneve0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="cbd05508ab7edb4a", 0x8, 0x800, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) 48.37515744s ago: executing program 4 (id=25): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x7, 0x400, 0x8, @loopback, @loopback, 0x8, 0x7, 0xf35d, 0x1}}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20048085) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 48.064114317s ago: executing program 4 (id=27): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0xa000200) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) r2 = syz_clone3(&(0x7f0000000540)={0x200000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x20}, &(0x7f0000000380)=""/155, 0x9b, &(0x7f0000000440)=""/248, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) sched_setaffinity(r2, 0x8, &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 47.083256304s ago: executing program 4 (id=33): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) poll(0x0, 0x0, 0x3ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 31.708682754s ago: executing program 32 (id=33): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) poll(0x0, 0x0, 0x3ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 5.72340872s ago: executing program 5 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffc, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x210) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1098c2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f38798d000000003991f3787269de5382929be107a698db9edbc0257c0bb0205084640cc1c859d69828feab5d0ac72f62c0bf387044a185428df3ab4cc2525d41adb01c8c13c71b6a98dac98f678e2472d5a6a8a5b2f69ac595a8bea681e962033baf38e57debcb4a900797d1f406f72c22a58b8255e88e662270140fe5646e9e558f594eaf8856161f4815b9948a065b3c8d75913b04ea16c3b0fc01db5e42f8c6b19b2f14994700a509701d4066bf3e07b637c32f260a86c7d383362a41060c965f41a4c3c819342935ca7af09a6fb3bd9cba3459c25d9f8709b0", 0x172) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.37573058s ago: executing program 5 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.353957191s ago: executing program 5 (id=274): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x86f, &(0x7f0000000400)={0x0, 0x79af, 0x400, 0xfffffffe, 0x214}, &(0x7f0000000700)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x1000, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40, 0x185100, 0x12345}) io_uring_enter(r1, 0x238e, 0xc1040000, 0x43, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r8, &(0x7f0000000040)='./bus\x00', 0x200) 3.332266273s ago: executing program 5 (id=275): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r3 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/228, 0x4}, 0x20) r4 = syz_io_uring_setup(0x1cf0, &(0x7f0000000780)={0x0, 0x4f5f, 0x10100, 0x3, 0x184, 0x0, r3}, 0x0, &(0x7f00000001c0)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.47205222s ago: executing program 1 (id=282): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4ee, &(0x7f0000001100)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 2.458233471s ago: executing program 3 (id=283): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1006, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) socket$netlink(0x10, 0x3, 0x15) 2.437086953s ago: executing program 0 (id=284): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 2.202497214s ago: executing program 0 (id=285): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3d, 0x0, 0x101f, 0x4ab}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9d", 0xb}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x4455d667, 0x0, 0x2, 0x9, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) read$hidraw(0xffffffffffffffff, &(0x7f00000002c0)=""/137, 0x89) close_range(r0, 0xffffffffffffffff, 0x0) 2.121582211s ago: executing program 0 (id=286): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x800}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() socket$inet6_tcp(0xa, 0x1, 0x0) 1.57872854s ago: executing program 3 (id=289): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x48) recvmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f00000004c0)=""/117, 0x75}], 0x4}, 0x2006) 1.516389445s ago: executing program 3 (id=290): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000121, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x25, 0x2, 0x0, 0x0, 0x0, 0x1, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0xd3}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffff7f, 0x5}, 0x6025, 0x4005, 0xb, 0x0, 0x800000000000005, 0x7, 0xf, 0x0, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x2, 0x1002, 0xa, 0x3, 0xfffffffe}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) fcntl$setsig(r4, 0xa, 0x13) socket$xdp(0x2c, 0x3, 0x0) 1.481909078s ago: executing program 1 (id=292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.445840881s ago: executing program 3 (id=293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x7f, 0x12) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x400002, 0xc5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='v', 0x1}], 0x1}}, {{&(0x7f0000001700)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x2, 0x10) recvfrom(r0, 0x0, 0x0, 0x103, 0x0, 0x0) 1.432425102s ago: executing program 1 (id=294): r0 = getpgid(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000140)=""/125, 0x7d) r2 = syz_pidfd_open(r0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.408673735s ago: executing program 3 (id=295): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 1.377095607s ago: executing program 2 (id=296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) alarm(0x20000000000000b) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$tipc(0x1e, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.364083649s ago: executing program 1 (id=297): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x20040091) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x88, 0xfc, 0x2, 0xd, 0x0, 0x9, 0x800, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0xfff, 0x80}, 0x0, 0x9, 0x0, 0x1, 0xc, 0x3, 0xff, 0x0, 0x2ac1, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r3, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x40000000000401, 0x43044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x20, 0x4, 0x3, 0x3, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x28142, 0x8) fcntl$setlease(r5, 0x400, 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x508, &(0x7f00000010c0)="$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") 1.225253401s ago: executing program 0 (id=298): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(r0, 0x3, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setpriority(0x1, r0, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) 752.193173ms ago: executing program 2 (id=299): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x2) fcntl$setlease(r3, 0x400, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc080) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) statx(r3, 0x0, 0x0, 0x8, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x80) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setreuid(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) 599.685187ms ago: executing program 2 (id=301): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x9}, 0x6018, 0x0, 0x2, 0x0, 0x3fe, 0x7ffffffc, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 552.238551ms ago: executing program 2 (id=302): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socketpair$nbd(0x1, 0x1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7fffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x10000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r1, 0x30, r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}}, 0x0) 446.81097ms ago: executing program 2 (id=303): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0)) ioprio_set$uid(0x0, 0x0, 0x4000) mq_notify(0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005}, 0x50) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 417.343403ms ago: executing program 3 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x30, 0x2e, 0x30, 0x61]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) 395.835285ms ago: executing program 2 (id=305): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200), 0x0) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x21dd, &(0x7f0000000340)={0x0, 0x7604, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 346.597829ms ago: executing program 0 (id=306): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x9}) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0x40000000}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 304.747563ms ago: executing program 5 (id=307): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) listen(r0, 0x8b25714e) accept4(r0, 0x0, 0x0, 0x0) 294.604824ms ago: executing program 0 (id=308): openat(0xffffffffffffffff, 0x0, 0x4040, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x4a, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 241.619719ms ago: executing program 5 (id=309): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x42040) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mknod$loop(0x0, 0x6000, 0x0) unshare(0x20040400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x0, r1, 0x0, 0x80000}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=310): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() sync() r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = dup(0xffffffffffffffff) io_submit(0x0, 0x7, &(0x7f0000001ac0)=[0x0, 0x0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000001500)="64b2dc0ae830b334845352e54da105f991531c37b063a99400ceccbaea4ea6eca0f38da9c8bc30bf5fe6a7e3062b126e3a0c4105594acc597bbc65829de6892b2a861c922c37d15608817b591e77e129020dcb0e02891bd02ddccfa06d06a05d72198a6d8e1237fed897fefb9bd5a4bf", 0x70, 0x6, 0x0, 0x5}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0xb680, r3, &(0x7f00000015c0)="0b47a61e3a38504cf93bdbfb4665b89cd447732bfa645169c11bab2d58128fafc06287493653216d49a9173a064a5a31fe6478cf1ba5b0c1a29db979bb20f493c30ba3a5", 0x44, 0x0, 0x0, 0x3, r3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x10, r2, &(0x7f0000001700)="acaa33705baaed1255237d4f98258fb163f70dc2ed225adf95cc769e0b663a16753b042aab858b345e3377f06ba9e219d16ef16060deba8d7d685e2095f3075f16796d4a2793b28349d2d8fc9fec19dbe005132324bf0fb7920173", 0x5b, 0x3, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f00000017c0)="095fd00919bb0ca06209d78c9f11080d58c9b4d2e156bf237ef0ba3130f4f5952024ce91aa8d4b33eb310178995e35562b61566c31fcb9", 0x37, 0xc29c, 0x0, 0x2, r3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1, r3}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) sendmsg$AUDIT_SET(r3, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) write$tun(r2, &(0x7f0000000740)=ANY=[], 0x2e) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 34.108664][ T28] audit: type=1400 audit(1771344389.370:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.133358][ T28] audit: type=1400 audit(1771344389.400:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.135716][ T3301] cgroup: Unknown subsys name 'net' [ 34.161550][ T28] audit: type=1400 audit(1771344389.430:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.300669][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.307300][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.439247][ T28] audit: type=1400 audit(1771344389.700:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.477711][ T28] audit: type=1400 audit(1771344389.700:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.499599][ T28] audit: type=1400 audit(1771344389.700:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.520473][ T28] audit: type=1400 audit(1771344389.700:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.541319][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.550105][ T28] audit: type=1400 audit(1771344389.730:69): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.571823][ T28] audit: type=1400 audit(1771344389.730:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.573912][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.597991][ T28] audit: type=1400 audit(1771344389.730:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.814618][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.871690][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.924364][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.958394][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.990266][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.997627][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.005560][ T3315] bridge_slave_0: entered allmulticast mode [ 36.012477][ T3315] bridge_slave_0: entered promiscuous mode [ 36.029386][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.036499][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.043780][ T3320] bridge_slave_0: entered allmulticast mode [ 36.050391][ T3320] bridge_slave_0: entered promiscuous mode [ 36.057062][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.064905][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.072732][ T3315] bridge_slave_1: entered allmulticast mode [ 36.079422][ T3315] bridge_slave_1: entered promiscuous mode [ 36.106126][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.113275][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.120567][ T3320] bridge_slave_1: entered allmulticast mode [ 36.127089][ T3320] bridge_slave_1: entered promiscuous mode [ 36.142771][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.153028][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.165530][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.205001][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.229479][ T3315] team0: Port device team_slave_0 added [ 36.236391][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.248832][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.256230][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.263754][ T3314] bridge_slave_0: entered allmulticast mode [ 36.270235][ T3314] bridge_slave_0: entered promiscuous mode [ 36.280021][ T3315] team0: Port device team_slave_1 added [ 36.294962][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.302212][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.310152][ T3314] bridge_slave_1: entered allmulticast mode [ 36.316884][ T3314] bridge_slave_1: entered promiscuous mode [ 36.348871][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.356169][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.363735][ T3316] bridge_slave_0: entered allmulticast mode [ 36.370375][ T3316] bridge_slave_0: entered promiscuous mode [ 36.382138][ T3320] team0: Port device team_slave_0 added [ 36.393743][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.400756][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.427008][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.442798][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.449937][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.457074][ T3316] bridge_slave_1: entered allmulticast mode [ 36.463857][ T3316] bridge_slave_1: entered promiscuous mode [ 36.471237][ T3320] team0: Port device team_slave_1 added [ 36.481865][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.488974][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.496389][ T3321] bridge_slave_0: entered allmulticast mode [ 36.502873][ T3321] bridge_slave_0: entered promiscuous mode [ 36.509706][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.516753][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.543054][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.558560][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.569206][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.592813][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.600106][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.607315][ T3321] bridge_slave_1: entered allmulticast mode [ 36.613870][ T3321] bridge_slave_1: entered promiscuous mode [ 36.636734][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.647692][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.657437][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.664535][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.690631][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.718030][ T3315] hsr_slave_0: entered promiscuous mode [ 36.724244][ T3315] hsr_slave_1: entered promiscuous mode [ 36.735212][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.742695][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.768730][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.780977][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.790984][ T3314] team0: Port device team_slave_0 added [ 36.797894][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.835046][ T3314] team0: Port device team_slave_1 added [ 36.851128][ T3316] team0: Port device team_slave_0 added [ 36.857208][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.864489][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.890966][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.904954][ T3321] team0: Port device team_slave_0 added [ 36.911846][ T3321] team0: Port device team_slave_1 added [ 36.923712][ T3316] team0: Port device team_slave_1 added [ 36.934703][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.941773][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.968032][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.994492][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.001532][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.027615][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.051061][ T3320] hsr_slave_0: entered promiscuous mode [ 37.057242][ T3320] hsr_slave_1: entered promiscuous mode [ 37.063369][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.069126][ T3320] Cannot create hsr debugfs directory [ 37.082736][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.089892][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.116497][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.127795][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.134877][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.161820][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.184124][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.191351][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.217671][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.240455][ T3314] hsr_slave_0: entered promiscuous mode [ 37.246580][ T3314] hsr_slave_1: entered promiscuous mode [ 37.252601][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.258470][ T3314] Cannot create hsr debugfs directory [ 37.312752][ T3321] hsr_slave_0: entered promiscuous mode [ 37.319085][ T3321] hsr_slave_1: entered promiscuous mode [ 37.325213][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.331097][ T3321] Cannot create hsr debugfs directory [ 37.343261][ T3316] hsr_slave_0: entered promiscuous mode [ 37.350251][ T3316] hsr_slave_1: entered promiscuous mode [ 37.356567][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.362657][ T3316] Cannot create hsr debugfs directory [ 37.523571][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.545175][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.567726][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.583031][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.607329][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.618056][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.627883][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.642749][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.682874][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.692873][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.707067][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.716935][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.751089][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.761916][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.771247][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.791829][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.810201][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.825896][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.843040][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.853193][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.865978][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.875370][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.905383][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.912601][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.930795][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.937928][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.948375][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.972179][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.987681][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.003402][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.014033][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.021167][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.038086][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.050732][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.057880][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.081951][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.089143][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.105048][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.112232][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.123131][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.144305][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.165670][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.172828][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.188996][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.223011][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.230790][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.247899][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.267669][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.282790][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.289948][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.312816][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.320119][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.355198][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.366229][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.377902][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.412679][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.452611][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.505086][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.521477][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.578527][ T3315] veth0_vlan: entered promiscuous mode [ 38.597673][ T3314] veth0_vlan: entered promiscuous mode [ 38.617735][ T3315] veth1_vlan: entered promiscuous mode [ 38.651114][ T3314] veth1_vlan: entered promiscuous mode [ 38.670995][ T3315] veth0_macvtap: entered promiscuous mode [ 38.699231][ T3315] veth1_macvtap: entered promiscuous mode [ 38.708554][ T3314] veth0_macvtap: entered promiscuous mode [ 38.722351][ T3321] veth0_vlan: entered promiscuous mode [ 38.731030][ T3314] veth1_macvtap: entered promiscuous mode [ 38.752781][ T3321] veth1_vlan: entered promiscuous mode [ 38.761896][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.772346][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.786579][ T3316] veth0_vlan: entered promiscuous mode [ 38.797560][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.812569][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.825190][ T3316] veth1_vlan: entered promiscuous mode [ 38.831936][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.841220][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.859606][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.878023][ T2142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.894241][ T2142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.903503][ T2142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.913246][ T3321] veth0_macvtap: entered promiscuous mode [ 38.931542][ T2142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.940991][ T2142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.961128][ T3320] veth0_vlan: entered promiscuous mode [ 38.969696][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.985945][ T3321] veth1_macvtap: entered promiscuous mode [ 39.007359][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.022586][ T3316] veth0_macvtap: entered promiscuous mode [ 39.034305][ T3320] veth1_vlan: entered promiscuous mode [ 39.045493][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.057816][ T3316] veth1_macvtap: entered promiscuous mode [ 39.064349][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.073286][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.093311][ T2142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.105501][ T2142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.129015][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 39.129033][ T28] audit: type=1400 audit(1771344394.390:99): avc: denied { allowed } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.155702][ T28] audit: type=1400 audit(1771344394.410:100): avc: denied { create } for pid=3484 comm="syz.3.4" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.178419][ T28] audit: type=1400 audit(1771344394.430:101): avc: denied { prog_load } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.186541][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.207793][ T28] audit: type=1400 audit(1771344394.430:102): avc: denied { bpf } for pid=3484 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.228352][ T2142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.239192][ T2142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.240290][ T28] audit: type=1400 audit(1771344394.430:103): avc: denied { perfmon } for pid=3484 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.270605][ T28] audit: type=1400 audit(1771344394.430:104): avc: denied { prog_run } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.290346][ T28] audit: type=1400 audit(1771344394.430:105): avc: denied { create } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.311293][ T28] audit: type=1400 audit(1771344394.430:106): avc: denied { bind } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.332247][ T3320] veth0_macvtap: entered promiscuous mode [ 39.338699][ T28] audit: type=1400 audit(1771344394.430:107): avc: denied { listen } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.359262][ T28] audit: type=1400 audit(1771344394.430:108): avc: denied { connect } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.397994][ T3487] syzkaller0: entered promiscuous mode [ 39.403983][ T3487] syzkaller0: entered allmulticast mode [ 39.430387][ T3320] veth1_macvtap: entered promiscuous mode [ 39.440964][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.462262][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.485217][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.508869][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.518924][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.550037][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.616376][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.664269][ T3504] loop1: detected capacity change from 0 to 512 [ 39.665578][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.673445][ T3504] EXT4-fs: Ignoring removed nobh option [ 39.733253][ T3504] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.8: iget: bad i_size value: 38620345925642 [ 39.801027][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.820237][ T3507] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 39.842079][ T3504] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.842504][ T3504] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8: couldn't read orphan inode 15 (err -117) [ 39.851950][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 39.851969][ C1] EXT4-fs (loop1): initial error at time 1771344395: ext4_orphan_get:1391: inode 15 [ 39.852018][ C1] EXT4-fs (loop1): last error at time 1771344395: ext4_orphan_get:1391: inode 15 [ 39.899911][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.908878][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.918317][ T3504] loop1: lost filesystem error report for type 5 error -117 [ 39.921262][ T3504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.922095][ C1] hrtimer: interrupt took 63377 ns [ 39.958700][ T3509] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 40.640080][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.816929][ T3520] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10'. [ 40.990644][ T3527] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 41.137208][ T3525] x9: renamed from bridge_slave_0 (while UP) [ 41.162374][ T3535] loop1: detected capacity change from 0 to 128 [ 41.200753][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 41.390124][ T3528] loop3: detected capacity change from 0 to 32768 [ 41.508176][ T3543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.993984][ T3558] loop2: detected capacity change from 0 to 256 [ 42.065175][ T3558] FAT-fs (loop2): Directory bread(block 64) failed [ 42.075908][ T3558] FAT-fs (loop2): Directory bread(block 65) failed [ 42.082951][ T3558] FAT-fs (loop2): Directory bread(block 66) failed [ 42.090161][ T3558] FAT-fs (loop2): Directory bread(block 67) failed [ 42.097674][ T3558] FAT-fs (loop2): Directory bread(block 68) failed [ 42.105655][ T3558] FAT-fs (loop2): Directory bread(block 69) failed [ 42.113909][ T3558] FAT-fs (loop2): Directory bread(block 70) failed [ 42.121064][ T3558] FAT-fs (loop2): Directory bread(block 71) failed [ 42.128141][ T3558] FAT-fs (loop2): Directory bread(block 72) failed [ 42.135435][ T3558] FAT-fs (loop2): Directory bread(block 73) failed [ 42.423075][ T3560] netlink: 'syz.3.23': attribute type 4 has an invalid length. [ 43.139507][ T3572] bridge0: entered promiscuous mode [ 43.162617][ T3572] macvtap1: entered promiscuous mode [ 43.194747][ T3572] macvtap1: entered allmulticast mode [ 43.214081][ T3572] bridge0: entered allmulticast mode [ 43.313253][ T3572] bridge0: port 3(macvtap1) entered blocking state [ 43.335159][ T3572] bridge0: port 3(macvtap1) entered disabled state [ 43.347084][ T3577] loop1: detected capacity change from 0 to 512 [ 43.408426][ T3572] bridge0: left allmulticast mode [ 43.424997][ T3572] bridge0: left promiscuous mode [ 43.469189][ T3577] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #11: block 530: comm syz.1.28: lblock 4 mapped to illegal pblock 530 (length 1) [ 43.539813][ T3577] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.540304][ T3577] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.553741][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 43.553771][ C1] EXT4-fs (loop1): initial error at time 1771344398: ext4_map_blocks:776: inode 11: block 530 [ 43.553834][ C1] EXT4-fs (loop1): last error at time 1771344398: ext4_map_blocks:776: inode 11: block 530 [ 43.747052][ T3577] ------------[ cut here ]------------ [ 43.752975][ T3577] EA inode 11 i_nlink=2 [ 43.753003][ T3577] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.28/3577 [ 43.768269][ T3577] Modules linked in: [ 43.772512][ T3577] CPU: 0 UID: 0 PID: 3577 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 43.781773][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.792224][ T3577] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 43.799138][ T3577] Code: e4 70 99 ff 4c 8d 2d 7d 0d 5e 05 49 8d 7e 40 e8 74 03 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 fe b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 1f dc 03 66 66 66 66 66 66 2e [ 43.819387][ T3577] RSP: 0018:ffffc90001d37778 EFLAGS: 00010246 [ 43.826014][ T3577] RAX: ffff88810495bbf8 RBX: ffff88810a07a048 RCX: ffffffff81bfcf98 [ 43.835016][ T3577] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871ddd00 [ 43.843512][ T3577] RBP: 000000000000000b R08: 000188810a079ffb R09: 0000000000000000 [ 43.851748][ T3577] R10: ffffc90001d376a8 R11: 0001c90001d376a8 R12: ffff88810a079ff8 [ 43.859982][ T3577] R13: ffffffff871ddd00 R14: ffff88810a079fb0 R15: 0000000000000001 [ 43.868258][ T3577] FS: 00007f2f3077e6c0(0000) GS:ffff8882ae8e4000(0000) knlGS:0000000000000000 [ 43.877771][ T3577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.877801][ T3577] CR2: 0000200001000000 CR3: 000000011bbbc000 CR4: 00000000003506f0 [ 43.877850][ T3577] Call Trace: [ 43.877858][ T3577] [ 43.877872][ T3577] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 43.878044][ T3577] ? errseq_check+0x2c/0x50 [ 43.878084][ T3577] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 43.878120][ T3577] ? ext4_truncate+0x92b/0xb00 [ 43.878168][ T3577] ext4_evict_inode+0xa1f/0xd60 [ 43.878203][ T3577] ? __pfx_ext4_evict_inode+0x10/0x10 [ 43.878311][ T3577] evict+0x2af/0x510 [ 43.878346][ T3577] ? __dquot_initialize+0x146/0x7c0 [ 43.878439][ T3577] iput+0x41a/0x580 [ 43.878466][ T3577] ext4_process_orphan+0x1a9/0x1c0 [ 43.878503][ T3577] ext4_orphan_cleanup+0x6a8/0xa00 [ 43.878572][ T3577] ext4_fill_super+0x3408/0x37c0 [ 43.960866][ T3577] ? set_blocksize+0x14c/0x270 [ 43.966101][ T3577] ? setup_bdev_super+0x30e/0x370 [ 43.971397][ T3577] ? __pfx_ext4_fill_super+0x10/0x10 [ 43.976767][ T3577] get_tree_bdev_flags+0x291/0x300 [ 43.981991][ T3577] ? __pfx_ext4_fill_super+0x10/0x10 [ 43.987358][ T3577] get_tree_bdev+0x1f/0x30 [ 43.992135][ T3577] ext4_get_tree+0x1c/0x30 [ 43.996619][ T3577] vfs_get_tree+0x57/0x1d0 [ 44.001302][ T3577] do_new_mount+0x288/0x8d0 [ 44.006280][ T3577] path_mount+0x4d0/0xbc0 [ 44.010728][ T3577] __se_sys_mount+0x28c/0x2e0 [ 44.015743][ T3577] __x64_sys_mount+0x67/0x80 [ 44.020517][ T3577] x64_sys_call+0x2d61/0x3020 [ 44.025352][ T3577] do_syscall_64+0x12c/0x370 [ 44.030022][ T3577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.036048][ T3577] RIP: 0033:0x7f2f31d4d8ca [ 44.040814][ T3577] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.060787][ T3577] RSP: 002b:00007f2f3077de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.069598][ T3577] RAX: ffffffffffffffda RBX: 00007f2f3077dee0 RCX: 00007f2f31d4d8ca [ 44.078570][ T3577] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2f3077dea0 [ 44.086838][ T3577] RBP: 0000200000000180 R08: 00007f2f3077dee0 R09: 0000000000800718 [ 44.095324][ T3577] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 44.103742][ T3577] R13: 00007f2f3077dea0 R14: 0000000000000482 R15: 0000200000000200 [ 44.112448][ T3577] [ 44.116314][ T3577] ---[ end trace 0000000000000000 ]--- [ 44.150866][ T3577] EXT4-fs (loop1): 1 orphan inode deleted [ 44.168325][ T3572] syz.3.26 (3572) used greatest stack depth: 10056 bytes left [ 44.196440][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.220053][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 44.220069][ T28] audit: type=1400 audit(1771344399.480:154): avc: denied { setopt } for pid=3589 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.271256][ T3596] loop2: detected capacity change from 0 to 512 [ 44.287789][ T3596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.340524][ T3596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.34: bg 0: block 393: padding at end of block bitmap is not set [ 44.403678][ T3596] loop2: lost filesystem error report for type 5 error -117 [ 44.410173][ T28] audit: type=1400 audit(1771344399.480:155): avc: denied { block_suspend } for pid=3589 comm="syz.2.30" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.412890][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 44.417916][ T28] audit: type=1400 audit(1771344399.600:156): avc: denied { create } for pid=3575 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.439064][ C1] EXT4-fs (loop2): initial error at time 1771344399: ext4_validate_block_bitmap:441 [ 44.439095][ C1] EXT4-fs (loop2): last error at time 1771344399: ext4_validate_block_bitmap:441 [ 44.446508][ T28] audit: type=1400 audit(1771344399.600:157): avc: denied { bind } for pid=3575 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.465096][ C1] [ 44.465559][ T3596] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 44.477411][ T28] audit: type=1400 audit(1771344399.600:158): avc: denied { write } for pid=3575 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.529979][ T3596] loop2: lost filesystem error report for type 5 error -117 [ 44.592375][ T3604] xt_NFQUEUE: number of total queues is 0 [ 44.630014][ T3596] EXT4-fs (loop2): 2 truncates cleaned up [ 44.637042][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.649112][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.522224][ T3596] lo speed is unknown, defaulting to 1000 [ 45.983018][ T3607] loop3: detected capacity change from 0 to 4096 [ 46.280019][ T28] audit: type=1400 audit(1771344400.790:159): avc: denied { write } for pid=3595 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.302909][ T3610] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 46.312121][ T3610] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 46.342666][ T28] audit: type=1400 audit(1771344401.570:160): avc: denied { ioctl } for pid=3595 comm="syz.2.34" path="socket:[4084]" dev="sockfs" ino=4084 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.480181][ T3596] lo speed is unknown, defaulting to 1000 [ 46.505475][ T28] audit: type=1400 audit(1771344401.570:161): avc: denied { write } for pid=3595 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.529525][ T3596] lo speed is unknown, defaulting to 1000 [ 46.568737][ T3607] EXT4-fs (loop3): unsupported descriptor size 0 [ 46.581822][ T28] audit: type=1400 audit(1771344401.850:162): avc: denied { create } for pid=3606 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.601597][ T28] audit: type=1400 audit(1771344401.850:163): avc: denied { ioctl } for pid=3606 comm="syz.3.37" path="socket:[5127]" dev="sockfs" ino=5127 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.857399][ T3596] infiniband syz0: set active [ 46.947735][ T1042] lo speed is unknown, defaulting to 1000 [ 46.957834][ T3596] infiniband syz0: added lo [ 46.963078][ T3596] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 46.963460][ T3596] infiniband syz0: Couldn't open port 1 [ 47.032487][ T3596] RDS/IB: syz0: added [ 47.036690][ T3596] smc: adding ib device syz0 with port count 1 [ 47.064477][ T3596] smc: ib device syz0 port 1 has no pnetid [ 47.072864][ T3621] loop3: detected capacity change from 0 to 512 [ 47.081684][ T23] lo speed is unknown, defaulting to 1000 [ 47.088559][ T3596] lo speed is unknown, defaulting to 1000 [ 47.101459][ T3627] Zero length message leads to an empty skb [ 47.196138][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.211422][ T3596] lo speed is unknown, defaulting to 1000 [ 47.816339][ T3621] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.871695][ T3596] lo speed is unknown, defaulting to 1000 [ 48.139426][ T3596] lo speed is unknown, defaulting to 1000 [ 48.196493][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.288427][ T3596] lo speed is unknown, defaulting to 1000 [ 48.602607][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.241840][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 49.241880][ T28] audit: type=1400 audit(1771344404.510:170): avc: denied { firmware_load } for pid=3646 comm="syz.0.48" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 49.361895][ T28] audit: type=1400 audit(1771344404.580:171): avc: denied { bind } for pid=3646 comm="syz.0.48" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.455112][ T28] audit: type=1400 audit(1771344404.580:172): avc: denied { name_bind } for pid=3646 comm="syz.0.48" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 49.542992][ T28] audit: type=1400 audit(1771344404.580:173): avc: denied { node_bind } for pid=3646 comm="syz.0.48" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 49.762119][ T28] audit: type=1400 audit(1771344405.030:174): avc: denied { create } for pid=3664 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 49.948906][ T3660] loop3: detected capacity change from 0 to 32768 [ 49.956851][ T3667] loop2: detected capacity change from 0 to 128 [ 49.969017][ T3655] syz.0.48 (3655) used greatest stack depth: 9912 bytes left [ 49.978808][ T28] audit: type=1400 audit(1771344405.250:175): avc: denied { create } for pid=3666 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.099770][ T28] audit: type=1400 audit(1771344405.360:176): avc: denied { create } for pid=3668 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.176926][ T28] audit: type=1400 audit(1771344405.400:177): avc: denied { connect } for pid=3668 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.243237][ T3674] loop2: detected capacity change from 0 to 512 [ 50.271656][ T3674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.271794][ T3674] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.315873][ T3674] lo speed is unknown, defaulting to 1000 [ 50.335333][ T28] audit: type=1400 audit(1771344405.600:178): avc: denied { add_name } for pid=3670 comm="syz.2.56" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.335372][ T28] audit: type=1400 audit(1771344405.600:179): avc: denied { create } for pid=3670 comm="syz.2.56" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.675969][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.728574][ T3679] lo speed is unknown, defaulting to 1000 [ 50.751742][ T3682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 50.825497][ T3681] loop1: detected capacity change from 0 to 512 [ 50.886621][ T3681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.956189][ T3681] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.001949][ T3686] loop0: detected capacity change from 0 to 1024 [ 51.011493][ T3681] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.056389][ T3686] EXT4-fs: Ignoring removed nobh option [ 51.065454][ T3686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.142810][ T3681] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.58: corrupted inode contents [ 51.170172][ T3686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.202007][ T3681] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.209870][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 51.225872][ C1] EXT4-fs (loop1): initial error at time 1771344406: ext4_do_update_inode:5569: inode 16 [ 51.236168][ C1] EXT4-fs (loop1): last error at time 1771344406: ext4_do_update_inode:5569: inode 16 [ 51.256443][ T3686] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.270264][ T3681] EXT4-fs (loop1): Remounting filesystem read-only [ 51.286189][ T3681] EXT4-fs (loop1): 1 truncate cleaned up [ 51.304676][ T30] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.330936][ T30] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.370800][ T30] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.458906][ T3681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.524086][ T3696] netlink: 104 bytes leftover after parsing attributes in process `syz.0.62'. [ 51.795549][ T3681] bond2: option miimon: invalid value (18446744073709551615) [ 51.804280][ T3681] bond2: option miimon: allowed values 0 - 2147483647 [ 51.835060][ T3681] bond2 (unregistering): Released all slaves [ 51.994293][ T3707] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3707 comm=syz.2.65 [ 52.514865][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.919488][ T3720] process 'syz.2.71' launched '/dev/fd/6' with NULL argv: empty string added [ 52.972198][ T3711] loop0: detected capacity change from 0 to 32768 [ 53.384253][ T3734] loop0: detected capacity change from 0 to 512 [ 53.453287][ T3734] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.77: iget: bad i_size value: 38620345925642 [ 53.475833][ T3734] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.477193][ T3734] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.77: couldn't read orphan inode 15 (err -117) [ 53.486762][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 53.487012][ C0] EXT4-fs (loop0): initial error at time 1771344408: ext4_orphan_get:1391: inode 15 [ 53.487125][ C0] EXT4-fs (loop0): last error at time 1771344408: ext4_orphan_get:1391: inode 15 [ 53.527543][ T3734] loop0: lost filesystem error report for type 5 error -117 [ 53.534756][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.724478][ T3734] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.77: bg 0: block 5: invalid block bitmap [ 53.794136][ T3734] syz.0.77 (3734) used greatest stack depth: 9224 bytes left [ 54.295809][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 55.711572][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 55.711632][ T28] audit: type=1400 audit(1771344410.980:199): avc: denied { create } for pid=3779 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.860125][ T28] audit: type=1400 audit(1771344410.980:200): avc: denied { setopt } for pid=3779 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.910070][ T28] audit: type=1400 audit(1771344411.010:201): avc: denied { write } for pid=3779 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.941522][ T28] audit: type=1400 audit(1771344411.010:202): avc: denied { read } for pid=3779 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.985401][ T3789] netlink: 112 bytes leftover after parsing attributes in process `syz.2.87'. [ 56.062817][ T28] audit: type=1400 audit(1771344411.310:203): avc: denied { connect } for pid=3781 comm="syz.3.86" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.660946][ T3795] syzkaller0: entered promiscuous mode [ 56.677259][ T3795] syzkaller0: entered allmulticast mode [ 56.874940][ T3805] loop1: detected capacity change from 0 to 512 [ 56.920954][ T3805] EXT4-fs: Ignoring removed bh option [ 56.984624][ T3805] EXT4-fs: Ignoring removed oldalloc option [ 57.038739][ T3805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.106626][ T3805] EXT4-fs (loop1): 1 truncate cleaned up [ 57.145314][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.254875][ T28] audit: type=1400 audit(1771344412.520:204): avc: denied { append } for pid=3799 comm="syz.1.91" path="/23/file2/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.352443][ T3784] syz.2.87 (3784) used greatest stack depth: 7464 bytes left [ 57.540915][ T3810] syzkaller0: entered promiscuous mode [ 57.541806][ T28] audit: type=1400 audit(1771344412.810:205): avc: denied { name_bind } for pid=3811 comm="syz.3.95" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.569178][ T3810] syzkaller0: entered allmulticast mode [ 57.603021][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.632236][ T28] audit: type=1400 audit(1771344412.840:206): avc: denied { node_bind } for pid=3811 comm="syz.3.95" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 57.782756][ T3423] lo speed is unknown, defaulting to 1000 [ 57.819605][ T28] audit: type=1400 audit(1771344412.930:207): avc: denied { bpf } for pid=3815 comm="syz.1.96" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.862267][ T3821] loop3: detected capacity change from 0 to 2048 [ 57.933932][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.015753][ T28] audit: type=1400 audit(1771344412.930:208): avc: denied { perfmon } for pid=3815 comm="syz.1.96" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.298264][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.354686][ T3830] loop3: detected capacity change from 0 to 128 [ 58.429419][ T3833] syz.3.100: attempt to access beyond end of device [ 58.429419][ T3833] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 58.497394][ T3833] syz.3.100: attempt to access beyond end of device [ 58.497394][ T3833] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 58.544661][ T3833] syz.3.100: attempt to access beyond end of device [ 58.544661][ T3833] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 58.576791][ T3832] loop1: detected capacity change from 0 to 512 [ 58.589907][ T3833] syz.3.100: attempt to access beyond end of device [ 58.589907][ T3833] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 58.630127][ T3833] syz.3.100: attempt to access beyond end of device [ 58.630127][ T3833] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 58.649692][ T3832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.779883][ T3833] syz.3.100: attempt to access beyond end of device [ 58.779883][ T3833] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 58.809901][ T3833] syz.3.100: attempt to access beyond end of device [ 58.809901][ T3833] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 58.855777][ T3833] syz.3.100: attempt to access beyond end of device [ 58.855777][ T3833] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 58.872494][ T3833] syz.3.100: attempt to access beyond end of device [ 58.872494][ T3833] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 58.887632][ T3832] EXT4-fs (loop1): 1 truncate cleaned up [ 58.904315][ T3832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.918143][ T3833] syz.3.100: attempt to access beyond end of device [ 58.918143][ T3833] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 59.414021][ T3828] loop0: detected capacity change from 0 to 512 [ 59.587637][ T3828] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.612303][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.750344][ T3316] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 59.835057][ T3858] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.108'. [ 59.845477][ T3858] netlink: zone id is out of range [ 59.851926][ T3858] netlink: zone id is out of range [ 59.862140][ T3858] netlink: zone id is out of range [ 60.016927][ T3858] netlink: set zone limit has 8 unknown bytes [ 60.088704][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.193768][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.293752][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.330858][ T3853] lo speed is unknown, defaulting to 1000 [ 60.360970][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.527039][ T3853] chnl_net:caif_netlink_parms(): no params data found [ 60.564198][ T59] bridge_slave_1: left allmulticast mode [ 60.582676][ T59] bridge_slave_1: left promiscuous mode [ 60.607553][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.641616][ T59] x9: left allmulticast mode [ 60.651639][ T59] x9: left promiscuous mode [ 60.662086][ T59] bridge0: port 1(1x9) entered disabled state [ 60.754996][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 60.755014][ T28] audit: type=1400 audit(1771344416.020:219): avc: denied { bind } for pid=3884 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.756159][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 60.795299][ T28] audit: type=1400 audit(1771344416.060:220): avc: denied { add_name } for pid=3881 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.795430][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 60.875667][ T3902] ======================================================= [ 60.875667][ T3902] WARNING: The mand mount option has been deprecated and [ 60.875667][ T3902] and is ignored by this kernel. Remove the mand [ 60.875667][ T3902] option from the mount to silence this warning. [ 60.875667][ T3902] ======================================================= [ 60.910747][ T3902] 9p: Bad value for 'rfdno' [ 60.914515][ T28] audit: type=1400 audit(1771344416.140:221): avc: denied { remove_name } for pid=3901 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.000746][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.017710][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.037548][ T59] bond0 (unregistering): Released all slaves [ 61.084454][ T3896] bridge1: entered promiscuous mode [ 61.104208][ T3896] bridge1: entered allmulticast mode [ 61.114283][ T28] audit: type=1400 audit(1771344416.380:222): avc: denied { write } for pid=3904 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.172719][ T3885] lo speed is unknown, defaulting to 1000 [ 61.232017][ T59] hsr_slave_0: left promiscuous mode [ 61.240751][ T59] hsr_slave_1: left promiscuous mode [ 61.260151][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.283976][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.307257][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.316101][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.327599][ T59] veth1_macvtap: left promiscuous mode [ 61.359790][ T59] veth0_macvtap: left promiscuous mode [ 61.385189][ T59] veth1_vlan: left promiscuous mode [ 61.391084][ T59] veth0_vlan: left promiscuous mode [ 61.545163][ T3934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3934 comm=syz.3.116 [ 61.627800][ T59] team0 (unregistering): Port device team_slave_1 removed [ 61.663383][ T59] team0 (unregistering): Port device team_slave_0 removed [ 61.797904][ T3853] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.819282][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.835005][ T3853] bridge_slave_0: entered allmulticast mode [ 61.858326][ T3853] bridge_slave_0: entered promiscuous mode [ 61.897027][ T3853] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.904233][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.920012][ T3853] bridge_slave_1: entered allmulticast mode [ 61.930727][ T3853] bridge_slave_1: entered promiscuous mode [ 61.952892][ T3936] lo speed is unknown, defaulting to 1000 [ 61.974532][ T3853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.995227][ T3853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.041755][ T3929] loop2: detected capacity change from 0 to 512 [ 62.050899][ T3853] team0: Port device team_slave_0 added [ 62.076517][ T3853] team0: Port device team_slave_1 added [ 62.147722][ T3853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.156413][ T3853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.194940][ T3929] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.117: couldn't read orphan inode 26 (err -116) [ 62.207956][ T3929] loop2: lost filesystem error report for type 5 error -116 [ 62.218058][ T3853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.241025][ T3929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.253495][ T3853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.255901][ T3929] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.281828][ T3853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.308681][ T3929] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.117: bg 0: block 64: padding at end of block bitmap is not set [ 62.360213][ T3853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.400094][ T3929] Quota error (device loop2): write_blk: dquota write failed [ 62.416444][ T3929] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 62.459608][ T3929] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.117: Failed to acquire dquot type 0 [ 62.478149][ T3853] hsr_slave_0: entered promiscuous mode [ 62.490813][ T3853] hsr_slave_1: entered promiscuous mode [ 62.497266][ T3853] debugfs: 'hsr0' already exists in 'hsr' [ 62.516453][ T3853] Cannot create hsr debugfs directory [ 62.611146][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.632722][ T28] audit: type=1400 audit(1771344417.900:223): avc: denied { create } for pid=3957 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.679897][ T28] audit: type=1400 audit(1771344417.940:224): avc: denied { write } for pid=3957 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.701769][ T3961] tipc: Started in network mode [ 62.706745][ T3961] tipc: Node identity 7ac1f9878c6c, cluster identity 4711 [ 62.715237][ T3961] tipc: Enabled bearer , priority 0 [ 62.795277][ T28] audit: type=1400 audit(1771344418.040:225): avc: denied { shutdown } for pid=3954 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.906955][ T3961] syzkaller0: entered promiscuous mode [ 62.953258][ T3961] syzkaller0: entered allmulticast mode [ 62.996621][ T3963] tipc: Resetting bearer [ 63.053037][ T3960] tipc: Resetting bearer [ 63.076592][ T3960] tipc: Disabling bearer [ 63.135322][ T3965] syzkaller0: entered promiscuous mode [ 63.169785][ T3965] syzkaller0: entered allmulticast mode [ 63.236546][ T3853] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.256840][ T3973] loop2: detected capacity change from 0 to 512 [ 63.258981][ T3853] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.287426][ T3973] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 63.306911][ T3973] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.314328][ T3853] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.321322][ T3973] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.122: Block bitmap for bg 0 marked uninitialized [ 63.334805][ T3975] loop3: detected capacity change from 0 to 128 [ 63.345160][ T3853] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.364978][ T3973] loop2: lost filesystem error report for type 5 error -117 [ 63.369828][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 63.383636][ C0] EXT4-fs (loop2): initial error at time 1771344418: ext4_read_block_bitmap_nowait:517 [ 63.393339][ C0] EXT4-fs (loop2): last error at time 1771344418: ext4_read_block_bitmap_nowait:517 [ 63.395790][ T3975] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 63.420383][ T3973] EXT4-fs (loop2): Remounting filesystem read-only [ 63.426988][ T3973] EXT4-fs (loop2): 1 orphan inode deleted [ 63.447810][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop3 [ 63.455307][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 63.498553][ T3987] loop0: detected capacity change from 0 to 512 [ 63.514031][ T28] audit: type=1400 audit(1771344418.770:226): avc: denied { create } for pid=3974 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 63.550259][ T3973] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.122'. [ 63.592417][ T3992] tun0: tun_chr_ioctl cmd 1074812118 [ 63.609036][ T3998] loop3: detected capacity change from 0 to 1024 [ 63.638511][ T3998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.693294][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.708950][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.741536][ T3853] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.758908][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.766098][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.785456][ T1697] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.792572][ T1697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.894007][ T3853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.935043][ T3853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.085154][ T4018] loop1: detected capacity change from 0 to 1024 [ 64.092272][ T4018] EXT4-fs: inline encryption not supported [ 64.203834][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.388983][ T3853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.998941][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.045296][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.090806][ T4041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'. [ 66.112617][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 66.112691][ T28] audit: type=1400 audit(1771344421.380:271): avc: denied { create } for pid=4039 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.125215][ T4046] loop3: detected capacity change from 0 to 1024 [ 66.176956][ T28] audit: type=1400 audit(1771344421.440:272): avc: denied { relabelfrom } for pid=4043 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.177473][ T4041] loop0: detected capacity change from 0 to 512 [ 66.196937][ T28] audit: type=1400 audit(1771344421.440:273): avc: denied { relabelto } for pid=4043 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.226508][ T4046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.279946][ T4041] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.133: ea_inode with extended attributes [ 66.309987][ T4048] loop2: detected capacity change from 0 to 8192 [ 66.316734][ T4041] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.316951][ T4041] EXT4-fs (loop0): Remounting filesystem read-only [ 66.326169][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 66.326188][ C1] EXT4-fs (loop0): initial error at time 1771344421: ext4_xattr_inode_iget:441: inode 11 [ 66.326216][ C1] EXT4-fs (loop0): last error at time 1771344421: ext4_xattr_inode_iget:441: inode 11 [ 66.360803][ T4053] syzkaller0: entered promiscuous mode [ 66.366338][ T4053] syzkaller0: entered allmulticast mode [ 66.375245][ T4041] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -30) [ 66.390767][ T3853] veth0_vlan: entered promiscuous mode [ 66.403267][ T3853] veth1_vlan: entered promiscuous mode [ 66.409665][ T4041] EXT4-fs (loop0): 1 orphan inode deleted [ 66.416642][ T4041] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.437627][ T4041] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 66.482034][ T3853] veth0_macvtap: entered promiscuous mode [ 66.491323][ T3853] veth1_macvtap: entered promiscuous mode [ 66.504192][ T3853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.594123][ T3853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.810612][ T28] audit: type=1400 audit(1771344421.950:274): avc: denied { nlmsg_write } for pid=4045 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 66.934801][ T3775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.979537][ T3775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.070123][ T28] audit: type=1400 audit(1771344422.220:275): avc: denied { mount } for pid=4045 comm="syz.2.134" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.110298][ T3775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.128260][ T3775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.184831][ T28] audit: type=1400 audit(1771344422.450:276): avc: denied { mounton } for pid=3853 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.264270][ T28] audit: type=1400 audit(1771344422.520:277): avc: denied { name_bind } for pid=4069 comm="syz.0.137" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 67.299134][ T4072] netlink: 100 bytes leftover after parsing attributes in process `syz.5.106'. [ 67.319577][ T28] audit: type=1400 audit(1771344422.530:278): avc: denied { ioctl } for pid=4069 comm="syz.0.137" path="socket:[6992]" dev="sockfs" ino=6992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.323216][ T4070] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.356402][ T4070] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.363729][ T28] audit: type=1400 audit(1771344422.560:279): avc: denied { block_suspend } for pid=4071 comm="syz.5.106" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.393068][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.403414][ T28] audit: type=1400 audit(1771344422.670:280): avc: denied { write } for pid=4067 comm="syz.2.136" name="mcfilter" dev="proc" ino=4026532776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.476599][ T4070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.487947][ T4070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.557985][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.597583][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.622071][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.641881][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.293384][ T4091] 9p: Bad value for 'rfdno' [ 68.331287][ T4097] netlink: 14 bytes leftover after parsing attributes in process `syz.3.143'. [ 68.515712][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.139'. [ 68.534655][ T4104] loop5: detected capacity change from 0 to 256 [ 68.843584][ T3402] IPVS: starting estimator thread 0... [ 68.950336][ T4111] IPVS: using max 2304 ests per chain, 115200 per kthread [ 70.112592][ T4134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.207255][ T4138] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.236490][ T4134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.447725][ T4141] loop5: detected capacity change from 0 to 512 [ 70.488586][ T4139] loop2: detected capacity change from 0 to 128 [ 70.495694][ T4141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.529568][ T4141] EXT4-fs (loop5): 1 truncate cleaned up [ 70.548023][ T4141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.603426][ T30] bio_check_eod: 102 callbacks suppressed [ 70.603443][ T30] kworker/u8:1: attempt to access beyond end of device [ 70.603443][ T30] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 70.900733][ T3853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.327205][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 71.465643][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 71.465662][ T28] audit: type=1400 audit(1771344426.730:295): avc: denied { create } for pid=4161 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.510167][ T4159] lo speed is unknown, defaulting to 1000 [ 71.525459][ T4167] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 71.535177][ T28] audit: type=1400 audit(1771344426.760:296): avc: denied { bind } for pid=4161 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.609900][ T28] audit: type=1400 audit(1771344426.760:297): avc: denied { getopt } for pid=4161 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.728643][ T28] audit: type=1400 audit(1771344426.990:298): avc: denied { read } for pid=4169 comm="syz.3.163" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.809519][ T4165] loop1: detected capacity change from 0 to 256 [ 71.823968][ T28] audit: type=1400 audit(1771344427.020:299): avc: denied { open } for pid=4169 comm="syz.3.163" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.920033][ T28] audit: type=1400 audit(1771344427.040:300): avc: denied { ioctl } for pid=4169 comm="syz.3.163" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.980211][ T4183] loop0: detected capacity change from 0 to 512 [ 71.986676][ T4184] loop3: detected capacity change from 0 to 128 [ 72.014519][ T4183] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.059839][ T28] audit: type=1400 audit(1771344427.170:301): avc: denied { create } for pid=4169 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 72.147304][ T4189] loop4: detected capacity change from 0 to 7 [ 72.199974][ T28] audit: type=1400 audit(1771344427.180:302): avc: denied { read } for pid=4169 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 72.247295][ T28] audit: type=1400 audit(1771344427.230:303): avc: denied { setopt } for pid=4178 comm="syz.0.167" lport=48424 faddr=::ffff:172.30.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 72.298096][ T4189] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.322633][ T4194] loop2: detected capacity change from 0 to 512 [ 72.349869][ T4189] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.358945][ T28] audit: type=1400 audit(1771344427.400:304): avc: denied { ioctl } for pid=4178 comm="syz.0.167" path="socket:[7493]" dev="sockfs" ino=7493 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.391069][ T4189] loop4: unable to read partition table [ 72.397552][ T4189] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 72.412769][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.421191][ T4194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 72.442449][ T4194] System zones: 0-2, 18-18, 34-34 [ 72.448406][ T4194] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.171: bg 0: block 248: padding at end of block bitmap is not set [ 72.469565][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.479850][ T4194] loop2: lost filesystem error report for type 5 error -117 [ 72.480191][ T4194] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.171: Failed to acquire dquot type 1 [ 72.498864][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 72.498889][ C1] EXT4-fs (loop2): last error at time 1771344427: ext4_validate_block_bitmap:441 [ 72.514560][ T4194] loop2: lost filesystem error report for type 5 error -117 [ 72.518865][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.534825][ T4194] EXT4-fs (loop2): 1 truncate cleaned up [ 72.543060][ T4194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.558312][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.566968][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.581914][ T4194] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.600598][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.618955][ T4194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.171'. [ 72.630507][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.650481][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.789933][ T4199] loop0: detected capacity change from 0 to 512 [ 72.900745][ T4202] lo speed is unknown, defaulting to 1000 [ 73.070401][ T4213] syzkaller0: entered promiscuous mode [ 73.075963][ T4213] syzkaller0: entered allmulticast mode [ 73.131933][ T4216] tipc: Started in network mode [ 73.149896][ T4216] tipc: Node identity 16103df57348, cluster identity 4711 [ 73.157091][ T4216] tipc: Enabled bearer , priority 0 [ 73.206265][ T4210] syzkaller0: entered promiscuous mode [ 73.224487][ T4210] syzkaller0: entered allmulticast mode [ 73.277510][ T4213] tipc: Resetting bearer [ 73.291176][ T4214] loop1: detected capacity change from 0 to 512 [ 73.298318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.298354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.323579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.331907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.370995][ T4212] tipc: Resetting bearer [ 73.400260][ T4212] tipc: Disabling bearer [ 73.420535][ T4214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.421501][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.440211][ T83] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 1 [ 73.478160][ T4214] EXT4-fs (loop1): 1 truncate cleaned up [ 73.480068][ T83] loop2: lost filesystem error report for type 5 error -117 [ 73.500646][ T4214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.758550][ T4231] syzkaller0: entered promiscuous mode [ 73.764240][ T4231] syzkaller0: entered allmulticast mode [ 73.923068][ T4225] capability: warning: `syz.2.180' uses 32-bit capabilities (legacy support in use) [ 74.266134][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.325117][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 74.551611][ T4240] loop2: detected capacity change from 0 to 512 [ 74.615349][ T4240] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.701547][ T4250] netlink: 'syz.3.188': attribute type 21 has an invalid length. [ 74.730620][ T4250] netlink: 156 bytes leftover after parsing attributes in process `syz.3.188'. [ 74.760156][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 74.885550][ T4252] lo speed is unknown, defaulting to 1000 [ 75.248662][ T4258] loop3: detected capacity change from 0 to 8192 [ 76.037274][ T4270] loop0: detected capacity change from 0 to 8192 [ 76.372083][ T4294] lo speed is unknown, defaulting to 1000 [ 76.473172][ T4300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.500641][ T4296] loop3: detected capacity change from 0 to 512 [ 76.507983][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 76.507998][ T28] audit: type=1400 audit(1771344687.769:342): avc: denied { name_bind } for pid=4304 comm="syz.0.197" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.570387][ T4296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.607089][ T4316] loop5: detected capacity change from 0 to 128 [ 76.609078][ T4296] EXT4-fs (loop3): 1 truncate cleaned up [ 76.614317][ T4316] vfat: Unknown parameter 'gԭaPp0p.{6' [ 76.645554][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.666563][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.673950][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.720635][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.731638][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.785440][ T3516] lo speed is unknown, defaulting to 1000 [ 76.805733][ T4300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.819930][ T3516] syz0: Port: 1 Link DOWN [ 76.840781][ T4309] syzkaller0: entered promiscuous mode [ 76.846345][ T4309] syzkaller0: entered allmulticast mode [ 76.863022][ T83] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.885548][ T83] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.907454][ T3516] lo speed is unknown, defaulting to 1000 [ 76.952166][ T3423] IPVS: starting estimator thread 0... [ 76.969425][ T4300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.009052][ T28] audit: type=1326 audit(1771344688.269:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.035081][ T4342] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 77.048145][ T83] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.055551][ T28] audit: type=1326 audit(1771344688.299:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.060324][ T4335] IPVS: using max 2304 ests per chain, 115200 per kthread [ 77.111156][ T83] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.209622][ T28] audit: type=1326 audit(1771344688.299:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.235355][ T4300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.270047][ T28] audit: type=1326 audit(1771344688.299:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.304022][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.319884][ T28] audit: type=1326 audit(1771344688.299:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.349513][ T28] audit: type=1326 audit(1771344688.299:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.354689][ T4351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.205'. [ 77.374037][ T28] audit: type=1326 audit(1771344688.299:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.427054][ T4349] loop2: detected capacity change from 0 to 2048 [ 77.433663][ T4351] unsupported nlmsg_type 40 [ 77.455837][ T28] audit: type=1326 audit(1771344688.299:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.486795][ T28] audit: type=1326 audit(1771344688.299:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efce639c629 code=0x7ffc0000 [ 77.515688][ T4349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.751809][ T4341] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 77.762951][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.791702][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.817360][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.864121][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.914627][ T4369] lo speed is unknown, defaulting to 1000 [ 77.951523][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 77.984002][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.074400][ T4381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.109407][ T4389] vlan2: entered promiscuous mode [ 78.115227][ T4389] batadv0: entered promiscuous mode [ 78.122394][ T4381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.066573][ T4411] infiniband !yz!: set active [ 79.086258][ T4411] infiniband !yz!: added team_slave_0 [ 79.120462][ T4421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4421 comm=syz.0.218 [ 79.134198][ T4411] RDS/IB: !yz!: added [ 79.142729][ T4411] smc: adding ib device !yz! with port count 1 [ 79.159280][ T4411] smc: ib device !yz! port 1 has no pnetid [ 80.745270][ T4439] tipc: Failed to obtain node identity [ 80.787752][ T4439] tipc: Enabling of bearer rejected, failed to enable media [ 81.379040][ T4434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.387911][ T4434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.698290][ T4449] loop3: detected capacity change from 0 to 128 [ 82.781776][ T4449] FAT-fs (loop3): Directory bread(block 32) failed [ 82.788518][ T4449] FAT-fs (loop3): Directory bread(block 33) failed [ 82.795533][ T4449] FAT-fs (loop3): Directory bread(block 34) failed [ 82.802297][ T4449] FAT-fs (loop3): Directory bread(block 35) failed [ 82.808962][ T4449] FAT-fs (loop3): Directory bread(block 36) failed [ 82.815645][ T4449] FAT-fs (loop3): Directory bread(block 37) failed [ 82.822293][ T4449] FAT-fs (loop3): Directory bread(block 38) failed [ 82.829007][ T4449] FAT-fs (loop3): Directory bread(block 39) failed [ 82.835880][ T4449] FAT-fs (loop3): Directory bread(block 40) failed [ 82.842747][ T4449] FAT-fs (loop3): Directory bread(block 41) failed [ 83.102971][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 83.102991][ T28] audit: type=1326 audit(1771344694.249:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d8cbc629 code=0x7ffc0000 [ 83.185579][ T28] audit: type=1326 audit(1771344694.249:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d8cbc629 code=0x7ffc0000 [ 83.232912][ T4458] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 83.268801][ T28] audit: type=1326 audit(1771344694.249:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f46d8cbc629 code=0x7ffc0000 [ 83.295795][ T4458] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 83.315352][ T4458] veth3: entered promiscuous mode [ 83.322041][ T4458] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 83.335525][ T4458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 83.345036][ T4458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.345832][ T3775] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 83.396422][ T28] audit: type=1326 audit(1771344694.259:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d8cbc629 code=0x7ffc0000 [ 83.499491][ T28] audit: type=1326 audit(1771344694.259:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d8cbc629 code=0x7ffc0000 [ 83.560107][ T2142] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 83.615973][ T4464] tipc: Enabled bearer , priority 0 [ 83.655533][ T4464] syzkaller0: entered promiscuous mode [ 83.723166][ T4467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.737008][ T4464] syzkaller0: entered allmulticast mode [ 84.099871][ T28] audit: type=1326 audit(1771344694.269:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46d8c7cece code=0x7ffc0000 [ 84.129299][ T4471] tipc: Resetting bearer [ 84.132258][ T28] audit: type=1400 audit(1771344694.269:403): avc: denied { read } for pid=4451 comm="syz.2.226" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.160466][ T4463] tipc: Resetting bearer [ 84.167228][ T4463] tipc: Disabling bearer [ 84.223527][ T28] audit: type=1400 audit(1771344694.269:404): avc: denied { open } for pid=4451 comm="syz.2.226" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.293918][ T28] audit: type=1326 audit(1771344694.279:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d8cbc629 code=0x7ffc0000 [ 84.343710][ T28] audit: type=1326 audit(1771344694.279:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d8cbc629 code=0x7ffc0000 [ 84.458477][ T4482] syzkaller0: entered promiscuous mode [ 84.469768][ T4482] syzkaller0: entered allmulticast mode [ 85.147525][ T4497] loop1: detected capacity change from 0 to 512 [ 85.180113][ T4497] EXT4-fs: Ignoring removed bh option [ 85.185569][ T4497] EXT4-fs: Ignoring removed oldalloc option [ 85.244306][ T4502] netlink: 'syz.3.239': attribute type 16 has an invalid length. [ 85.259874][ T4497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.283649][ T4502] netlink: 'syz.3.239': attribute type 17 has an invalid length. [ 85.330233][ T4497] EXT4-fs (loop1): 1 truncate cleaned up [ 85.373296][ T4497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.429689][ T4497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.469461][ T4502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.894280][ T4527] : port 1(gretap0) entered blocking state [ 85.908820][ T4527] : port 1(gretap0) entered disabled state [ 85.923289][ T4527] gretap0: entered allmulticast mode [ 85.937010][ T4527] gretap0: entered promiscuous mode [ 85.954190][ T4530] : port 2(veth0_to_team) entered blocking state [ 85.970055][ T4530] : port 2(veth0_to_team) entered disabled state [ 85.987173][ T4530] veth0_to_team: entered allmulticast mode [ 86.004238][ T4530] veth0_to_team: entered promiscuous mode [ 86.111854][ T4536] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 86.142728][ T4536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.190846][ T4536] bond2: (slave gretap1): making interface the new active one [ 86.223223][ T4536] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 86.251573][ T4543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4543 comm=syz.3.252 [ 86.334028][ T4549] netlink: 'syz.0.256': attribute type 2 has an invalid length. [ 86.350800][ T4549] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 86.373236][ T4549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.256'. [ 88.222478][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 88.222497][ T28] audit: type=1400 audit(1771344699.489:656): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.296946][ T28] audit: type=1400 audit(1771344699.549:657): avc: denied { prog_load } for pid=4604 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.375141][ T28] audit: type=1400 audit(1771344699.639:658): avc: denied { prog_load } for pid=4604 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.417589][ T28] audit: type=1400 audit(1771344699.659:659): avc: denied { open } for pid=4604 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 88.475225][ T28] audit: type=1400 audit(1771344699.669:660): avc: denied { create } for pid=4604 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 88.539963][ T28] audit: type=1400 audit(1771344699.679:661): avc: denied { create } for pid=4604 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 88.619828][ T28] audit: type=1400 audit(1771344699.769:662): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.656056][ T4615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4615 comm=syz.0.279 [ 88.673417][ T28] audit: type=1400 audit(1771344699.779:663): avc: denied { create } for pid=4608 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 88.713393][ T28] audit: type=1400 audit(1771344699.779:664): avc: denied { allowed } for pid=4608 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 88.772528][ T28] audit: type=1400 audit(1771344699.789:665): avc: denied { create } for pid=4608 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 88.888913][ T4624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.937523][ T4624] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.973210][ T4624] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 89.318099][ T4639] lo speed is unknown, defaulting to 1000 [ 89.920911][ T4662] netlink: 14 bytes leftover after parsing attributes in process `syz.1.297'. [ 89.973441][ T4662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.026500][ T4662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.058299][ T4662] bond0 (unregistering): Released all slaves [ 91.515027][ T4700] lo speed is unknown, defaulting to 1000 [ 91.813391][ T4685] ================================================================== [ 91.821630][ T4685] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 91.830286][ T4685] [ 91.832724][ T4685] write to 0xffff88811c059468 of 8 bytes by task 4682 on cpu 0: [ 91.840557][ T4685] shmem_file_splice_read+0x470/0x600 [ 91.845984][ T4685] splice_direct_to_actor+0x26e/0x670 [ 91.851416][ T4685] do_splice_direct+0x119/0x1a0 [ 91.856320][ T4685] do_sendfile+0x382/0x650 [ 91.860781][ T4685] __x64_sys_sendfile64+0x105/0x150 [ 91.866029][ T4685] x64_sys_call+0x2dc4/0x3020 [ 91.870747][ T4685] do_syscall_64+0x12c/0x370 [ 91.875434][ T4685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.881370][ T4685] [ 91.883724][ T4685] write to 0xffff88811c059468 of 8 bytes by task 4685 on cpu 1: [ 91.891476][ T4685] shmem_file_splice_read+0x470/0x600 [ 91.896899][ T4685] splice_direct_to_actor+0x26e/0x670 [ 91.902325][ T4685] do_splice_direct+0x119/0x1a0 [ 91.907223][ T4685] do_sendfile+0x382/0x650 [ 91.911679][ T4685] __x64_sys_sendfile64+0x105/0x150 [ 91.916908][ T4685] x64_sys_call+0x2dc4/0x3020 [ 91.921628][ T4685] do_syscall_64+0x12c/0x370 [ 91.926267][ T4685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.932192][ T4685] [ 91.934542][ T4685] value changed: 0x00000000000058b7 -> 0x00000000000058b8 [ 91.941679][ T4685] [ 91.944020][ T4685] Reported by Kernel Concurrency Sanitizer on: [ 91.950302][ T4685] CPU: 1 UID: 0 PID: 4685 Comm: syz.2.305 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.961190][ T4685] Tainted: [W]=WARN [ 91.965025][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.975114][ T4685] ==================================================================