last executing test programs: 8m3.828065708s ago: executing program 32 (id=336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a00010085"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 7m48.044935659s ago: executing program 33 (id=650): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m39.591710543s ago: executing program 34 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m21.794219231s ago: executing program 35 (id=1235): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 7m11.112403648s ago: executing program 36 (id=1516): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file2\x00', 0x0, 0x8}, 0x18) r0 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r0}, 0x1) 6m45.553753195s ago: executing program 37 (id=2052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 6m0.127953715s ago: executing program 38 (id=2935): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 5m57.195589606s ago: executing program 39 (id=2983): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffff7, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 5m47.43005181s ago: executing program 40 (id=3133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 5m39.132826338s ago: executing program 41 (id=3304): r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/nf_conntrack\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) 5m15.277282849s ago: executing program 42 (id=3782): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'lo\x00'}}, 0x1e) close(r1) 4m37.529603015s ago: executing program 43 (id=4524): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="b9f2973d", 0x4}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 4m33.31309169s ago: executing program 44 (id=4570): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x80000020000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsopen(0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004e900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 4m29.12987887s ago: executing program 45 (id=4617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 4m28.391861024s ago: executing program 46 (id=4624): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x56) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m18.273744157s ago: executing program 1 (id=4759): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 4m18.068904671s ago: executing program 1 (id=4764): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_channels={0x3c, 0x2, 0x6, 0x1, 0x7fff, 0x4, 0x6, 0x3, 0x3}}) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m17.978676586s ago: executing program 1 (id=4766): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ipvlan0\x00'}}, 0x1e) 4m17.887338901s ago: executing program 1 (id=4767): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m17.851155148s ago: executing program 1 (id=4768): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0x80049363, 0x0) 4m17.648963542s ago: executing program 1 (id=4770): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m17.647761032s ago: executing program 47 (id=4770): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m36.280283983s ago: executing program 8 (id=5413): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) 3m36.226147622s ago: executing program 8 (id=5414): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) r0 = getpgrp(0x0) gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x7, 0x98639, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x20, 0x0, 0x6251, 0xffbffffd, 0x0, 0x0, 0x2ff, 0x0, 0xffffffffffffffff}, r0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 3m36.145898985s ago: executing program 8 (id=5419): socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000080)=0x1, 0xff79) r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3m35.199573684s ago: executing program 8 (id=5448): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 3m35.140705434s ago: executing program 8 (id=5451): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) 3m34.753111488s ago: executing program 8 (id=5454): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 3m34.752963739s ago: executing program 48 (id=5454): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 3m14.684795786s ago: executing program 7 (id=5762): ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000100)={0x33, "5f7321454e6c5058d86742c683df9847f077d5b612ffc79c25e85a1cc72d17580acb7b0042e917348bacd8d43ac3ea81dd7f076e3a887c9ff8447186ab13fd1b6e90e8f0a9bb591b55e8f3eb083012805d13a9015139272cee7e927a9c33e7388c172f02e707c6d5a1708a8bfb56df94fa9dbdee1a18c470b912a3f783f36d4d"}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$eJzs3N9rHNUeAPDvbJJNe9vc7O291x/9YVerGPyRNGnVPgj+QKEvgqAP9TGmaalNG2ki2BJsFKmP0r+g+ij4F/ikL6KCoPiqj4IIRfLS2gcZmd2dZLPZjZs0m22Tzwe2OWfOzJxzZubMnjmnswFsW+XsnyRid0T8HBGD1ejyFcrVPzcX5ib+XJibSCJNX/sjqax3Y2FuIl81325XLTJUiCh8mMS+JvnOXLx0dnxqavJCLT4ye+7tkZmLl548c2789OTpyfNjx44dPTL6zNNjT21IPQeysu59b3r//cffuPrKxImrb377eVbe3bX0GwtzxeVblPLA3ohIG/f3fBt5lqO8/FjWeWRtxb/jDdSFk94uFoQ16YmI7HT1Vdr/YPTE0skbjJc/iCh0tXxA56RpmvavWJrdFXZmgfkU2MKS6HYJgO7Iv/Gz5/j8s8ldkK66/kL1ASir983ap5rSW3nyKZeqz0YDHcq/HAcj4ta1E/O3rkXDeAoAQCd8mfV/nmjW/yvEPXXr/bs2N1SKiP9ExJ6I+G9E/C8i/h9RWffeiLiv3YyT5lMjK/s/P+5cZ9XakvX/nq3NbS3v/y2Oe5d6arGBSv37klNnpiYP147JUPT1Z/HRVfL46qWfPm6VVo6IrO+Xf7L8875grRy/9zYM0J0cnx2/nTrXu34wYm9vs/onizMBSexY9/4HihFnHvtsf6v0f67/KjZgnin9NOLR6vmfj4b655LV5ydHdsTU5OGR/KpY6bsfrrzaKv/bqv8GuP5+xL+aXv+L9S8l9fO1M2vOovfKLx+1fKZZ7/VfTF6vhPNJ23fHZ2cvjEYUk/mVy8eWts3j+fpZ/YcONW//eyL++qS23b6IyC7iAxHxQETlqS0r+4MR8VBEHFrlAHzz4sNvZX+/X1f9Oyur/8k1nf/6QF80LmkW6Dn79Ret8m/v/B+thIZqS5buf2lPq/1WM8/vW60LeFsHDwAAAO4Shcr/gU+SiOq4ye66tGL2HD09M/v4qel3zp+sppWir5CPdA3WjYeO1saG8/hYQ/xIZdw4TdN0ZyU+PDE91ak5daA9u6rtvzC8eC8oFIaHq2m/NYyuPdeVEgIdtaZ5tFZvtAF3pfbav4YPW9Fi+1/5JmBO44ctqtr+ewa7XQ5g8/m9Fti+mrX/yxE3u1AUYJP5/oftS/uH7Wut7b/UoXIAm8/3P2xLy1+JL0Ybr/O3FdhzfGP2szUDkSwd+Z5ul6d/fZtH4Q45mPWBpElSYXHJgV/zH4YotL3n4oYULFZbpz8i2t3h5disg9ntOxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDG+DsAAP//KI/hOg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 3m14.078152188s ago: executing program 7 (id=5775): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x2) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 3m13.907328316s ago: executing program 7 (id=5779): r0 = inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r2 = epoll_create1(0x80000) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x80000001}) close_range(r0, 0xffffffffffffffff, 0x0) 3m13.46522621s ago: executing program 7 (id=5791): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0xb8944e, 0x0) 3m13.431916806s ago: executing program 7 (id=5793): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 3m13.34478347s ago: executing program 7 (id=5796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081}, 0x0) 3m13.34465124s ago: executing program 49 (id=5796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081}, 0x0) 1m57.795478141s ago: executing program 3 (id=6768): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0xb8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x8}}}, 0x11}, 0x1, 0x0, 0x0, 0x50801}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_enter(r1, 0x2219, 0x7721, 0x1c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) 1m56.926942886s ago: executing program 3 (id=6773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r5, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m56.72228572s ago: executing program 3 (id=6775): r0 = creat(0x0, 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m11.193532908s ago: executing program 0 (id=7120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0xc, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) rmdir(&(0x7f0000000080)='./file0\x00') 1m9.812997409s ago: executing program 0 (id=7124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000008c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m9.181112595s ago: executing program 0 (id=7130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff, 0xfff2}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m9.035021319s ago: executing program 51 (id=7130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff, 0xfff2}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.975003762s ago: executing program 4 (id=8020): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x2c, 0x0, "bb02a3c364ca41d6357e544524014004000b42a21d7214bf34a6324d6193fcf19b2df3ee818afaa4fb1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe0000000600"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0xf0, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x800}}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x81}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6}]}, @NFQA_PAYLOAD={0x9, 0xa, "22522c62a8"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x36}, @NFQA_EXP={0x64, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x20008000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 2.912975662s ago: executing program 4 (id=8021): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0xd34b, 0x114}, 0x10, 0x4}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) 2.410130567s ago: executing program 2 (id=8023): sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 2.312265793s ago: executing program 2 (id=8026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.275712299s ago: executing program 2 (id=8027): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x60000600) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) timer_create(0x0, 0x0, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) shutdown(r0, 0x1) listen(r0, 0xb) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20080058) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) 2.006445594s ago: executing program 4 (id=8032): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008090, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="3c90151cf72d0efae70f6c0078497590613f11180fdbac9b38b3bb22891f21c0d9ed177873d536ce659afcd2056939d574ec007fcc240018a6db59c00a5fc968d2411c740d7a2cee34045b702ae54d3ccafd0e94faa2c50de68b57458fb9b484d9398fa864c3ffd82b011c5712743e504af5fbf70dd96d371354"], 0x1, 0x11c3, &(0x7f0000001240)="$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") mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x300000f, 0x58030, 0xffffffffffffffff, 0x594b8000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001780)="f5", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x4c891) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 2.005673304s ago: executing program 5 (id=8034): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nouid32}]}, 0xff, 0x47b, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, 0x0, 0x141442, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 1.91279704s ago: executing program 5 (id=8036): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=@delsa={0x28, 0x11, 0x521, 0x70bd27, 0x25dfdbfb, {@in6=@private0, 0x4d2, 0x2, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.765012795s ago: executing program 2 (id=8037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x48}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041) 1.727591971s ago: executing program 2 (id=8038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.648438064s ago: executing program 2 (id=8039): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000002c0)={0x56ae, 0x7, 0x5, 0x14}) 1.592688353s ago: executing program 6 (id=8041): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) cachestat(r1, &(0x7f0000000040)={0x81, 0x20000000000006}, &(0x7f000009de80), 0x0) 1.400167585s ago: executing program 6 (id=8042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r1 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@multicast1}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) syz_open_dev$hidraw(0x0, 0x0, 0x81) preadv(0xffffffffffffffff, 0x0, 0x0, 0x180, 0x9) 1.31335249s ago: executing program 5 (id=8044): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect$uac1(0x1, 0x82, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x5, 0x20, 0xd2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x342b, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x7, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x10, 0xf9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xc5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x8}}}}}}}}]}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 981.075096ms ago: executing program 9 (id=8046): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) sendmmsg$inet(r2, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x48000) 737.096606ms ago: executing program 5 (id=8047): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 674.597507ms ago: executing program 9 (id=8048): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6) 614.937097ms ago: executing program 4 (id=8049): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@session={'session', 0x3d, 0x32}}, {@map_off}, {@map_acorn}, {@unhide}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20040014) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 572.485264ms ago: executing program 4 (id=8050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 571.785884ms ago: executing program 6 (id=8051): listen(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) readv(r2, &(0x7f0000000280), 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001040500000000003300000007000008080003400000005805000100010000009707c71fba8957746cfabd46207eb984e50200e863200e4051b0c393c09603415c5a686b69292ad399e51e2e210f57cfab5749dbc66fe4729c2ec44a52ba2bde25895143162827e65c40e64432"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='&'], 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x6000, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 469.077842ms ago: executing program 6 (id=8052): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 380.259416ms ago: executing program 4 (id=8053): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) capset(0x0, &(0x7f0000000080)={0x0, 0x1, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x3}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x10, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x7, 0x12d5a, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 371.579128ms ago: executing program 6 (id=8054): sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 308.983558ms ago: executing program 5 (id=8055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) poll(&(0x7f0000000140)=[{r0, 0x400}, {r2, 0x1}, {r0, 0x201}, {r0, 0x8480}, {r2, 0x4000}, {r2, 0x20}, {r1, 0x2000}], 0x7, 0x101) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 203.561546ms ago: executing program 9 (id=8056): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000840)='net\x00') syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 199.471346ms ago: executing program 6 (id=8057): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000000000000000007fbdbc14e20210"], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 104.926002ms ago: executing program 9 (id=8058): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xab, 0x44000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x4520, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) socketpair(0x25, 0x80000, 0x40, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x445a, 0x1c080, 0x0, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 76.782417ms ago: executing program 5 (id=8059): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x109111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x10000030, 0x0, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21.100796ms ago: executing program 9 (id=8060): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x20) socket$netlink(0x10, 0x3, 0x5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xa001, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getgid() open$dir(&(0x7f00000001c0)='./cgroup.net/devices.allow\x00', 0x40001, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 9 (id=8061): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = msgget$private(0x0, 0x790) msgsnd(r3, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): aves [ 418.155100][ T5718] bond1 (unregistering): Released all slaves [ 418.172325][ T5718] bond2 (unregistering): Released all slaves [ 418.192018][ T5718] bond3 (unregistering): (slave veth3): Releasing backup interface [ 418.212086][ T5718] veth3: left promiscuous mode [ 418.223996][ T5718] bond3 (unregistering): Released all slaves [ 418.241247][ T5718] bond4 (unregistering): (slave bond5): Releasing backup interface [ 418.258091][ T5718] bond4 (unregistering): Released all slaves [ 418.278058][ T5718] bond5 (unregistering): Released all slaves [ 418.413300][ T5718] hsr_slave_0: left promiscuous mode [ 418.429219][ T5718] hsr_slave_1: left promiscuous mode [ 418.442491][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.456868][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.468810][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.476329][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.493621][ T5718] veth1_macvtap: left promiscuous mode [ 418.499251][ T5718] veth0_macvtap: left promiscuous mode [ 418.504774][ T5718] veth1_vlan: left promiscuous mode [ 418.511120][ T5718] veth0_vlan: left promiscuous mode [ 418.773617][ T5718] team0 (unregistering): Port device team_slave_1 removed [ 418.827323][ T5718] team0 (unregistering): Port device team_slave_0 removed [ 419.244701][ T5715] net_ratelimit: 12 callbacks suppressed [ 419.244718][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 419.324661][T25862] netlink: 'syz.2.6819': attribute type 1 has an invalid length. [ 419.372524][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 419.424995][T25862] bond7: (slave bridge7): Enslaving as a backup interface with an up link [ 419.473932][T25862] macvlan2: entered promiscuous mode [ 419.479493][T25862] macvlan2: entered allmulticast mode [ 419.485908][T25862] bond7: entered promiscuous mode [ 419.492340][T25862] bridge7: entered promiscuous mode [ 419.498331][T25862] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.506262][T25862] bond7: left promiscuous mode [ 419.511777][T25862] bridge7: left promiscuous mode [ 419.535480][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 419.548042][T25752] chnl_net:caif_netlink_parms(): no params data found [ 419.563840][T25881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25881 comm=syz.6.6823 [ 419.565027][T25891] netlink: 'syz.9.6820': attribute type 3 has an invalid length. [ 419.587243][T25881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=25881 comm=syz.6.6823 [ 419.593979][T25891] netlink: 'syz.9.6820': attribute type 3 has an invalid length. [ 419.613046][ T5718] IPVS: stop unused estimator thread 0... [ 419.657351][T25902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6825'. [ 419.666573][T25902] netlink: 'syz.4.6825': attribute type 7 has an invalid length. [ 419.682336][T25902] netlink: 'syz.4.6825': attribute type 8 has an invalid length. [ 419.699854][T25902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6825'. [ 419.719163][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 419.719224][ T28] audit: type=1400 audit(1776611305.987:9101): avc: denied { bind } for pid=25907 comm="syz.6.6827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.730365][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6827'. [ 419.754000][T25752] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.782064][ T28] audit: type=1400 audit(1776611305.987:9102): avc: denied { setopt } for pid=25907 comm="syz.6.6827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.799449][T25752] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.811596][T25914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6826'. [ 419.833740][T25752] bridge_slave_0: entered allmulticast mode [ 419.842970][T25752] bridge_slave_0: entered promiscuous mode [ 419.851676][T25906] batadv_slave_0: entered promiscuous mode [ 419.865742][T25914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.878709][T25752] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.886083][T25752] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.894109][T25752] bridge_slave_1: entered allmulticast mode [ 419.902628][T25752] bridge_slave_1: entered promiscuous mode [ 419.949329][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 419.962947][T25752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.977731][T25905] batadv_slave_0: left promiscuous mode [ 419.988550][T25752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.074025][T25752] team0: Port device team_slave_0 added [ 420.097965][T25752] team0: Port device team_slave_1 added [ 420.166559][T25752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.187962][T25752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.243500][T25752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.277678][T25752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.301644][T25752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.336285][T25752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.399911][T25752] hsr_slave_0: entered promiscuous mode [ 420.406321][T25752] hsr_slave_1: entered promiscuous mode [ 420.412719][T25752] debugfs: 'hsr0' already exists in 'hsr' [ 420.418961][T25752] Cannot create hsr debugfs directory [ 420.460573][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 420.653300][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 420.767397][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 420.887429][ T5718] bond13: (slave batadv0): failed to get link speed/duplex [ 420.960375][T25752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.991627][T25752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.014466][T25752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.045959][T25752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.276682][T25752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.306745][T25752] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.334954][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.342099][ T5718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.400493][T26019] wg2: entered promiscuous mode [ 421.423647][T26019] wg2: entered allmulticast mode [ 421.488738][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.495876][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.566493][T25752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.587585][T25752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.617806][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 421.709606][T25752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.746983][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 421.832106][T25752] veth0_vlan: entered promiscuous mode [ 421.849488][T25752] veth1_vlan: entered promiscuous mode [ 421.874774][T25752] veth0_macvtap: entered promiscuous mode [ 421.899675][T25752] veth1_macvtap: entered promiscuous mode [ 421.914488][T25752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.928507][T25752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.947731][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.964776][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.979619][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.988557][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.029235][ T28] audit: type=1400 audit(1776611308.287:9103): avc: denied { mounton } for pid=25752 comm="syz-executor" path="/root/syzkaller.O9jdX5/syz-tmp" dev="sda1" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 422.074168][ T28] audit: type=1400 audit(1776611308.297:9104): avc: denied { mounton } for pid=25752 comm="syz-executor" path="/root/syzkaller.O9jdX5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 422.090946][T26091] loop9: detected capacity change from 0 to 512 [ 422.121859][T26092] loop0: detected capacity change from 0 to 512 [ 422.183982][T26091] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 422.191491][ T28] audit: type=1400 audit(1776611308.297:9105): avc: denied { mounton } for pid=25752 comm="syz-executor" path="/root/syzkaller.O9jdX5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=91551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 422.248773][T26091] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 422.263403][ T28] audit: type=1400 audit(1776611308.317:9106): avc: denied { mounton } for pid=25752 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 422.263438][ T28] audit: type=1400 audit(1776611308.317:9107): avc: denied { mount } for pid=25752 comm="syz-executor" name="/" dev="gadgetfs" ino=3979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 422.263488][ T28] audit: type=1400 audit(1776611308.417:9108): avc: denied { read } for pid=26088 comm="syz.2.6860" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 422.336844][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 422.343439][ C0] EXT4-fs (loop9): initial error at time 1776611308: ext4_mb_generate_buddy:1317 [ 422.352618][ C0] EXT4-fs (loop9): last error at time 1776611308: ext4_mb_generate_buddy:1317 [ 422.357152][T26091] Quota error (device loop9): write_blk: dquota write failed [ 422.429993][T26091] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 422.462280][T26091] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.6858: Failed to acquire dquot type 1 [ 422.478062][T26091] loop9: lost filesystem error report for type 5 error -28 [ 422.478389][T26091] EXT4-fs (loop9): 1 truncate cleaned up [ 422.496602][T26091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.608318][T26091] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.6858: Failed to acquire dquot type 1 [ 422.991043][T26148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6852'. [ 423.000658][T26148] IPVS: Unknown mcast interface: vcan0 [ 423.410056][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.483382][T26171] loop7: detected capacity change from 0 to 7 [ 423.713057][T26184] syzkaller0: entered promiscuous mode [ 423.749238][T26184] syzkaller0: entered allmulticast mode [ 423.958439][T26212] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6866'. [ 424.000586][T26212] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26212 comm=syz.9.6866 [ 424.369346][T26231] loop9: detected capacity change from 0 to 256 [ 425.223216][ T3441] net_ratelimit: 19 callbacks suppressed [ 425.223238][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 425.993117][T26231] FAT-fs (loop9): Directory bread(block 64) failed [ 426.000340][T26231] FAT-fs (loop9): Directory bread(block 65) failed [ 426.006993][T26231] FAT-fs (loop9): Directory bread(block 66) failed [ 426.013579][T26231] FAT-fs (loop9): Directory bread(block 67) failed [ 426.020244][T26231] FAT-fs (loop9): Directory bread(block 68) failed [ 426.026837][T26231] FAT-fs (loop9): Directory bread(block 69) failed [ 426.033811][T26231] FAT-fs (loop9): Directory bread(block 70) failed [ 426.040954][T26231] FAT-fs (loop9): Directory bread(block 71) failed [ 426.047697][T26231] FAT-fs (loop9): Directory bread(block 72) failed [ 426.054404][T26231] FAT-fs (loop9): Directory bread(block 73) failed [ 426.094266][T26231] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.104121][T26231] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.113471][T26231] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.122594][T26231] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.132286][T26231] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.141550][T26231] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.150861][T26231] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.160448][T26231] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6869'. [ 426.229069][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 426.517132][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 426.668000][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 426.786956][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 426.936955][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 427.046974][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 427.154581][T26254] loop9: detected capacity change from 0 to 8192 [ 427.178668][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 427.216896][ T3299] loop9: p1 p2 p3 p4 [ 427.222683][ T3299] loop9: p3 start 117772289 is beyond EOD, truncated [ 427.237489][ T3299] loop9: p4 size 720896 extends beyond EOD, truncated [ 427.249144][T26254] loop9: p1 p2 p3 p4 [ 427.257645][T26254] loop9: p3 start 117772289 is beyond EOD, truncated [ 427.264560][T26254] loop9: p4 size 720896 extends beyond EOD, truncated [ 427.307896][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 427.355646][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 427.356300][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 427.389358][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 427.432145][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 427.438421][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 427.449765][T26266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26266 comm=syz.2.6878 [ 427.452112][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 427.474779][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 427.963273][T26269] loop9: detected capacity change from 0 to 1024 [ 428.048060][T26269] EXT4-fs: Ignoring removed orlov option [ 428.394380][T26269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.580799][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.094686][T26328] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 429.963990][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 429.964011][ T28] audit: type=1400 audit(1776611316.127:9111): avc: denied { create } for pid=26340 comm="syz.0.6899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 429.990537][ T28] audit: type=1400 audit(1776611316.137:9112): avc: denied { write } for pid=26340 comm="syz.0.6899" path="socket:[90772]" dev="sockfs" ino=90772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 430.131145][T26347] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 430.145681][T26351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26351 comm=syz.4.6901 [ 430.286866][ T5715] net_ratelimit: 23 callbacks suppressed [ 430.286887][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 430.416922][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 430.526900][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 430.647447][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 430.757005][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 430.866891][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 430.987065][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 431.003979][T26374] loop9: detected capacity change from 0 to 4096 [ 431.018709][T26374] EXT4-fs: Ignoring removed bh option [ 431.024137][T26374] ext4: Unknown parameter 'fsuuid' [ 431.107674][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 431.191614][T26374] loop9: detected capacity change from 0 to 512 [ 431.226888][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 431.244284][T26374] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 431.357526][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 432.170498][T26404] loop0: detected capacity change from 0 to 512 [ 432.192271][T26404] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.394707][T26404] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 432.416836][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 432.423311][ C1] EXT4-fs (loop0): initial error at time 1776611318: ext4_mb_generate_buddy:1317 [ 432.432677][ C1] EXT4-fs (loop0): last error at time 1776611318: ext4_mb_generate_buddy:1317 [ 432.509528][T26404] Quota error (device loop0): write_blk: dquota write failed [ 432.590930][T26404] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 432.653870][T26404] Quota error (device loop0): write_blk: dquota write failed [ 432.765329][T26404] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 432.796948][T26404] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.6916: Failed to acquire dquot type 1 [ 432.863129][T26404] loop0: lost filesystem error report for type 5 error -28 [ 432.863441][T26404] EXT4-fs (loop0): 1 truncate cleaned up [ 432.897277][T26404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.937781][T26404] Quota error (device loop0): write_blk: dquota write failed [ 432.945938][T26404] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 432.977040][T26404] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.6916: Failed to acquire dquot type 1 [ 433.094214][T26435] __nla_validate_parse: 22 callbacks suppressed [ 433.094234][T26435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6919'. [ 433.098308][ T28] audit: type=1400 audit(1776611319.357:9113): avc: denied { kexec_image_load } for pid=26430 comm="syz.6.6930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 433.209674][T26435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26435 comm=syz.4.6919 [ 433.798937][T25752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.234635][T26483] loop0: detected capacity change from 0 to 8192 [ 434.417126][ T3573] loop0: p1 p2 p3 p4 [ 434.459358][ T3573] loop0: p3 start 117772289 is beyond EOD, truncated [ 434.495244][ T3573] loop0: p4 size 720896 extends beyond EOD, truncated [ 434.985795][T26483] loop0: p1 p2 p3 p4 [ 435.012341][T26483] loop0: p3 start 117772289 is beyond EOD, truncated [ 435.031102][T26433] kexec: Could not allocate control_code_buffer [ 435.037557][T26483] loop0: p4 size 720896 extends beyond EOD, truncated [ 435.265668][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 435.299699][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 435.310480][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 435.320521][T18989] net_ratelimit: 31 callbacks suppressed [ 435.320539][T18989] bond13: (slave batadv0): failed to get link speed/duplex [ 435.346523][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 435.348202][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 435.367003][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 435.467428][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 435.598938][T18989] bond13: (slave batadv0): failed to get link speed/duplex [ 435.716898][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 435.916912][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 436.047728][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 436.166708][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 436.570151][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 436.756912][ T5718] bond13: (slave batadv0): failed to get link speed/duplex [ 436.866924][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 437.035150][T26568] syzkaller0: entered promiscuous mode [ 437.060733][T26568] syzkaller0: entered allmulticast mode [ 437.100023][T26568] tipc: Started in network mode [ 437.120426][T26568] tipc: Node identity 8afd1bf98364, cluster identity 4711 [ 437.130402][T26568] tipc: Enabled bearer , priority 0 [ 437.142832][T26567] tipc: Resetting bearer [ 437.188591][T26567] tipc: Disabling bearer [ 437.796576][T26584] tipc: Failed to remove unknown binding: 66,2,2/0:1586728353/1586728357 [ 438.204777][T26589] loop0: detected capacity change from 0 to 128 [ 438.283012][T26589] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 438.485201][T26589] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 438.633424][T26589] FAT-fs (loop0): Filesystem has been set read-only [ 438.667927][T26589] syz.0.6965: attempt to access beyond end of device [ 438.667927][T26589] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.024825][T26605] tipc: Enabling of bearer rejected, failed to enable media [ 439.398119][ T28] audit: type=1400 audit(1776611325.667:9114): avc: denied { read } for pid=26617 comm="syz.0.6975" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 439.421281][ T28] audit: type=1400 audit(1776611325.667:9115): avc: denied { open } for pid=26617 comm="syz.0.6975" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 440.063021][T26625] loop0: detected capacity change from 0 to 512 [ 440.119207][T26625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.166933][T26625] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.348741][T25752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.358012][ T3441] net_ratelimit: 27 callbacks suppressed [ 440.358029][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 440.449374][ T28] audit: type=1326 audit(1776611326.717:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.507523][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 440.546109][ T28] audit: type=1326 audit(1776611326.737:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.586017][ T28] audit: type=1326 audit(1776611326.737:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.617000][ T28] audit: type=1326 audit(1776611326.747:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.648656][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 440.656082][ T28] audit: type=1326 audit(1776611326.747:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.680719][ T28] audit: type=1326 audit(1776611326.747:9121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.705215][ T28] audit: type=1326 audit(1776611326.747:9122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.730977][ T28] audit: type=1326 audit(1776611326.747:9123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.0.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb1024dc819 code=0x7ffc0000 [ 440.782844][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 440.929230][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 441.095233][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.104961][T26648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.114516][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.123685][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.133360][T26648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.142760][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.151875][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.161535][T26648] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.170903][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.180116][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 441.536666][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 441.855156][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 442.414031][T26644] loop9: detected capacity change from 0 to 128 [ 442.497205][T26644] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 443.011878][T26664] wg2: left promiscuous mode [ 443.017475][T26664] ip6gre1: left promiscuous mode [ 443.022500][T26664] geneve3: left promiscuous mode [ 443.027553][T26664] gtp3: left promiscuous mode [ 443.032445][T26664] bond8: left promiscuous mode [ 443.037779][T26664] ip6gre2: left promiscuous mode [ 443.043059][T26664] macvlan2: left promiscuous mode [ 443.048243][T26664] macsec1: left promiscuous mode [ 443.053467][T26664] bond12: left promiscuous mode [ 443.058388][T26664] bridge5: left promiscuous mode [ 443.099141][T26643] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 443.134600][ T50] bond13: (slave batadv0): link status up again after 0 ms [ 443.134624][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 443.184350][T26643] FAT-fs (loop9): Filesystem has been set read-only [ 443.184530][T26643] syz.9.6983: attempt to access beyond end of device [ 443.184530][T26643] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 443.236922][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 444.466961][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 444.466978][ T28] audit: type=1326 audit(1776611330.687:9161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.546289][ T28] audit: type=1326 audit(1776611330.687:9162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.593743][ T28] audit: type=1326 audit(1776611330.687:9163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.642889][ T28] audit: type=1326 audit(1776611330.687:9164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.787008][ T28] audit: type=1326 audit(1776611330.697:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.811976][ T28] audit: type=1326 audit(1776611330.697:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.857196][ T28] audit: type=1326 audit(1776611330.697:9167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.888756][ T28] audit: type=1326 audit(1776611330.697:9168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.912495][ T28] audit: type=1326 audit(1776611330.697:9169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 444.936752][ T28] audit: type=1326 audit(1776611330.697:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26708 comm="syz.9.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7587c819 code=0x7ffc0000 [ 445.390605][ T50] net_ratelimit: 16 callbacks suppressed [ 445.390627][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 445.507565][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 445.616862][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 445.727694][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 445.836870][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 445.854945][T26758] loop0: detected capacity change from 0 to 4096 [ 445.941868][T26758] EXT4-fs: Ignoring removed bh option [ 445.962279][T26758] ext4: Unknown parameter 'fsuuid' [ 446.115161][T26766] loop0: detected capacity change from 0 to 512 [ 446.132071][T26766] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 446.156964][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 446.178945][T26759] bond2: entered promiscuous mode [ 446.191972][T26759] bond2: entered allmulticast mode [ 446.282277][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 446.321317][T26768] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.328804][T26768] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.431955][T26774] loop9: detected capacity change from 0 to 512 [ 446.446876][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 446.483736][T26774] EXT4-fs: Ignoring removed nobh option [ 446.519017][T26774] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 446.579890][T26774] EXT4-fs (loop9): 1 truncate cleaned up [ 446.587750][ T3441] bond13: (slave batadv0): failed to get link speed/duplex [ 446.616308][T26774] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.777488][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 447.435307][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.936671][T26816] __nla_validate_parse: 22 callbacks suppressed [ 447.936691][T26816] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7037'. [ 448.043766][T26816] 8021q: adding VLAN 0 to HW filter on device bond4 [ 448.090947][T26816] bond4 (unregistering): Released all slaves [ 449.262128][T26850] loop0: detected capacity change from 0 to 512 [ 449.287313][T26850] EXT4-fs: Ignoring removed nobh option [ 449.379063][T26850] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #3: comm syz.0.7048: corrupted inode contents [ 449.408165][T26850] fserror_report: 1 callbacks suppressed [ 449.408184][T26850] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 449.422373][T26850] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #3: comm syz.0.7048: mark_inode_dirty error [ 449.431640][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 449.431661][ C1] EXT4-fs (loop0): initial error at time 1776611335: ext4_do_update_inode:5602: inode 3 [ 449.431689][ C1] EXT4-fs (loop0): last error at time 1776611335: ext4_do_update_inode:5602: inode 3 [ 449.469463][T26850] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 449.470166][T26850] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #3: comm syz.0.7048: corrupted inode contents [ 449.537556][T26850] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 449.537774][T26850] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.7048: mark_inode_dirty error [ 449.600238][T26850] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 449.600461][T26850] __quota_error: 199 callbacks suppressed [ 449.600478][T26850] Quota error (device loop0): write_blk: dquota write failed [ 449.625570][T26850] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 449.636017][T26850] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.7048: Failed to acquire dquot type 0 [ 449.648252][T26850] loop0: lost filesystem error report for type 5 error -117 [ 449.648848][T26850] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.7048: corrupted inode contents [ 449.668719][T26850] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 449.668920][T26850] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #16: comm syz.0.7048: mark_inode_dirty error [ 449.707229][T26850] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 449.707426][T26850] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.7048: corrupted inode contents [ 449.742000][T26850] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 449.742363][T26850] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.7048: mark_inode_dirty error [ 449.773867][T26850] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 449.774113][T26850] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.7048: corrupted inode contents [ 449.806766][T26850] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 449.807570][T26850] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 449.835567][T26850] loop0: lost filesystem error report for type 5 error -117 [ 449.835884][T26850] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.7048: corrupted inode contents [ 449.885471][T26850] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 449.885718][T26850] EXT4-fs error (device loop0): ext4_truncate:4602: inode #16: comm syz.0.7048: mark_inode_dirty error [ 449.906697][T26850] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 449.916638][T26850] loop0: lost filesystem error report for type 5 error -117 [ 449.917063][T26850] EXT4-fs (loop0): 1 truncate cleaned up [ 449.954279][T26850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.969731][T26850] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.051931][T25752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.083182][T26855] delete_channel: no stack [ 450.477225][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.486346][T26870] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.495851][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.505244][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.514284][T26870] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.523601][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.532693][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.541950][T26870] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.551267][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7052'. [ 450.783921][ T5713] net_ratelimit: 26 callbacks suppressed [ 450.783940][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 451.217777][T18989] bond13: (slave batadv0): failed to get link speed/duplex [ 451.326989][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 451.436912][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 451.546901][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 451.687082][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 451.807000][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 451.926868][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 452.036875][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 452.158954][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 452.514672][T26896] netlink: 'syz.2.7063': attribute type 1 has an invalid length. [ 452.522920][T26896] netlink: 'syz.2.7063': attribute type 2 has an invalid length. [ 453.399707][T26913] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.412511][T26913] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.459424][T26913] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.481930][T26913] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.634345][T26922] syzkaller0: entered promiscuous mode [ 453.647561][T26922] syzkaller0: entered allmulticast mode [ 453.664682][T26913] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.692683][T26913] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.848765][T26913] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.876093][T26913] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.894347][T26939] __nla_validate_parse: 23 callbacks suppressed [ 453.894364][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7079'. [ 453.918222][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7079'. [ 453.961240][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7079'. [ 453.982835][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7079'. [ 454.012906][T26945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=26945 comm=syz.2.7079 [ 454.060687][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7079'. [ 454.137158][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7079'. [ 454.359336][ T30] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.373650][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.382365][ T30] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.390898][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.418922][ T30] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.429170][T26943] loop9: detected capacity change from 0 to 1024 [ 454.452629][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.470230][ T30] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.494116][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.540802][T26943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 454.550735][T26943] System zones: 0-1, 3-36 [ 454.686853][T26943] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.7081: bad orphan inode 134217728 [ 454.699292][T26943] loop9: lost filesystem error report for type 5 error -117 [ 454.724480][T26943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.836920][ T28] audit: type=1326 audit(1776611341.077:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837016][ T28] audit: type=1326 audit(1776611341.077:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837124][ T28] audit: type=1326 audit(1776611341.077:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837154][ T28] audit: type=1326 audit(1776611341.077:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837183][ T28] audit: type=1326 audit(1776611341.077:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837212][ T28] audit: type=1326 audit(1776611341.087:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837291][ T28] audit: type=1326 audit(1776611341.087:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837318][ T28] audit: type=1326 audit(1776611341.087:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837387][ T28] audit: type=1326 audit(1776611341.087:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 454.837417][ T28] audit: type=1326 audit(1776611341.087:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9ea347c819 code=0x7ffc0000 [ 455.338752][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.827133][ T30] net_ratelimit: 16 callbacks suppressed [ 455.827153][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 455.997502][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 456.106856][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 456.226879][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 456.243959][T26979] netlink: 'syz.4.7100': attribute type 12 has an invalid length. [ 456.357540][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 456.486966][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 456.607464][ T5713] bond13: (slave batadv0): failed to get link speed/duplex [ 456.716896][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 456.859010][ T5715] bond13: (slave batadv0): failed to get link speed/duplex [ 457.007661][ T50] bond13: (slave batadv0): failed to get link speed/duplex [ 457.369560][T27005] loop0: detected capacity change from 0 to 512 [ 457.474200][T27005] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 457.582483][T27005] EXT4-fs (loop0): 1 truncate cleaned up [ 457.708353][T27020] loop9: detected capacity change from 0 to 128 [ 457.710328][T27005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.737402][T27020] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.737635][T27020] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 458.589563][T25752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.752403][T27041] netlink: 'syz.0.7106': attribute type 12 has an invalid length. [ 458.842057][T21553] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.552313][T27086] loop0: detected capacity change from 0 to 512 [ 460.663502][T27086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 460.679105][T27086] EXT4-fs (loop0): 1 truncate cleaned up [ 460.685392][T27086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.877241][ T5718] net_ratelimit: 31 callbacks suppressed [ 460.877300][ T5718] bond13: (slave batadv0): failed to get link speed/duplex [ 460.997706][ T30] bond13: (slave batadv0): failed to get link speed/duplex [ 461.249208][ T5718] bond13: (slave batadv0): failed to get link speed/duplex [ 461.672831][ T5718] bond13: (slave batadv0): failed to get link speed/duplex [ 461.707494][T27100] netlink: 'syz.9.7123': attribute type 12 has an invalid length. [ 461.916918][ T113] bond13: (slave batadv0): failed to get link speed/duplex [ 462.084777][T26477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.267569][ T7095] bond13: (slave batadv0): failed to get link speed/duplex [ 463.048789][T27124] ipt_REJECT: TCP_RESET invalid for non-tcp [ 463.275886][T27131] netlink: 'syz.6.7136': attribute type 10 has an invalid length. [ 463.296195][T27108] wg2: left promiscuous mode [ 463.301439][T27108] wg2: left allmulticast mode [ 463.476408][T27108] batadv_slave_0: left promiscuous mode [ 463.503407][T27108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.946629][T27108] bond1: left promiscuous mode [ 463.951580][T27108] bridge4: left promiscuous mode [ 464.002968][T27108] vlan3: left promiscuous mode [ 464.012150][T27108] bridge0: left promiscuous mode [ 464.060231][T27108] xfrm1: left promiscuous mode [ 464.070807][T27108] xfrm1: left allmulticast mode [ 464.088409][T27108] vlan0: left allmulticast mode [ 464.093328][T27108] bond7: left allmulticast mode [ 464.099072][T27108] geneve2: left allmulticast mode [ 464.118078][T27108] vlan4: left allmulticast mode [ 464.122990][T27108] bond8: left allmulticast mode [ 464.134586][T27108] geneve3: left allmulticast mode [ 464.147692][ T113] bond13: (slave batadv0): failed to get link speed/duplex [ 464.165057][ T7095] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.173884][ T7095] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.190239][ T7095] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.213821][ T7095] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.222947][ T7095] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.231762][ T7095] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.241768][ T7095] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.251352][ T7095] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.416895][ T5718] bond13: (slave batadv0): failed to get link speed/duplex [ 465.300111][T27110] team0: Port device netdevsim1 removed [ 465.406423][T27120] chnl_net:caif_netlink_parms(): no params data found [ 466.016927][ T113] bond13: (slave batadv0): failed to get link speed/duplex [ 466.035260][T27120] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.043070][T27120] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.050501][T27120] bridge_slave_0: entered allmulticast mode [ 466.057573][T27120] bridge_slave_0: entered promiscuous mode [ 466.080577][T27120] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.100202][T27120] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.114714][T27120] bridge_slave_1: entered allmulticast mode [ 466.121940][T27120] bridge_slave_1: entered promiscuous mode [ 466.122625][ T28] kauditd_printk_skb: 206 callbacks suppressed [ 466.122639][ T28] audit: type=1400 audit(1776611352.387:9586): avc: denied { read } for pid=27167 comm="syz.9.7146" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 466.141410][T27120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.178419][T27120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.215068][T27120] team0: Port device team_slave_0 added [ 466.222124][T27120] team0: Port device team_slave_1 added [ 466.238414][T27120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.245486][T27120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.273852][T27120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.287106][T27120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.294171][T27120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.321759][T27120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.332841][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 466.345260][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 466.359683][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 466.369187][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 466.384265][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 466.401649][T27173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=27173 comm=syz.6.7148 [ 466.403063][T27120] hsr_slave_0: entered promiscuous mode [ 466.420785][T27120] hsr_slave_1: entered promiscuous mode [ 466.426720][T27120] debugfs: 'hsr0' already exists in 'hsr' [ 466.432912][T27120] Cannot create hsr debugfs directory [ 466.438408][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 466.479055][ T7095] bond13: (slave batadv0): failed to get link speed/duplex [ 466.560669][T27186] wg2: left allmulticast mode [ 466.566223][T27186] veth0_vlan: left allmulticast mode [ 466.572178][T27186] ip6gre1: left allmulticast mode [ 466.578758][T27186] gretap1: left allmulticast mode [ 466.584306][T27186] macsec1: left allmulticast mode [ 466.605684][T27186] bond14: left allmulticast mode [ 466.839317][T27120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 466.851132][T27120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 466.863709][T27120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 466.881462][T27120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 466.972306][T27120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.987607][T27120] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.998363][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.005452][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.095833][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.102957][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.279137][T27241] loop9: detected capacity change from 0 to 512 [ 467.404742][T27120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.429803][T27241] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.445904][T27120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.471269][ T28] audit: type=1400 audit(1776611353.737:9587): avc: denied { ioctl } for pid=27240 comm="syz.9.7154" path="/305/file0/blkio.bfq.group_wait_time" dev="loop9" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 467.549871][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.578187][T27259] netlink: 'syz.2.7165': attribute type 3 has an invalid length. [ 467.586095][T27259] netlink: 'syz.2.7165': attribute type 3 has an invalid length. [ 467.763840][T27120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.090711][T27120] veth0_vlan: entered promiscuous mode [ 468.162629][T27120] veth1_vlan: entered promiscuous mode [ 468.205178][T27120] veth0_macvtap: entered promiscuous mode [ 468.218123][T27120] veth1_macvtap: entered promiscuous mode [ 468.240649][T27120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.253633][T27120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.268583][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.298055][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.310602][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.341308][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.797430][ T28] audit: type=1400 audit(1776611354.647:9588): avc: denied { write } for pid=27120 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 468.849175][ T28] audit: type=1400 audit(1776611354.647:9589): avc: denied { open } for pid=27120 comm="syz-executor" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 468.918514][T27379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7168'. [ 468.927792][T27379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7168'. [ 469.018015][T27378] loop9: detected capacity change from 0 to 512 [ 469.045104][T27378] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 469.075119][T27378] EXT4-fs (loop9): 1 truncate cleaned up [ 469.089706][T27378] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.197854][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.610967][T27402] wg2: entered promiscuous mode [ 469.617010][T27402] wg2: entered allmulticast mode [ 470.309112][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7162'. [ 470.318971][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7162'. [ 470.378321][T27434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=27434 comm=syz.4.7162 [ 471.579820][T27425] loop5: detected capacity change from 0 to 1024 [ 471.739500][T27425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 471.751393][T27425] System zones: 0-1, 3-36 [ 471.801395][T27425] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.7157: bad orphan inode 134217728 [ 471.815148][T27425] loop5: lost filesystem error report for type 5 error -117 [ 471.823710][T27425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.150985][T27120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.179942][T27458] netlink: 'syz.6.7185': attribute type 2 has an invalid length. [ 472.233637][T27458] __nla_validate_parse: 3 callbacks suppressed [ 472.233658][T27458] netlink: 199792 bytes leftover after parsing attributes in process `syz.6.7185'. [ 472.540203][T27464] loop5: detected capacity change from 0 to 512 [ 472.652893][T27464] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 472.703736][T27464] EXT4-fs (loop5): 1 truncate cleaned up [ 472.763167][T27464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.898051][T27120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.916387][T27470] netlink: 'syz.9.7189': attribute type 13 has an invalid length. [ 472.995941][T27470] netlink: 84 bytes leftover after parsing attributes in process `syz.9.7189'. [ 473.315064][T27484] loop9: detected capacity change from 0 to 128 [ 473.793712][T27499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7181'. [ 473.835679][T27499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7181'. [ 473.892374][ T28] audit: type=1400 audit(1776611360.157:9590): avc: denied { sqpoll } for pid=27501 comm="syz.6.7183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 473.938566][ T28] audit: type=1400 audit(1776611360.157:9591): avc: denied { setopt } for pid=27498 comm="syz.4.7182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 474.445881][T27517] loop9: detected capacity change from 0 to 512 [ 474.504086][T27517] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 474.709111][T27536] wg2: entered promiscuous mode [ 474.716348][T27536] wg2: entered allmulticast mode [ 474.741357][T27517] EXT4-fs (loop9): 1 truncate cleaned up [ 474.755180][T27543] netlink: 'syz.2.7195': attribute type 2 has an invalid length. [ 474.755202][T27543] netlink: 199792 bytes leftover after parsing attributes in process `syz.2.7195'. [ 474.815834][T27517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.879123][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.287796][ T28] audit: type=1400 audit(1776611361.547:9592): avc: denied { map } for pid=27551 comm="syz.5.7201" path="socket:[94919]" dev="sockfs" ino=94919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 475.640127][ T28] audit: type=1400 audit(1776611361.557:9593): avc: denied { read accept } for pid=27551 comm="syz.5.7201" path="socket:[94919]" dev="sockfs" ino=94919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 475.998484][T27578] syzkaller0: entered promiscuous mode [ 476.004152][T27578] syzkaller0: entered allmulticast mode [ 476.284785][T27585] netlink: 'syz.2.7208': attribute type 13 has an invalid length. [ 476.498154][ T28] audit: type=1400 audit(1776611362.757:9594): avc: denied { write } for pid=27600 comm="syz.9.7214" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 476.703167][T27591] loop5: detected capacity change from 0 to 512 [ 477.777636][T27591] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 478.536410][T27591] EXT4-fs (loop5): 1 truncate cleaned up [ 478.585965][T27591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.764010][T27120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.983261][T27660] loop9: detected capacity change from 0 to 512 [ 479.056186][T27660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.056937][T27654] loop5: detected capacity change from 0 to 1024 [ 479.100129][T27660] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.156157][T27654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 479.167474][T27654] System zones: 0-1, 3-36 [ 479.192859][T27654] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.7224: bad orphan inode 134217728 [ 479.204988][T27654] loop5: lost filesystem error report for type 5 error -117 [ 479.206979][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 479.221841][ C0] EXT4-fs (loop5): initial error at time 1776611365: ext4_orphan_get:1423 [ 479.231575][ C0] EXT4-fs (loop5): last error at time 1776611365: ext4_orphan_get:1423 [ 479.394476][T27654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.549171][T21553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.698053][T27676] tipc: Failed to remove unknown binding: 66,0,0/0:475921272/475921273 [ 479.718880][T27676] tipc: Failed to remove unknown binding: 66,0,0/0:475921272/475921273 [ 480.043536][T27120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.291453][T27688] loop5: detected capacity change from 0 to 1024 [ 480.337231][T27688] EXT4-fs: Ignoring removed i_version option [ 480.343359][T27688] EXT4-fs: Ignoring removed bh option [ 480.371321][T27688] ext4: Unknown parameter 'noacl' [ 480.488367][ T7869] IPVS: starting estimator thread 0... [ 480.506054][T27690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7238'. [ 480.587409][T27694] IPVS: using max 2832 ests per chain, 141600 per kthread [ 480.700414][ T7869] IPVS: starting estimator thread 0... [ 480.706432][T27705] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 480.799828][T27708] IPVS: using max 2784 ests per chain, 139200 per kthread [ 481.101658][T27712] loop5: detected capacity change from 0 to 1024 [ 481.177979][T27712] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 481.189537][T27712] System zones: 0-1, 3-36 [ 481.222632][T27712] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.7245: bad orphan inode 134217728 [ 481.236079][T27712] loop5: lost filesystem error report for type 5 error -117 [ 481.292124][T27712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.665605][T27120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.814483][T27727] loop9: detected capacity change from 0 to 128 [ 482.618621][ T28] audit: type=1400 audit(1776611368.887:9595): avc: denied { watch watch_reads } for pid=27740 comm="syz.9.7261" path="/proc/850" dev="proc" ino=95552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 483.069142][T27739] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.076431][T27739] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.124356][T27739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.135481][T27739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.264549][ T5713] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.284093][ T5713] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.295306][ T5713] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.333093][ T5713] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.414369][T27777] netlink: 'syz.9.7263': attribute type 13 has an invalid length. [ 483.599388][T27777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.614982][T27777] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.694091][T27777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.875099][ T28] audit: type=1404 audit(1776611371.137:9596): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 485.008537][ T113] bridge_slave_1: left allmulticast mode [ 485.014332][ T113] bridge_slave_1: left promiscuous mode [ 485.024871][ T28] audit: type=1400 audit(1776611371.287:9597): avc: denied { execute } for pid=27791 comm="syz.5.7268" dev="tmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 485.032534][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.086840][ T28] audit: type=1400 audit(1776611371.337:9598): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 485.115339][ T28] audit: type=1400 audit(1776611371.377:9599): avc: denied { read write } for pid=27798 comm="syz.5.7271" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 485.148198][ T113] bridge_slave_0: left allmulticast mode [ 485.156912][ T113] bridge_slave_0: left promiscuous mode [ 485.164166][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.355688][ T28] audit: type=1400 audit(1776611371.517:9600): avc: denied { create } for pid=27798 comm="syz.5.7271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 485.377352][ T28] audit: type=1400 audit(1776611371.597:9601): avc: denied { read write } for pid=21553 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 485.478481][ T113] bond0 (unregistering): Released all slaves [ 485.559706][ T113] hsr_slave_0: left promiscuous mode [ 485.565683][ T113] hsr_slave_1: left promiscuous mode [ 485.572404][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.586743][ T28] audit: type=1400 audit(1776611371.847:9602): avc: denied { create } for pid=27796 comm="syz.2.7270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 485.617111][ T113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.637576][ T28] audit: type=1400 audit(1776611371.847:9603): avc: denied { create } for pid=27796 comm="syz.2.7270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 485.703339][ T113] veth1_macvtap: left promiscuous mode [ 485.717353][ T113] veth0_macvtap: left promiscuous mode [ 485.723018][ T113] veth1_vlan: left promiscuous mode [ 485.731962][ T28] audit: type=1400 audit(1776611371.997:9604): avc: denied { create } for pid=27805 comm="syz.6.7272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 486.317250][ T113] team0 (unregistering): Port device team_slave_1 removed [ 486.327621][ T113] team0 (unregistering): Port device team_slave_0 removed [ 486.706025][T27854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 486.814739][T27874] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7302'. [ 486.835841][T27874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27874 comm=syz.9.7302 [ 486.953640][T27894] netlink: 'syz.9.7310': attribute type 4 has an invalid length. [ 487.692051][ T28] kauditd_printk_skb: 283 callbacks suppressed [ 487.692072][ T28] audit: type=1400 audit(1776611373.957:9888): avc: denied { name_bind } for pid=27944 comm="syz.2.7329" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 487.752713][ T28] audit: type=1400 audit(1776611373.987:9889): avc: denied { name_bind } for pid=27944 comm="syz.2.7329" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 487.819598][ T28] audit: type=1400 audit(1776611373.987:9890): avc: denied { name_bind } for pid=27944 comm="syz.2.7329" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 487.841449][ T28] audit: type=1400 audit(1776611374.007:9891): avc: denied { execmem } for pid=27947 comm="syz.2.7330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 487.861430][ T28] audit: type=1400 audit(1776611374.007:9892): avc: denied { create } for pid=27947 comm="syz.2.7330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 487.882709][ T28] audit: type=1400 audit(1776611374.047:9893): avc: denied { create } for pid=27943 comm="syz.6.7328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 487.920837][ T28] audit: type=1400 audit(1776611374.057:9894): avc: denied { mounton } for pid=27943 comm="syz.6.7328" path="/1413/file0" dev="tmpfs" ino=7336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 487.944129][ T28] audit: type=1400 audit(1776611374.077:9895): avc: denied { create } for pid=27947 comm="syz.2.7330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 487.967519][T27954] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7331'. [ 487.977106][T27954] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7331'. [ 488.071563][ T28] audit: type=1400 audit(1776611374.337:9896): avc: denied { create } for pid=27955 comm="syz.2.7332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 488.092883][ T28] audit: type=1400 audit(1776611374.337:9897): avc: denied { create } for pid=27955 comm="syz.2.7332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 488.312458][T27975] syzkaller0: entered promiscuous mode [ 488.318398][T27975] syzkaller0: entered allmulticast mode [ 488.434496][T27992] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7348'. [ 488.453135][T27992] geneve2: entered promiscuous mode [ 488.462823][ T5718] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.472108][ T5718] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.481170][ T5718] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.490497][ T5718] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.491820][T27998] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7350'. [ 488.519270][T27998] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7350'. [ 488.635843][T28014] syzkaller0: entered promiscuous mode [ 488.641492][T28014] syzkaller0: entered allmulticast mode [ 489.745491][T28059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7374'. [ 489.756047][T28059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7374'. [ 489.895860][T28068] netlink: 'syz.6.7380': attribute type 1 has an invalid length. [ 489.990137][T28068] 8021q: adding VLAN 0 to HW filter on device bond15 [ 490.019853][T28085] netlink: 'syz.9.7385': attribute type 10 has an invalid length. [ 490.024154][T28068] ip6erspan0: entered promiscuous mode [ 490.036295][T28068] bond15: (slave ip6erspan0): making interface the new active one [ 490.045160][T28068] bond15: (slave ip6erspan0): Enslaving as an active interface with an up link [ 490.056591][T28085] netlink: 'syz.9.7385': attribute type 10 has an invalid length. [ 490.060761][T28068] macvlan3: entered promiscuous mode [ 490.070611][T28068] bond15: entered promiscuous mode [ 490.076175][T28068] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 490.094699][T28068] bond15: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 490.112904][T28068] bond15: left promiscuous mode [ 490.190195][T28094] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7388'. [ 490.214162][T28094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28094 comm=syz.6.7388 [ 490.377490][T28104] syzkaller0: entered promiscuous mode [ 490.396415][T28104] syzkaller0: entered allmulticast mode [ 491.052628][T28119] netlink: 'syz.6.7399': attribute type 1 has an invalid length. [ 491.068618][T28119] bond16: entered promiscuous mode [ 491.074118][T28119] 8021q: adding VLAN 0 to HW filter on device bond16 [ 491.119038][T28119] bond16: (slave bridge7): making interface the new active one [ 491.127057][T28119] bridge7: entered promiscuous mode [ 491.135803][T28119] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 491.160772][T28126] 8021q: adding VLAN 0 to HW filter on device bond9 [ 491.177704][T28126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.187347][T28126] bond9: (slave bond0): Enslaving as an active interface with a down link [ 491.419819][T28152] syzkaller0: entered promiscuous mode [ 491.432120][T28152] syzkaller0: entered allmulticast mode [ 491.733062][T28177] syzkaller0: entered promiscuous mode [ 491.738673][T28177] syzkaller0: entered allmulticast mode [ 491.755739][T28179] geneve2: left promiscuous mode [ 491.771148][ T5718] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.786294][ T5718] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.805280][ T5718] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.814424][ T5718] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.547802][ T28] kauditd_printk_skb: 472 callbacks suppressed [ 492.547819][ T28] audit: type=1400 audit(1776644153.006:10370): avc: denied { create } for pid=28229 comm="syz.6.7447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 492.575894][ T28] audit: type=1400 audit(1776644153.038:10371): avc: denied { create } for pid=28229 comm="syz.6.7447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 492.723814][ T28] audit: type=1400 audit(1776644153.195:10372): avc: denied { read write } for pid=21553 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 492.763056][ T28] audit: type=1400 audit(1776644153.237:10373): avc: denied { create } for pid=28232 comm="syz.9.7448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 492.785848][T28233] syzkaller0: entered promiscuous mode [ 492.791934][T28233] syzkaller0: entered allmulticast mode [ 492.910202][ T28] audit: type=1400 audit(1776644153.384:10374): avc: denied { read write } for pid=21553 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 492.965476][ T28] audit: type=1400 audit(1776644153.437:10375): avc: denied { read write } for pid=21553 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 492.994746][ T28] audit: type=1400 audit(1776644153.447:10376): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 493.026032][ T28] audit: type=1400 audit(1776644153.510:10377): avc: denied { name_bind } for pid=28236 comm="syz.9.7450" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 493.054687][ T28] audit: type=1400 audit(1776644153.510:10378): avc: denied { bpf } for pid=28240 comm="syz.5.7451" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 493.076142][ T28] audit: type=1400 audit(1776644153.563:10379): avc: denied { prog_load } for pid=28236 comm="syz.9.7450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 493.362967][T28270] netlink: 'syz.6.7464': attribute type 1 has an invalid length. [ 493.396053][T28270] 8021q: adding VLAN 0 to HW filter on device bond17 [ 493.453432][T28270] bond17: (slave gretap2): making interface the new active one [ 493.469665][T28270] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 493.860504][T28248] syz.2.7455 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 493.892601][T28248] CPU: 1 UID: 0 PID: 28248 Comm: syz.2.7455 Tainted: G W syzkaller #0 PREEMPT(full) [ 493.892643][T28248] Tainted: [W]=WARN [ 493.892650][T28248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.892662][T28248] Call Trace: [ 493.892669][T28248] [ 493.892678][T28248] __dump_stack+0x1d/0x30 [ 493.892711][T28248] dump_stack_lvl+0x95/0xd0 [ 493.892804][T28248] dump_stack+0x15/0x1b [ 493.892826][T28248] dump_header+0x80/0x240 [ 493.892852][T28248] oom_kill_process+0x295/0x350 [ 493.892942][T28248] out_of_memory+0x97d/0xb80 [ 493.893011][T28248] try_charge_memcg+0x62e/0xa10 [ 493.893056][T28248] obj_cgroup_charge_pages+0x23/0xc0 [ 493.893085][T28248] __memcg_kmem_charge_page+0x9e/0x170 [ 493.893125][T28248] __alloc_frozen_pages_noprof+0x18a/0x360 [ 493.893226][T28248] alloc_pages_mpol+0xb3/0x260 [ 493.893326][T28248] alloc_pages_noprof+0x8f/0x140 [ 493.893432][T28248] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 493.893494][T28248] __kvmalloc_node_noprof+0x3d4/0x650 [ 493.893525][T28248] ? futex_hash_allocate+0x190/0x9d0 [ 493.893559][T28248] ? futex_hash_allocate+0x190/0x9d0 [ 493.893593][T28248] futex_hash_allocate+0x190/0x9d0 [ 493.893621][T28248] ? cap_task_prctl+0x13f/0x6e0 [ 493.893706][T28248] futex_hash_prctl+0xd8/0xf0 [ 493.893738][T28248] __se_sys_prctl+0x4f4/0x1400 [ 493.893770][T28248] __x64_sys_prctl+0x67/0x80 [ 493.893801][T28248] x64_sys_call+0x2533/0x3020 [ 493.893909][T28248] do_syscall_64+0x12c/0x370 [ 493.894003][T28248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.894030][T28248] RIP: 0033:0x7f1f6638c819 [ 493.894050][T28248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.894146][T28248] RSP: 002b:00007f1f64ddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 493.894182][T28248] RAX: ffffffffffffffda RBX: 00007f1f66605fa0 RCX: 00007f1f6638c819 [ 493.894200][T28248] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 493.894318][T28248] RBP: 00007f1f66422c91 R08: 0000000000000000 R09: 0000000000000000 [ 493.894339][T28248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.894355][T28248] R13: 00007f1f66606038 R14: 00007f1f66605fa0 R15: 00007ffebeac1c38 [ 493.894424][T28248] [ 493.894810][T28248] memory: usage 261700kB, limit 307200kB, failcnt 2739 [ 494.148640][T28248] memory+swap: usage 298492kB, limit 9007199254740988kB, failcnt 0 [ 494.156599][T28248] kmem: usage 219956kB, limit 9007199254740988kB, failcnt 0 [ 494.186994][T28248] Memory cgroup stats for /syz2: [ 494.187285][T28248] cache 0 [ 494.195373][T28248] rss 8511488 [ 494.204467][T28248] shmem 0 [ 494.217817][T28248] mapped_file 0 [ 494.233648][T28248] dirty 0 [ 494.237852][T28248] writeback 0 [ 494.241605][T28248] workingset_refault_anon 6321 [ 494.253919][T28248] workingset_refault_file 220 [ 494.263476][T28248] swap 71471104 [ 494.279071][T28248] swapcached 114376704 [ 494.287177][T28248] pgpgin 415755 [ 494.291683][T28248] pgpgout 413666 [ 494.295664][T28248] pgfault 329705 [ 494.299490][T28248] pgmajfault 891 [ 494.303737][T28248] inactive_anon 40960 [ 494.308031][T28248] active_anon 122880 [ 494.312508][T28248] inactive_file 4096 [ 494.316614][T28248] active_file 0 [ 494.320319][T28248] unevictable 8388608 [ 494.324599][T28248] hierarchical_memory_limit 314572800 [ 494.330251][T28248] hierarchical_memsw_limit 9223372036854771712 [ 494.336578][T28248] total_cache 0 [ 494.340390][T28248] total_rss 8511488 [ 494.344385][T28248] total_shmem 0 [ 494.347963][T28248] total_mapped_file 0 [ 494.352227][T28248] total_dirty 0 [ 494.355743][T28248] total_writeback 0 [ 494.359769][T28248] total_workingset_refault_anon 6321 [ 494.365173][T28248] total_workingset_refault_file 220 [ 494.370690][T28248] total_swap 71471104 [ 494.391131][T28248] total_swapcached 114376704 [ 494.396456][T28248] total_pgpgin 415755 [ 494.400653][T28248] total_pgpgout 413666 [ 494.404815][T28248] total_pgfault 329705 [ 494.422031][T28248] total_pgmajfault 891 [ 494.426452][T28248] total_inactive_anon 40960 [ 494.431032][T28248] total_active_anon 122880 [ 494.435723][T28248] total_inactive_file 4096 [ 494.441097][T28248] total_active_file 0 [ 494.445696][T28248] total_unevictable 8388608 [ 494.450464][T28248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7455,pid=28247,uid=0 [ 494.466004][T28248] Memory cgroup out of memory: Killed process 28248 (syz.2.7455) total-vm:94296kB, anon-rss:9532kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 494.754921][T28322] syzkaller0: entered promiscuous mode [ 494.760958][T28322] syzkaller0: entered allmulticast mode [ 495.335271][T28358] ´(Y}ñB: renamed from veth1_to_bridge [ 495.428677][T28362] __nla_validate_parse: 5 callbacks suppressed [ 495.428695][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7502'. [ 495.454197][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7502'. [ 495.463379][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7502'. [ 495.570836][T28368] syzkaller0: entered promiscuous mode [ 495.586227][T28368] syzkaller0: entered allmulticast mode [ 495.746072][T28384] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7512'. [ 495.756272][T28384] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7512'. [ 495.836506][T28391] syzkaller0: entered promiscuous mode [ 495.848148][T28391] syzkaller0: entered allmulticast mode [ 495.925388][T28403] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7521'. [ 496.035509][T28409] syzkaller0: entered promiscuous mode [ 496.042383][T28409] syzkaller0: entered allmulticast mode [ 496.163405][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7531'. [ 496.270413][T28428] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 496.315047][T28428] bond1 (unregistering): Released all slaves [ 496.501078][T28440] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7537'. [ 496.517076][T28440] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7537'. [ 496.536168][T28440] netlink: 'syz.4.7537': attribute type 3 has an invalid length. [ 496.545287][T28440] netlink: 11 bytes leftover after parsing attributes in process `syz.4.7537'. [ 496.575507][T28443] kernel profiling enabled (shift: 9) [ 496.888211][T28467] syzkaller0: entered promiscuous mode [ 496.893943][T28467] syzkaller0: entered allmulticast mode [ 496.929273][T28473] netlink: 'syz.9.7550': attribute type 10 has an invalid length. [ 497.333564][ T28] kauditd_printk_skb: 570 callbacks suppressed [ 497.333581][ T28] audit: type=1400 audit(1776644158.035:10950): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 497.400782][ T28] audit: type=1400 audit(1776644158.109:10951): avc: denied { open } for pid=28493 comm="syz.2.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 497.446474][ T28] audit: type=1400 audit(1776644158.109:10952): avc: denied { prog_load } for pid=28493 comm="syz.2.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.474229][ T28] audit: type=1400 audit(1776644158.109:10953): avc: denied { mount } for pid=28493 comm="syz.2.7558" name="/" dev="autofs" ino=98485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=0 [ 497.498282][ T28] audit: type=1400 audit(1776644158.109:10954): avc: denied { create } for pid=28496 comm="syz.5.7559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 497.519685][ T28] audit: type=1400 audit(1776644158.109:10955): avc: denied { create } for pid=28496 comm="syz.5.7559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 497.557231][T28503] bond18: entered promiscuous mode [ 497.597974][T28503] bond18: entered allmulticast mode [ 497.725122][ T28] audit: type=1400 audit(1776644158.109:10956): avc: denied { create } for pid=28496 comm="syz.5.7559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 497.773334][ T28] audit: type=1400 audit(1776644158.109:10957): avc: denied { create } for pid=28496 comm="syz.5.7559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 497.808925][T28517] netlink: 'syz.6.7568': attribute type 13 has an invalid length. [ 497.843469][ T28] audit: type=1400 audit(1776644158.130:10958): avc: denied { prog_load } for pid=28492 comm="syz.6.7560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.909100][T28517] bridge0: left promiscuous mode [ 497.919586][T28517] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.927589][T28517] batman_adv: batadv0: Interface activated: dummy0 [ 497.935953][ T28] audit: type=1400 audit(1776644158.140:10959): avc: denied { create } for pid=28492 comm="syz.6.7560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=0 [ 498.032646][T28517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.886287][T28559] netlink: 'syz.5.7585': attribute type 13 has an invalid length. [ 498.907487][T28557] x_tables: duplicate entry at hook 2 [ 498.943392][T28559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.952196][T28559] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.962288][T28559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.998944][T20903] IPVS: starting estimator thread 0... [ 499.082064][T28565] IPVS: using max 2640 ests per chain, 132000 per kthread [ 499.155378][T28570] netlink: 'syz.5.7589': attribute type 7 has an invalid length. [ 499.163399][T28570] netlink: 'syz.5.7589': attribute type 8 has an invalid length. [ 499.223882][T28574] syzkaller0: entered promiscuous mode [ 499.243718][T28574] syzkaller0: entered allmulticast mode [ 500.307626][T28610] __nla_validate_parse: 1 callbacks suppressed [ 500.307645][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7604'. [ 500.352909][T28610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7604'. [ 500.398324][T28610] vlan3: entered promiscuous mode [ 500.407913][T28610] bridge8: entered promiscuous mode [ 500.416844][T28610] vlan3: entered allmulticast mode [ 500.425972][T28610] bridge8: entered allmulticast mode [ 500.935393][T28638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7607'. [ 500.983488][T28640] IPVS: fo: FWM 3 0x00000003 - no destination available [ 501.255482][T28663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7626'. [ 501.296876][T28663] bond1 (unregistering): Released all slaves [ 501.297646][T28668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7628'. [ 501.445714][T28676] bridge0: port 4(gretap0) entered blocking state [ 501.453230][T28676] bridge0: port 4(gretap0) entered disabled state [ 501.460344][T28676] gretap0: entered allmulticast mode [ 501.466399][T28676] gretap0: entered promiscuous mode [ 502.108272][ T28] kauditd_printk_skb: 341 callbacks suppressed [ 502.108288][ T28] audit: type=1400 audit(1776644163.043:11301): avc: denied { create } for pid=28710 comm="syz.9.7646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 502.135440][ T28] audit: type=1400 audit(1776644163.043:11302): avc: denied { map_create } for pid=28710 comm="syz.9.7646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.157438][ T28] audit: type=1400 audit(1776644163.043:11303): avc: denied { prog_load } for pid=28710 comm="syz.9.7646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.178067][ T28] audit: type=1400 audit(1776644163.043:11304): avc: denied { prog_load } for pid=28710 comm="syz.9.7646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.198977][ T28] audit: type=1400 audit(1776644163.043:11305): avc: denied { prog_load } for pid=28710 comm="syz.9.7646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.238566][ T28] audit: type=1400 audit(1776644163.169:11306): avc: denied { read write } for pid=21553 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 502.296682][ T28] audit: type=1400 audit(1776644163.243:11307): avc: denied { create } for pid=28716 comm="syz.2.7648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 502.348968][ T28] audit: type=1400 audit(1776644163.264:11308): avc: denied { map_create } for pid=28716 comm="syz.2.7648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.386683][ T28] audit: type=1400 audit(1776644163.264:11309): avc: denied { create } for pid=28716 comm="syz.2.7648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 502.467434][T28731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7654'. [ 502.473307][ T28] audit: type=1400 audit(1776644163.274:11310): avc: denied { module_request } for pid=28716 comm="syz.2.7648" kmod="netdev-dummy0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 502.520995][T28731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28731 comm=syz.4.7654 [ 503.962103][T28790] team0: left allmulticast mode [ 503.977726][T28790] team_slave_0: left allmulticast mode [ 503.987425][T28790] team_slave_1: left allmulticast mode [ 503.993045][T28790] bridge6: left allmulticast mode [ 504.013458][T28791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7678'. [ 504.022862][T28790] team0: left promiscuous mode [ 504.035093][T28790] team_slave_0: left promiscuous mode [ 504.054404][T28790] team_slave_1: left promiscuous mode [ 504.059956][T28790] bridge6: left promiscuous mode [ 504.083096][T28790] bridge0: port 3(team0) entered disabled state [ 504.095029][T28790] bond4: (slave batadv0): Removing an active aggregator [ 504.112435][T28790] bond4: (slave batadv0): Releasing backup interface [ 504.120996][T28790] bridge_slave_0: left allmulticast mode [ 504.126716][T28790] bridge_slave_0: left promiscuous mode [ 504.133358][T28790] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.141910][T28790] bridge_slave_1: left allmulticast mode [ 504.147729][T28790] bridge_slave_1: left promiscuous mode [ 504.154226][T28790] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.164036][T28790] team0: Port device team_slave_0 removed [ 504.171505][T28790] team0: Port device team_slave_1 removed [ 504.177771][T28790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.185523][T28790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.193208][T28790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 504.546971][T28810] netlink: 'syz.5.7686': attribute type 21 has an invalid length. [ 504.555310][T28810] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7686'. [ 504.564688][T28810] netlink: 'syz.5.7686': attribute type 4 has an invalid length. [ 504.586285][T28810] netlink: 'syz.5.7686': attribute type 3 has an invalid length. [ 504.594948][T28810] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7686'. [ 504.732975][T28820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7691'. [ 504.750100][T28820] veth13: entered allmulticast mode [ 505.105305][T28831] 8021q: VLANs not supported on ip6_vti0 [ 505.708617][T28860] netlink: 'syz.2.7706': attribute type 16 has an invalid length. [ 505.725941][T28860] netlink: 'syz.2.7706': attribute type 17 has an invalid length. [ 505.782087][T28860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.791074][T28860] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.805964][T28860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.810546][T28887] __nla_validate_parse: 2 callbacks suppressed [ 506.810564][T28887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7714'. [ 506.837404][T28868] netlink: 'syz.4.7710': attribute type 13 has an invalid length. [ 506.863226][T28887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7714'. [ 506.894759][ T28] kauditd_printk_skb: 254 callbacks suppressed [ 506.894775][ T28] audit: type=1400 audit(1776644168.073:11565): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 506.932403][T28868] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 506.968115][ T28] audit: type=1400 audit(1776644168.146:11566): avc: denied { create } for pid=28867 comm="syz.4.7710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 507.089250][T28891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7716'. [ 507.092414][ T28] audit: type=1400 audit(1776644168.220:11567): avc: denied { relabelfrom } for pid=28888 comm="syz.5.7715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 507.128172][ T28] audit: type=1400 audit(1776644168.220:11568): avc: denied { relabelfrom } for pid=28888 comm="syz.5.7715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 507.148588][ T28] audit: type=1400 audit(1776644168.272:11569): avc: denied { create } for pid=28890 comm="syz.4.7716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 507.169894][ T28] audit: type=1400 audit(1776644168.272:11570): avc: denied { open } for pid=28890 comm="syz.4.7716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 507.189885][ T28] audit: type=1400 audit(1776644168.272:11571): avc: denied { create } for pid=28890 comm="syz.4.7716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 507.318730][ T28] audit: type=1400 audit(1776644168.272:11572): avc: denied { create } for pid=28890 comm="syz.4.7716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 507.485796][T28910] ip6erspan0: entered allmulticast mode [ 507.502100][ T28] audit: type=1400 audit(1776644168.346:11573): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 507.540159][ T28] audit: type=1400 audit(1776644168.409:11574): avc: denied { module_request } for pid=28892 comm="syz.4.7717" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 509.377595][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7751'. [ 509.742788][T29002] bridge0: port 1(gretap0) entered blocking state [ 509.749453][T29002] bridge0: port 1(gretap0) entered disabled state [ 509.756301][T29002] gretap0: entered allmulticast mode [ 509.762147][T29002] gretap0: entered promiscuous mode [ 509.767604][T29002] bridge0: port 1(gretap0) entered blocking state [ 509.774241][T29002] bridge0: port 1(gretap0) entered forwarding state [ 509.809782][T29004] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7757'. [ 509.840816][T29004] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7757'. [ 510.957720][T29044] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7773'. [ 511.181548][T29055] netlink: 'syz.2.7779': attribute type 10 has an invalid length. [ 511.227515][T29053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.244349][T29056] netlink: 'syz.2.7779': attribute type 10 has an invalid length. [ 511.826730][ T28] kauditd_printk_skb: 789 callbacks suppressed [ 511.826747][ T28] audit: type=1400 audit(1776644173.249:12319): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 511.899867][ T28] audit: type=1400 audit(1776644173.301:12320): avc: denied { prog_load } for pid=29065 comm="syz.5.7782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 511.967502][ T28] audit: type=1400 audit(1776644173.301:12321): avc: denied { prog_load } for pid=29065 comm="syz.5.7782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.038235][ T28] audit: type=1400 audit(1776644173.301:12322): avc: denied { open } for pid=29065 comm="syz.5.7782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 512.081737][ T28] audit: type=1400 audit(1776644173.301:12323): avc: denied { execmem } for pid=29065 comm="syz.5.7782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 512.148333][T29080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7789'. [ 512.149934][ T28] audit: type=1400 audit(1776644173.312:12324): avc: denied { module_request } for pid=29064 comm="syz.4.7783" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 512.224384][T29083] syzkaller0: entered promiscuous mode [ 512.230919][T29083] syzkaller0: entered allmulticast mode [ 512.231279][T29085] netlink: 'syz.9.7790': attribute type 1 has an invalid length. [ 512.239954][ T28] audit: type=1400 audit(1776644173.312:12325): avc: denied { sys_module } for pid=29064 comm="syz.4.7783" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 512.273447][T29087] netlink: 'syz.2.7791': attribute type 1 has an invalid length. [ 512.277285][T29085] bond4: entered promiscuous mode [ 512.291417][T29085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.302062][ T28] audit: type=1400 audit(1776644173.312:12326): avc: denied { module_request } for pid=29064 comm="syz.4.7783" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 512.325705][ T28] audit: type=1400 audit(1776644173.312:12327): avc: denied { sys_module } for pid=29064 comm="syz.4.7783" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 512.325901][T29091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7791'. [ 512.347642][ T28] audit: type=1400 audit(1776644173.354:12328): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 512.419998][T29091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 512.432544][T29085] bond4: (slave bridge4): making interface the new active one [ 512.440522][T29085] bridge4: entered promiscuous mode [ 512.447729][T29085] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 512.537334][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7796'. [ 512.653219][T29106] syzkaller0: entered promiscuous mode [ 512.673139][T29106] syzkaller0: entered allmulticast mode [ 513.120341][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7810'. [ 513.194685][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7803'. [ 513.213515][T29142] macvlan2: entered promiscuous mode [ 513.219193][T29142] bond0: entered promiscuous mode [ 513.224467][T29142] bond_slave_0: entered promiscuous mode [ 513.238796][T29142] bond_slave_1: entered promiscuous mode [ 513.246841][T29142] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 513.415570][T29154] gretap0: left allmulticast mode [ 513.420858][T29154] gretap0: left promiscuous mode [ 513.492922][T29154] bridge0: port 4(gretap0) entered disabled state [ 513.513194][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7818'. [ 513.543378][T29154] batman_adv: batadv0: Interface deactivated: dummy0 [ 513.553018][T29154] batman_adv: batadv0: Removing interface: dummy0 [ 513.561267][T29154] bond13: (slave batadv0): Removing an active aggregator [ 513.568990][T29154] bond13: (slave batadv0): Releasing backup interface [ 513.577149][T29154] bridge_slave_0: left allmulticast mode [ 513.577237][T29157] netlink: 'syz.2.7819': attribute type 1 has an invalid length. [ 513.584722][T29154] bridge_slave_0: left promiscuous mode [ 513.596745][T29154] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.604983][T29154] bridge_slave_1: left allmulticast mode [ 513.611145][T29154] bridge_slave_1: left promiscuous mode [ 513.616894][T29154] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.624263][T29154] vlan2: left promiscuous mode [ 513.629201][T29154] geneve0: left promiscuous mode [ 513.635236][T29154] bond7: (slave veth0_to_bond): Releasing active interface [ 513.644006][T29154] team0: Port device team_slave_1 removed [ 513.650633][T29154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.658646][T29154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.666593][T29154] bond1: (slave bond2): Releasing backup interface [ 513.674263][T29154] bond4: (slave geneve2): Releasing active interface [ 513.682389][T29154] bond6: (slave gretap1): Releasing active interface [ 513.690840][T29154] vlan2: left allmulticast mode [ 513.695831][T29154] geneve0: left allmulticast mode [ 513.700890][T29154] bridge0: port 3(vlan2) entered disabled state [ 513.708809][T29154] bond8: (slave ip6gre2): Releasing backup interface [ 513.716975][T29154] bond12: (slave bridge5): Releasing backup interface [ 513.725239][T29154] bond14: (slave ip6gretap1): Releasing active interface [ 513.734123][T29154] bond15: (slave ip6erspan0): Releasing active interface [ 513.746120][T29154] bond16: (slave bridge7): Releasing backup interface [ 513.753071][T29154] bridge7: left promiscuous mode [ 513.761343][T29154] bond17: (slave gretap2): Releasing active interface [ 513.782508][T29158] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 513.795783][T29158] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 513.818643][T29159] bond9: (slave bridge10): Enslaving as an active interface with a down link [ 513.833205][T29160] macvlan2: entered promiscuous mode [ 513.838686][T29160] macvlan2: entered allmulticast mode [ 513.844761][T29160] bond9: entered promiscuous mode [ 513.850240][T29160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 513.858518][T29160] bond9: left promiscuous mode [ 515.138460][T29194] IPVS: fo: FWM 3 0x00000003 - no destination available [ 515.143556][T29195] netlink: 'syz.5.7832': attribute type 4 has an invalid length. [ 515.146238][T29194] IPVS: fo: FWM 3 0x00000003 - no destination available [ 515.175782][T29195] netlink: 'syz.5.7832': attribute type 4 has an invalid length. [ 515.440409][T29226] netlink: 'syz.2.7845': attribute type 4 has an invalid length. [ 516.112559][T29258] netlink: 'syz.9.7860': attribute type 1 has an invalid length. [ 516.139814][T29258] veth15: entered promiscuous mode [ 516.154025][T29258] bond5: (slave veth15): Enslaving as a backup interface with a down link [ 516.311547][T29270] bridge0: port 1(gretap0) entered disabled state [ 516.365778][T29271] netlink: 'syz.9.7864': attribute type 16 has an invalid length. [ 516.464705][T29271] netlink: 'syz.9.7864': attribute type 17 has an invalid length. [ 516.589903][T29271] bridge0: port 1(gretap0) entered blocking state [ 516.596508][T29271] bridge0: port 1(gretap0) entered forwarding state [ 516.982744][T29271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.189808][ T28] kauditd_printk_skb: 276 callbacks suppressed [ 517.189827][ T28] audit: type=1400 audit(1776644178.887:12605): avc: denied { map_create } for pid=29276 comm="syz.2.7866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 517.254688][ T28] audit: type=1400 audit(1776644178.887:12606): avc: denied { prog_load } for pid=29276 comm="syz.2.7866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 517.292945][ T28] audit: type=1400 audit(1776644178.887:12607): avc: denied { create } for pid=29276 comm="syz.2.7866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 517.325104][T29281] netlink: 'syz.2.7878': attribute type 13 has an invalid length. [ 517.343471][ T28] audit: type=1400 audit(1776644178.887:12608): avc: denied { create } for pid=29276 comm="syz.2.7866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 517.351402][T29281] netlink: 'syz.2.7878': attribute type 17 has an invalid length. [ 517.403484][ T28] audit: type=1400 audit(1776644178.908:12609): avc: denied { create } for pid=29276 comm="syz.2.7866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 517.438899][ T28] audit: type=1400 audit(1776644179.002:12610): avc: denied { read write } for pid=21553 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 517.467874][ T28] audit: type=1400 audit(1776644179.013:12611): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 517.492743][ T28] audit: type=1400 audit(1776644179.023:12612): avc: denied { create } for pid=29280 comm="syz.2.7878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 517.513524][ T28] audit: type=1400 audit(1776644179.023:12613): avc: denied { create } for pid=29280 comm="syz.2.7878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 517.537332][T29281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.549094][ T28] audit: type=1400 audit(1776644179.023:12614): avc: denied { open } for pid=29279 comm="syz.6.7867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 517.580797][T29290] ip6tnl0: Caught tx_queue_len zero misconfig [ 517.614823][T29296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7871'. [ 517.653424][T29298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7872'. [ 517.683890][T29298] veth3: entered allmulticast mode [ 517.748133][T29308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7875'. [ 517.766136][T29308] bond10 (unregistering): Released all slaves [ 517.844334][T29313] bridge0: port 1(gretap0) entered disabled state [ 517.957550][T29313] wg2: left promiscuous mode [ 517.962685][T29313] wg2: left allmulticast mode [ 517.975477][T29313] bond2: left promiscuous mode [ 517.980677][T29313] bond2: left allmulticast mode [ 517.987528][T29313] ip6erspan0: left allmulticast mode [ 517.997307][T29313] bond4: left promiscuous mode [ 518.002740][T29313] bridge4: left promiscuous mode [ 518.012209][T29313] veth15: left promiscuous mode [ 518.253188][T29318] netlink: 'syz.4.7880': attribute type 16 has an invalid length. [ 518.265885][T29318] netlink: 'syz.4.7880': attribute type 17 has an invalid length. [ 518.309071][T29318] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.323875][T29318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.809576][T29344] bridge0: entered allmulticast mode [ 518.909677][T29351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7896'. [ 518.936094][T29353] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7895'. [ 519.005584][T29358] macsec1: entered promiscuous mode [ 519.011324][T29358] bridge0: entered promiscuous mode [ 519.439978][T29379] ip6gretap0: entered promiscuous mode [ 519.446220][T29379] team0: Device macvtap0 failed to register rx_handler [ 519.454202][T29379] ip6gretap0: left promiscuous mode [ 520.285967][T29404] bridge0: left allmulticast mode [ 520.303656][T29404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.113382][T29439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.651934][T29431] bond6: (slave ip6gretap1): making interface the new active one [ 521.705931][T29431] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 521.833637][T29449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.966547][ T28] kauditd_printk_skb: 294 callbacks suppressed [ 521.966567][ T28] audit: type=1400 audit(1776644183.884:12909): avc: denied { prog_load } for pid=29452 comm="syz.5.7933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 522.007547][ T28] audit: type=1400 audit(1776644183.884:12910): avc: denied { open } for pid=29452 comm="syz.5.7933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 522.056742][T29457] netlink: 830 bytes leftover after parsing attributes in process `syz.6.7935'. [ 522.065885][ T28] audit: type=1400 audit(1776644183.884:12911): avc: denied { watch watch_reads } for pid=29452 comm="syz.5.7933" path="/156" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 522.131534][ T28] audit: type=1400 audit(1776644183.895:12912): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 522.150074][T29460] netlink: 'syz.4.7936': attribute type 13 has an invalid length. [ 522.205714][ T28] audit: type=1400 audit(1776644183.947:12913): avc: denied { read write } for pid=29454 comm="syz.5.7934" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 522.214152][T29465] syzkaller0: entered promiscuous mode [ 522.253832][ T28] audit: type=1400 audit(1776644183.979:12914): avc: denied { create } for pid=29454 comm="syz.5.7934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 522.254258][T29460] netlink: 'syz.4.7936': attribute type 17 has an invalid length. [ 522.282841][T29465] syzkaller0: entered allmulticast mode [ 522.341627][T29470] netlink: 'syz.6.7941': attribute type 1 has an invalid length. [ 522.348716][ T28] audit: type=1400 audit(1776644183.979:12915): avc: denied { name_bind } for pid=29456 comm="syz.6.7935" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 522.393870][ T28] audit: type=1400 audit(1776644183.979:12916): avc: denied { create } for pid=29456 comm="syz.6.7935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 522.434590][T29470] 8021q: adding VLAN 0 to HW filter on device bond19 [ 522.441596][ T28] audit: type=1400 audit(1776644184.042:12917): avc: denied { create } for pid=29456 comm="syz.6.7935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 522.494465][ T28] audit: type=1400 audit(1776644184.073:12918): avc: denied { create } for pid=29459 comm="syz.4.7936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 522.548404][T29460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.582689][T29471] vlan1: entered promiscuous mode [ 522.587826][T29471] bond19: entered promiscuous mode [ 522.608167][T29471] vlan1: entered allmulticast mode [ 522.613336][T29471] bond19: entered allmulticast mode [ 522.624699][T29470] bond19: (slave bridge8): making interface the new active one [ 522.643797][T29470] bridge8: entered promiscuous mode [ 522.687121][T29470] bridge8: entered allmulticast mode [ 522.695771][T29470] bond19: (slave bridge8): Enslaving as an active interface with an up link [ 522.813000][T29483] syzkaller0: entered promiscuous mode [ 522.819338][T29483] syzkaller0: entered allmulticast mode [ 523.192955][T29493] syzkaller0: entered promiscuous mode [ 523.219317][T29493] syzkaller0: entered allmulticast mode [ 524.002420][T29516] bridge_slave_0: left allmulticast mode [ 524.018946][T29516] bridge_slave_0: left promiscuous mode [ 524.031331][T29516] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.060547][T29516] bridge_slave_1: left allmulticast mode [ 524.075779][T29516] bridge_slave_1: left promiscuous mode [ 524.102463][T29516] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.190433][T29516] bond0: (slave bond_slave_0): Releasing backup interface [ 524.198407][T29516] bond_slave_0: left promiscuous mode [ 524.205264][T29516] bond0: (slave bond_slave_1): Releasing backup interface [ 524.213805][T29516] bond_slave_1: left promiscuous mode [ 524.222209][T29516] team0: Port device team_slave_0 removed [ 524.254891][T29516] team0: Port device team_slave_1 removed [ 524.261270][T29516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.271440][T29516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.279579][T29516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.559075][T29532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7959'. [ 524.594202][T29532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29532 comm=syz.5.7959 [ 524.980098][T29565] syzkaller0: entered promiscuous mode [ 524.986889][T29565] syzkaller0: entered allmulticast mode [ 526.107344][T29618] batadv_slave_0: Caught tx_queue_len zero misconfig [ 526.190285][T29622] netlink: 'syz.4.7996': attribute type 1 has an invalid length. [ 526.253539][T29622] 8021q: adding VLAN 0 to HW filter on device bond10 [ 526.404757][T29629] tunl0: Caught tx_queue_len zero misconfig [ 526.515242][T29622] ipvlan2: entered allmulticast mode [ 526.525897][T29622] bond10: entered allmulticast mode [ 526.548726][T29630] bond10: (slave bridge8): making interface the new active one [ 526.567408][T29630] bridge8: entered allmulticast mode [ 526.583324][T29630] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 526.764985][ T28] kauditd_printk_skb: 438 callbacks suppressed [ 526.765017][ T28] audit: type=1400 audit(1776644188.935:13357): avc: denied { read write } for pid=27120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 526.960643][ T28] audit: type=1400 audit(1776644189.123:13358): avc: denied { map_create } for pid=29646 comm="syz.5.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 527.008324][ T28] audit: type=1400 audit(1776644189.123:13359): avc: denied { bpf } for pid=29646 comm="syz.5.8005" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 527.050800][ T28] audit: type=1400 audit(1776644189.197:13360): avc: denied { create } for pid=29652 comm="syz.6.8006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 527.101147][ T28] audit: type=1400 audit(1776644189.197:13361): avc: denied { open } for pid=29652 comm="syz.6.8006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 527.140906][ T28] audit: type=1400 audit(1776644189.197:13362): avc: denied { prog_load } for pid=29652 comm="syz.6.8006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 527.211580][ T28] audit: type=1400 audit(1776644189.218:13363): avc: denied { execmem } for pid=29652 comm="syz.6.8006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 527.424092][ T28] audit: type=1400 audit(1776644189.239:13364): avc: denied { create } for pid=29652 comm="syz.6.8006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 527.512892][ T28] audit: type=1400 audit(1776644189.711:13365): avc: denied { execmem } for pid=29658 comm="syz.2.8010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 527.596578][ T28] audit: type=1400 audit(1776644189.806:13366): avc: denied { prog_load } for pid=29660 comm="syz.6.8008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 527.616241][T29661] bridge0: entered allmulticast mode [ 528.323096][T29679] netlink: 'syz.9.8015': attribute type 13 has an invalid length. [ 528.450406][T29681] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.501604][T29681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8016'. [ 529.344793][T29703] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 529.520141][T29716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8029'. [ 529.736522][T29722] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8031'. [ 530.519538][T29748] syzkaller0: entered promiscuous mode [ 530.537272][T29748] syzkaller0: entered allmulticast mode [ 531.253835][T29769] netlink: 'syz.6.8052': attribute type 4 has an invalid length. [ 531.285162][T29769] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8052'. [ 531.422515][T29776] bond19: (slave bridge8): Releasing active interface [ 531.437207][T29776] bridge8: left promiscuous mode [ 531.462696][T29776] bridge8: left allmulticast mode [ 531.534578][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 531.534598][ T28] audit: type=1400 audit(1776644193.943:13576): avc: denied { read write } for pid=29783 comm="syz.9.8056" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 531.604157][ T28] audit: type=1400 audit(1776644193.943:13577): avc: denied { open } for pid=29783 comm="syz.9.8056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 531.663039][ T28] audit: type=1400 audit(1776644193.943:13578): avc: denied { create } for pid=29783 comm="syz.9.8056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 531.709562][ T28] audit: type=1400 audit(1776644193.943:13579): avc: denied { bpf } for pid=29783 comm="syz.9.8056" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 531.760902][ T28] audit: type=1400 audit(1776644194.006:13580): avc: denied { prog_load } for pid=29786 comm="syz.6.8057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.798204][ T28] audit: type=1400 audit(1776644194.006:13581): avc: denied { prog_load } for pid=29786 comm="syz.6.8057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.837223][ T28] audit: type=1400 audit(1776644194.006:13582): avc: denied { open } for pid=29786 comm="syz.6.8057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 531.887319][ T28] audit: type=1400 audit(1776644194.006:13583): avc: denied { map_create } for pid=29786 comm="syz.6.8057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.934329][ T28] audit: type=1400 audit(1776644194.006:13584): avc: denied { prog_load } for pid=29786 comm="syz.6.8057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.993055][ T28] audit: type=1400 audit(1776644194.037:13585): avc: denied { read write } for pid=21553 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:hostname_exec_t:s0" [ 532.074893][T29774] ================================================================== [ 532.083030][T29774] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 532.092878][T29774] [ 532.095222][T29774] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 532.103312][T29774] tick_do_update_jiffies64+0x113/0x1c0 [ 532.108889][T29774] tick_nohz_handler+0x8d/0x3d0 [ 532.113771][T29774] __hrtimer_run_queues+0x218/0x4f0 [ 532.118992][T29774] hrtimer_interrupt+0x275/0x810 [ 532.123963][T29774] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 532.129894][T29774] sysvec_apic_timer_interrupt+0x6f/0x80 [ 532.135732][T29774] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.141824][T29774] page_vma_mapped_walk+0x64/0xd20 [ 532.146968][T29774] page_vma_mkclean_one+0x194/0x380 [ 532.152217][T29774] page_mkclean_one+0x125/0x160 [ 532.157184][T29774] __rmap_walk_file+0x1ec/0x2b0 [ 532.162070][T29774] folio_mkclean+0x1e0/0x240 [ 532.166699][T29774] folio_clear_dirty_for_io+0xa5/0x390 [ 532.172206][T29774] mpage_process_page_bufs+0x400/0x620 [ 532.177692][T29774] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 532.183536][T29774] ext4_do_writepages+0x70f/0x2840 [ 532.188671][T29774] ext4_writepages+0x18f/0x320 [ 532.193468][T29774] do_writepages+0x1c6/0x310 [ 532.198081][T29774] __writeback_single_inode+0x80/0x720 [ 532.203738][T29774] writeback_sb_inodes+0x4fe/0xaf0 [ 532.208874][T29774] __writeback_inodes_wb+0x94/0x1a0 [ 532.214094][T29774] wb_writeback+0x272/0x5d0 [ 532.218789][T29774] wb_workfn+0x4fd/0x970 [ 532.223094][T29774] process_scheduled_works+0x513/0xa10 [ 532.228573][T29774] worker_thread+0x58a/0x780 [ 532.233183][T29774] kthread+0x22a/0x280 [ 532.237258][T29774] ret_from_fork+0x150/0x360 [ 532.241870][T29774] ret_from_fork_asm+0x1a/0x30 [ 532.246664][T29774] [ 532.249001][T29774] read to 0xffffffff86c09a00 of 8 bytes by task 29774 on cpu 0: [ 532.256643][T29774] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 532.262986][T29774] count_shadow_nodes+0x6a/0x230 [ 532.268026][T29774] do_shrink_slab+0x63/0x6a0 [ 532.272626][T29774] shrink_slab+0x538/0x880 [ 532.277108][T29774] shrink_node+0x6bc/0x2130 [ 532.281620][T29774] do_try_to_free_pages+0x408/0xc80 [ 532.286844][T29774] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 532.292775][T29774] try_charge_memcg+0x37e/0xa10 [ 532.297746][T29774] obj_cgroup_charge_pages+0x23/0xc0 [ 532.303096][T29774] __memcg_kmem_charge_page+0x9e/0x170 [ 532.308574][T29774] __alloc_frozen_pages_noprof+0x18a/0x360 [ 532.314400][T29774] alloc_pages_mpol+0xb3/0x260 [ 532.319389][T29774] alloc_pages_noprof+0x8f/0x140 [ 532.324361][T29774] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 532.330357][T29774] __kvmalloc_node_noprof+0x3d4/0x650 [ 532.335759][T29774] futex_hash_allocate+0x190/0x9d0 [ 532.340888][T29774] futex_hash_prctl+0xd8/0xf0 [ 532.345581][T29774] __se_sys_prctl+0x4f4/0x1400 [ 532.350449][T29774] __x64_sys_prctl+0x67/0x80 [ 532.355121][T29774] x64_sys_call+0x2533/0x3020 [ 532.360085][T29774] do_syscall_64+0x12c/0x370 [ 532.364701][T29774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.370618][T29774] [ 532.372957][T29774] value changed: 0x0000000100005b3d -> 0x0000000100005b3e [ 532.380073][T29774] [ 532.382405][T29774] Reported by Kernel Concurrency Sanitizer on: [ 532.388563][T29774] CPU: 0 UID: 0 PID: 29774 Comm: syz.4.8053 Tainted: G W syzkaller #0 PREEMPT(full) [ 532.399600][T29774] Tainted: [W]=WARN [ 532.403416][T29774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.413476][T29774] ================================================================== [ 538.801545][ T50] vlan2: left allmulticast mode [ 538.806444][ T50] geneve0: left allmulticast mode [ 538.811593][ T50] vlan2: left promiscuous mode [ 538.816359][ T50] geneve0: left promiscuous mode [ 538.821771][ T50] bridge0: port 3(vlan2) entered disabled state [ 538.829087][ T50] bridge_slave_1: left allmulticast mode [ 538.834750][ T50] bridge_slave_1: left promiscuous mode [ 538.840635][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.848587][ T50] bridge_slave_0: left allmulticast mode [ 538.854225][ T50] bridge_slave_0: left promiscuous mode [ 538.860302][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.881091][ T50] bond1 (unregistering): (slave geneve2): Releasing active interface [ 538.934925][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.944747][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.954688][ T50] bond0 (unregistering): Released all slaves [ 538.962327][ T50] bond1 (unregistering): Released all slaves [ 538.975971][ T50] hsr_slave_0: left promiscuous mode [ 538.981703][ T50] hsr_slave_1: left promiscuous mode [ 538.987323][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.995029][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.028214][ T50] team0 (unregistering): Port device team_slave_1 removed [ 539.038536][ T50] team0 (unregistering): Port device team_slave_0 removed [ 539.269048][ T50] IPVS: stop unused estimator thread 0...