last executing test programs: 1.536757517s ago: executing program 0 (id=7): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3}, {0x6}]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='btrfs_failed_cluster_setup\x00', r4}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) creat(&(0x7f0000000180)='./bus\x00', 0x164) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write$binfmt_misc(r10, &(0x7f00000000c0)=ANY=[], 0xfffff000) write(r7, &(0x7f0000000380)="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", 0x1aa) tee(r6, r10, 0x81, 0x0) write$binfmt_misc(r8, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16=r10, @ANYRESOCT=r0], 0x4) r11 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r11, r12, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 1.402936273s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r1, &(0x7f00000075c0)={&(0x7f0000001080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000074c0)=[{&(0x7f00000001c0)="7f", 0x1}], 0x1}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/20, 0x14}], 0x1}, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x7}, @jmp={0x6, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r3}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) setgroups(0x0, 0x0) syz_clone(0x2300500, 0x0, 0xfffffffffffffc72, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000840)='\x02;\xe5\b\x00\x1c\x9cB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QX\xa2\xf3\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x8eO\x02?\xae\x1e\xf4L\x95\xb9\x00\xdd\xe97 0_\xe4]W\x1a\x7f\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x91\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\x01\x00REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96h\xfe(^_\xe4\xbe\x96\xe5\xb7e\"$\xd1~\xdfe\x93\x7f\x94{L`\x1a2\xe8\xbc\xc3\xf6\xa4\x1b\xb20\xc6H\x1dg\xb5j\xac\x1bPN\xfaX\xb4\x85\x1fO\xba\xcd\x94\x06\x8f\xfe\xff\xea\x03\x014\xbd\xf0\x12\xa9\xf2\xb6\"\xabR\xeb\xe7\xaf\xe9\xab\xc7`\xb9\rY\xde\x7f\xfaxq\xc2\xeex\x13\x9du|\xd5\xe3\x1a\x98i\x1c\x9d|\b\x89\x1fG\xc3\xee\x11\xefS]\xe2\xff\x9c^\x94=\bI\xfdx\xd3w,\x8c\xcf\x9b\a9J@\xf0\xd8;\x9d\n\xd3#pq\x8b\xa2\x96\xfc\xa1\a\xcdZ\xe3Q\xfbd\r\x9eB@\xbfq\xdf(\xb2\x01Q7q\x9ee\x87\x1b\x88\xc2{2\xec\xa9H\xf8\x9d\xa1\x0e\x9f\xd0\x89}\xcem\xaa\xf2\x9c\x8c^La\xc4\x11\'\x02\xd1{\x8a\x04\xc2H0\xf7\xb6F\xcf\x00W\x8a\x8c\xbb/\x1d\x96<\xcb\"p\x00\x00\x00\x00\x00\x00\x00\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20f42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9}, 0x48) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'bridge_slave_0\x00', @local}) 1.332451165s ago: executing program 4 (id=5): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x5, 0x3) pipe(&(0x7f0000000000)) (async) splice(r0, 0x0, r1, 0x0, 0x5, 0x3) (async) 1.263967378s ago: executing program 4 (id=8): socket$inet6(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x11, &(0x7f0000000640)={[], [], 0x8}, 0x8, 0x60b, &(0x7f0000001b40)="$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") 1.013925788s ago: executing program 4 (id=9): socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9f"], 0x0, 0x3f}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE(0xd, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x3}, 0x48) 939.650742ms ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) prlimit64(0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) (async) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaa347f0a0003401108004500007000000000000190780a010102ac1414aa0b009078123002282500000000000000003300007f000001000060158c5544fb69097fe7b8443400037f000001000000007f00000100000000ac141400000000000a010102000000000000000000000000ac1e000100000000000000"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000280"], 0x34}}, 0x0) 832.534166ms ago: executing program 4 (id=10): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000540)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x120c480, &(0x7f0000000480)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@grpid}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@i_version}, {@nombcache}, {@errors_remount}, {@nouser_xattr}, {@data_err_ignore}]}, 0x3, 0x4ea, &(0x7f0000000680)="$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") bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001380)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$eJzs3E1rK1UYwPEnL02TXG4mC1EUpAfdqIuhja7lBmlBDFjaRmwFYdpONGRMSiZUImLryq34Ddy4KF12V1C/QDfudONGV90ILixSPJJ5aSftJNak6cvt/wdlTs9znuk5TBqeEzJz/P7XnzRqrlmzOpLMKkmIiJyIFCUpoURwTHrtjETtyquP/vz5xeXVtXfKlcr8klIL5ZXXS0qpwsz3n36eC4YdTstR8cPjP0q/HT179PzxPysf111Vd1Wz1VGWWm/92rHWHVtt1t2GqdSiY1uurepN12778ZYfrzmtra2uspqbj/Nbbdt1ldXsqobdVZ2W6rS7yvrIqjeVaZrqcV7iZGJ7H6rq3tKSVR4xeeOaJ4NR/a21HhLWibKVEpHcpUh1b6LzAgAAd9LF+j/ZK+lHqv+l4NX/vcHn9f/+Sz92Hr13UAjq/8NMXP3/xi/+ufrq/6yITKD+73e5Irr3dv7P4LHqf9wNM5f3tIm+39rtspUP/n89X36wP+s1qP8BAAAAAAAAAAAAAAAAAAAAALgPTrQ2tNZGeAx+Xjsf4fcNSN+9qXliMgZcf2NaRLK9q6+HXn/cc8ura5L1btxLF0Scr7ar21X/6Md/Dx8tMCuGnHqvh0CvHd55pHqK8oOzE+TvbFdTXqRck7o4YsucGFK8mK/1wtuV+Tnl68+fknw0vySGPBOfX4rNz8grL0fyTTHkpw1piSObvdf1qT7L/2JOqbferVzIz3njAAAAAAB4GpjqTOz+3TQHxf38s/11/+cDIpH9+Wzs/jxtvJC+3bUDAAAAAPBQuN3PGpbj2O34RkI7djsnQ8eM2UiPlj41bEwqssKrnjDjfd9FZHIrHdIIv0jRyERCWfk26B7lzOH6JzPnpIySNSN62p/VOH89/Nho0BhZnPT1Sg8IPffNd39Fep5c/cyJ4Km90dCbB9n/WOnEGlNXevPQqTHffQAAAADcpLDoz7lhz5PbnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/QkMeApa/rcWK3vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrvg3AAD//3xXBXQ=") r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\'0\t&&') ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) connect$can_bcm(r1, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 832.241336ms ago: executing program 1 (id=2): write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018009d4c0000000000000000020000000000ff"], 0x24}}, 0x0) 820.921566ms ago: executing program 1 (id=11): r0 = socket(0x11, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000c80)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008803, &(0x7f0000000080), 0x1, 0x638, &(0x7f0000000240)="$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") socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x15, 0x0, 0x0, 0x10}, {0x6}]}, 0x10) r6 = fcntl$dupfd(r4, 0x0, r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x108, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x108}}, 0x4008010) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = openat$cgroup_subtree(r11, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r12, &(0x7f00000061c0)=ANY=[@ANYBLOB='+pids'], 0x6) 757.706769ms ago: executing program 2 (id=12): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) (async, rerun: 64) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async, rerun: 64) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x101) (async) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='q', 0x1}], 0x1}}], 0x1, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, r2, 0x2666f000) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x90000, 0x4) getdents(r6, &(0x7f00000002c0)=""/201, 0xc9) 617.999134ms ago: executing program 0 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x20, 0x70bd2a, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='batadv0\x00', 0x10) r4 = dup(r3) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f00000004c0)={'pim6reg1\x00', 0x9}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4081) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800014}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1000, 0x7c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044011}, 0x450) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x20, 0x70bd2a, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='batadv0\x00', 0x10) (async) dup(r3) (async) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f00000004c0)={'pim6reg1\x00', 0x9}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4081) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800014}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1000, 0x7c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044011}, 0x450) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) (async) 546.338647ms ago: executing program 2 (id=14): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x470, &(0x7f0000000940)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x403, 0x4}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 471.620981ms ago: executing program 0 (id=15): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000dc0)=ANY=[], 0x1, 0x2a0, &(0x7f0000000b00)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) 409.482283ms ago: executing program 3 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xb1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000000}) listen(r3, 0x8) r6 = accept4(r3, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2044000}, 0x801) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000200)=0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a7"], 0x34}}, 0x0) 331.440376ms ago: executing program 0 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20100cc, &(0x7f0000000400)={[], [], 0xfe}, 0x1, 0x7b5, &(0x7f0000000440)="$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") 206.487322ms ago: executing program 1 (id=18): open(&(0x7f00000004c0)='./file0\x00', 0x2a4c0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r1}, 0x10) (async) r2 = io_uring_setup(0x6a0b, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001680)={0x9, 0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)=""/101, 0x65}], 0x0}, 0x20) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001dc0)={0x1, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0, 0x8}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000300)='ext4_sync_file_enter\x00', r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000680)='cgroup.controllers\x00', 0x26e1, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) (async) socket$kcm(0x10, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff", 0x4c, 0x0, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d408d01e7a89f7d2fef14ac50bdad92a5bbcbf1932a8425c874764655739df0dd8382513be410c2b65e842d9f781ef5c90fca228db5b61f831925e73f704e45217845ea2a03652989aa28f1da306ec932becca9a4d14f3ba4330cb9a6f3df4b97c5f0de64b5786bd2ce411da11005b0b9aac3d3e19021d5fdd56ca1a9", @ANYRESHEX=r9, @ANYRES32=r0, @ANYRESOCT=r5, @ANYBLOB=',\x00']) write$P9_RLERRORu(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) (async) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xff2e) 106.488015ms ago: executing program 2 (id=19): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x87, 0xffff, 0x18865939, 0xc00, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0xe}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) epoll_create(0x9) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x10, &(0x7f00000006c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001bc0)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='cpu&20\t&&') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000280)='\x9ed') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r9) 106.144105ms ago: executing program 4 (id=20): socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x6400c000) sendto$inet6(r0, &(0x7f0000000000)="e76e", 0x2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) r2 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x6248, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000f1000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 46.933188ms ago: executing program 0 (id=21): write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018009d4c0000000000000000020000000000ff"], 0x24}}, 0x0) 0s ago: executing program 0 (id=22): pipe(0x0) io_setup(0xac2, &(0x7f0000000500)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r2, 0x9, 0x0) getdents64(r2, 0xffffffffffffffff, 0x43) rt_sigaction(0x19, &(0x7f0000000040)={&(0x7f00000000c0)="0080d09634b8f30fc2d6db7f5e06aef4f40fa52e2e46b26cd626f00994aff7000000c4c1796f960600000040cd00f1453c990300000044ca0fa1", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x4) ftruncate(r3, 0x40000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRESHEX], 0x40}}, 0x20002015) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') getdents64(r4, &(0x7f0000000180)=""/33, 0x21) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x2e0, 0x0, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@arp={@dev, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'lo\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@local, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'bond0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000000d00000000"], &(0x7f00000000c0)=""/192, 0x32, 0xc0, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000b40)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x130800b, &(0x7f0000000a40), 0x1, 0x4bd, &(0x7f0000000b80)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) ftruncate(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f00000005c0)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in={0x2, 0x4e22, @dev}, @in6={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x43}, 0x493}]}, &(0x7f0000000a80)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x40a701) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000340)={r7, 0x1}, 0x8) syz_clone3(&(0x7f0000000740)={0x108000000, &(0x7f00000004c0), &(0x7f0000000640), &(0x7f0000000680), {0x3c}, &(0x7f0000001040)=""/4096, 0x1000, &(0x7f00000006c0)=""/17, &(0x7f0000000700)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7, {r6}}, 0x58) kernel console output (not intermixed with test programs): [ 16.420021][ T29] audit: type=1400 audit(1719709971.049:81): avc: denied { read } for pid=2765 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 18.918162][ T29] audit: type=1400 audit(1719709973.539:82): avc: denied { mounton } for pid=3067 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.919050][ T3067] cgroup: Unknown subsys name 'net' [ 18.940859][ T29] audit: type=1400 audit(1719709973.539:83): avc: denied { mount } for pid=3067 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.968275][ T29] audit: type=1400 audit(1719709973.569:84): avc: denied { unmount } for pid=3067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.105276][ T3067] cgroup: Unknown subsys name 'rlimit' [ 19.228175][ T29] audit: type=1400 audit(1719709973.849:85): avc: denied { create } for pid=3067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.248734][ T29] audit: type=1400 audit(1719709973.849:86): avc: denied { write } for pid=3067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.257014][ T3069] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.269054][ T29] audit: type=1400 audit(1719709973.849:87): avc: denied { read } for pid=3067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.297899][ T29] audit: type=1400 audit(1719709973.849:88): avc: denied { mounton } for pid=3067 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.322740][ T29] audit: type=1400 audit(1719709973.849:89): avc: denied { mount } for pid=3067 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.346079][ T29] audit: type=1400 audit(1719709973.899:90): avc: denied { relabelto } for pid=3069 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 19.371599][ T29] audit: type=1400 audit(1719709973.899:91): avc: denied { write } for pid=3069 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.400277][ T3067] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.923740][ T3076] chnl_net:caif_netlink_parms(): no params data found [ 19.935028][ T3082] chnl_net:caif_netlink_parms(): no params data found [ 19.975442][ T3077] chnl_net:caif_netlink_parms(): no params data found [ 20.010949][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.018052][ T3076] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.025152][ T3076] bridge_slave_0: entered allmulticast mode [ 20.031614][ T3076] bridge_slave_0: entered promiscuous mode [ 20.040327][ T3081] chnl_net:caif_netlink_parms(): no params data found [ 20.056680][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.063722][ T3076] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.070850][ T3076] bridge_slave_1: entered allmulticast mode [ 20.077382][ T3076] bridge_slave_1: entered promiscuous mode [ 20.117676][ T3076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 20.139964][ T3076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 20.149069][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.156127][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.163465][ T3082] bridge_slave_0: entered allmulticast mode [ 20.169917][ T3082] bridge_slave_0: entered promiscuous mode [ 20.178902][ T3085] chnl_net:caif_netlink_parms(): no params data found [ 20.187444][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.194496][ T3077] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.201643][ T3077] bridge_slave_0: entered allmulticast mode [ 20.207970][ T3077] bridge_slave_0: entered promiscuous mode [ 20.214474][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.221513][ T3077] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.228617][ T3077] bridge_slave_1: entered allmulticast mode [ 20.234988][ T3077] bridge_slave_1: entered promiscuous mode [ 20.245523][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.252560][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.259668][ T3082] bridge_slave_1: entered allmulticast mode [ 20.266167][ T3082] bridge_slave_1: entered promiscuous mode [ 20.288982][ T3076] team0: Port device team_slave_0 added [ 20.312837][ T3076] team0: Port device team_slave_1 added [ 20.331878][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.338955][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.346123][ T3081] bridge_slave_0: entered allmulticast mode [ 20.352424][ T3081] bridge_slave_0: entered promiscuous mode [ 20.361936][ T3077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 20.376148][ T3076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 20.383144][ T3076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.409115][ T3076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 20.420955][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 20.430142][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.437233][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.444325][ T3081] bridge_slave_1: entered allmulticast mode [ 20.450527][ T3081] bridge_slave_1: entered promiscuous mode [ 20.459540][ T3077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 20.472509][ T3076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 20.479535][ T3076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.505409][ T3076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 20.517070][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 20.558717][ T3077] team0: Port device team_slave_0 added [ 20.566084][ T3077] team0: Port device team_slave_1 added [ 20.577290][ T3082] team0: Port device team_slave_0 added [ 20.583906][ T3081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 20.610678][ T3082] team0: Port device team_slave_1 added [ 20.616633][ T3077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 20.623560][ T3077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.649508][ T3077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 20.661026][ T3081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 20.675098][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.682260][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.689362][ T3085] bridge_slave_0: entered allmulticast mode [ 20.695691][ T3085] bridge_slave_0: entered promiscuous mode [ 20.703839][ T3076] hsr_slave_0: entered promiscuous mode [ 20.709655][ T3076] hsr_slave_1: entered promiscuous mode [ 20.719948][ T3077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 20.726904][ T3077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.752800][ T3077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 20.768767][ T3081] team0: Port device team_slave_0 added [ 20.774701][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.781801][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.789207][ T3085] bridge_slave_1: entered allmulticast mode [ 20.795410][ T3085] bridge_slave_1: entered promiscuous mode [ 20.810882][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 20.817953][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.844042][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 20.857581][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 20.864581][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 20.890542][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 20.901844][ T3081] team0: Port device team_slave_1 added [ 20.930416][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 20.956624][ T3077] hsr_slave_0: entered promiscuous mode [ 20.962616][ T3077] hsr_slave_1: entered promiscuous mode [ 20.968472][ T3077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 20.976022][ T3077] Cannot create hsr debugfs directory [ 20.986697][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 20.995936][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.002860][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.028793][ T3081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.053444][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.060411][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.086382][ T3081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 21.098714][ T3082] hsr_slave_0: entered promiscuous mode [ 21.104711][ T3082] hsr_slave_1: entered promiscuous mode [ 21.110476][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 21.118019][ T3082] Cannot create hsr debugfs directory [ 21.137559][ T3085] team0: Port device team_slave_0 added [ 21.161255][ T3085] team0: Port device team_slave_1 added [ 21.194025][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.201038][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.227167][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.244422][ T3081] hsr_slave_0: entered promiscuous mode [ 21.250396][ T3081] hsr_slave_1: entered promiscuous mode [ 21.256236][ T3081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 21.263790][ T3081] Cannot create hsr debugfs directory [ 21.275488][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.282415][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 21.308344][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 21.399751][ T3085] hsr_slave_0: entered promiscuous mode [ 21.405665][ T3085] hsr_slave_1: entered promiscuous mode [ 21.411435][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 21.419041][ T3085] Cannot create hsr debugfs directory [ 21.461655][ T3076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 21.469889][ T3076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 21.481601][ T3076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 21.490077][ T3076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 21.541852][ T3082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 21.550419][ T3082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 21.561202][ T3082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 21.569941][ T3082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 21.591860][ T3077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 21.601789][ T3077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 21.610049][ T3077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 21.621125][ T3077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 21.655147][ T3081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 21.665685][ T3081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 21.692697][ T3076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.700451][ T3081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 21.715139][ T3085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 21.724235][ T3085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 21.732603][ T3081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 21.745210][ T3085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 21.753533][ T3085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 21.778382][ T3076] 8021q: adding VLAN 0 to HW filter on device team0 [ 21.798476][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.805574][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.825104][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.832228][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.862277][ T3081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.871171][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.900995][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 21.918271][ T3081] 8021q: adding VLAN 0 to HW filter on device team0 [ 21.935413][ T3077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.943957][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.951031][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.960010][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.967146][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.976401][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.983444][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.992283][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.999357][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.022908][ T3082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 22.033279][ T3082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.061320][ T3076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.074767][ T3077] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.085387][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.094748][ T3081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 22.105296][ T3081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.131869][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.138945][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.155772][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.167319][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.174400][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.194924][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.202065][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.218634][ T3081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.226912][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.233975][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.250020][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.298127][ T3085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 22.308575][ T3085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.338160][ T3076] veth0_vlan: entered promiscuous mode [ 22.367172][ T3077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.377483][ T3076] veth1_vlan: entered promiscuous mode [ 22.403341][ T3076] veth0_macvtap: entered promiscuous mode [ 22.416318][ T3076] veth1_macvtap: entered promiscuous mode [ 22.450899][ T3076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 22.465028][ T3076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 22.479151][ T3081] veth0_vlan: entered promiscuous mode [ 22.487326][ T3081] veth1_vlan: entered promiscuous mode [ 22.495535][ T3076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.504423][ T3076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.513112][ T3076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.521915][ T3076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.553532][ T3081] veth0_macvtap: entered promiscuous mode [ 22.568453][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.580152][ T3081] veth1_macvtap: entered promiscuous mode [ 22.600887][ T3082] veth0_vlan: entered promiscuous mode [ 22.616602][ T3077] veth0_vlan: entered promiscuous mode [ 22.626303][ T3082] veth1_vlan: entered promiscuous mode [ 22.644715][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 22.655387][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 22.669146][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 22.681490][ T3082] veth0_macvtap: entered promiscuous mode [ 22.689253][ T3082] veth1_macvtap: entered promiscuous mode [ 22.697640][ T3077] veth1_vlan: entered promiscuous mode [ 22.708678][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 22.719177][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 22.729767][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 22.747127][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 22.757591][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 22.767413][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 22.777944][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 22.789133][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 22.800814][ T3081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.809595][ T3081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.818465][ T3081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.827275][ T3081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.845605][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 22.856128][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 22.865942][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 22.876393][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 22.887210][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 22.898780][ T3077] veth0_macvtap: entered promiscuous mode [ 22.917156][ T3082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.925986][ T3082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.934861][ T3082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.943544][ T3082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 22.960491][ T3085] veth0_vlan: entered promiscuous mode [ 22.970076][ T3077] veth1_macvtap: entered promiscuous mode [ 22.988600][ T3077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 22.999083][ T3077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.008920][ T3077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.019351][ T3077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.029191][ T3077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.039611][ T3077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.050218][ T3077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.063429][ T3085] veth1_vlan: entered promiscuous mode [ 23.076469][ T3077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.087066][ T3077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.096902][ T3077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.107329][ T3077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.117146][ T3077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.127554][ T3077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.141871][ T3077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.166752][ T3077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.175726][ T3077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.184577][ T3077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.193264][ T3077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.216567][ T3085] veth0_macvtap: entered promiscuous mode [ 23.242574][ T3085] veth1_macvtap: entered promiscuous mode [ 23.243122][ T3233] loop3: detected capacity change from 0 to 512 [ 23.250205][ T3238] loop4: detected capacity change from 0 to 1024 [ 23.260743][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.271388][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.281278][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.291714][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.301549][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.311992][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.321801][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 23.325161][ T3238] ext4: Unknown parameter '' [ 23.332272][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.347625][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.350553][ T3233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 23.367704][ T3233] ext4 filesystem being mounted at /root/syzkaller.OZEcqj/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 23.371574][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.390252][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.400086][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.410584][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.420434][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.430880][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.440691][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 23.451117][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 23.476545][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.495541][ T3085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.504354][ T3085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.513077][ T3085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.521792][ T3085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.557328][ C0] hrtimer: interrupt took 38750 ns [ 23.621301][ T3253] loop4: detected capacity change from 0 to 512 [ 23.648197][ T3259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.651319][ T3253] EXT4-fs: Ignoring removed oldalloc option [ 23.662776][ T3253] EXT4-fs: Ignoring removed i_version option [ 23.683951][ T3253] ext4: Unknown parameter 'nouser_xattr' [ 23.721747][ T3245] syz.3.4 (3245) used greatest stack depth: 9640 bytes left [ 23.778040][ T3233] ªªªªªª: renamed from bridge_slave_0 (while UP) [ 23.802336][ T3253] loop4: detected capacity change from 0 to 128 [ 23.809008][ T3261] loop1: detected capacity change from 0 to 1024 [ 23.834384][ T3261] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 23.849091][ T3253] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 23.858750][ T3271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=3271 comm=syz.0.13 [ 23.878990][ T3261] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 23.889998][ T3261] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 23.920223][ T3276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=3276 comm=syz.0.13 [ 23.924395][ T3261] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 23.944269][ T3261] journal_load_superblock: Cannot read journal superblock [ 23.951406][ T3261] EXT4-fs (loop1): Could not load journal inode [ 23.958517][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 23.958540][ T29] audit: type=1326 audit(1719709978.499:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3232 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc0245b99 code=0x7ffc0000 [ 23.988116][ T29] audit: type=1326 audit(1719709978.569:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3232 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc0245b99 code=0x7ffc0000 [ 24.002710][ T3286] loop2: detected capacity change from 0 to 512 [ 24.026110][ T3288] loop0: detected capacity change from 0 to 256 [ 24.030946][ T29] audit: type=1400 audit(1719709978.649:244): avc: denied { mounton } for pid=3283 comm="syz.2.14" path="/root/syzkaller.dkZZ8z/2/file0" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 24.057252][ T3286] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 24.064615][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 24.065970][ T3286] EXT4-fs (loop2): invalid journal inode [ 24.080096][ T3286] EXT4-fs (loop2): can't get journal size [ 24.086507][ T3289] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.100733][ T29] audit: type=1400 audit(1719709978.649:245): avc: denied { unmount } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.105952][ T3286] EXT4-fs (loop2): 1 truncate cleaned up [ 24.120384][ T29] audit: type=1400 audit(1719709978.709:246): avc: denied { create } for pid=3260 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 24.144294][ T3286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 24.145930][ T29] audit: type=1400 audit(1719709978.719:247): avc: denied { create } for pid=3252 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.159797][ T3286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 24.177281][ T29] audit: type=1400 audit(1719709978.719:248): avc: denied { connect } for pid=3252 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.205761][ T29] audit: type=1400 audit(1719709978.719:249): avc: denied { create } for pid=3252 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 24.209591][ T3291] Zero length message leads to an empty skb [ 24.240237][ T29] audit: type=1400 audit(1719709978.749:250): avc: denied { unmount } for pid=3076 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 24.260214][ T29] audit: type=1400 audit(1719709978.779:251): avc: denied { mount } for pid=3283 comm="syz.2.14" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.331855][ T3298] loop0: detected capacity change from 0 to 2048 [ 24.347538][ T3298] ======================================================= [ 24.347538][ T3298] WARNING: The mand mount option has been deprecated and [ 24.347538][ T3298] and is ignored by this kernel. Remove the mand [ 24.347538][ T3298] option from the mount to silence this warning. [ 24.347538][ T3298] ======================================================= [ 24.385845][ T3298] ext4: Unknown parameter 'þ' [ 24.452500][ T3302] hub 9-0:1.0: USB hub found [ 24.457191][ T3302] hub 9-0:1.0: 8 ports detected [ 24.467929][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 24.493307][ T3070] ================================================================== [ 24.501484][ T3070] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_current [ 24.509658][ T3070] [ 24.511977][ T3070] write to 0xffff888104ba35e0 of 8 bytes by task 3021 on cpu 0: [ 24.514907][ T3314] loop0: detected capacity change from 0 to 512 [ 24.519588][ T3070] inode_set_ctime_current+0x38/0x50 [ 24.519620][ T3070] shmem_symlink+0x32d/0x3a0 [ 24.519637][ T3070] vfs_symlink+0xca/0x1d0 [ 24.519655][ T3070] do_symlinkat+0xe3/0x350 [ 24.544395][ T3070] __x64_sys_symlink+0x56/0x70 [ 24.549149][ T3070] x64_sys_call+0x14d2/0x2d70 [ 24.553815][ T3070] do_syscall_64+0xc9/0x1c0 [ 24.558306][ T3070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 24.564185][ T3070] [ 24.566490][ T3070] read to 0xffff888104ba35e0 of 8 bytes by task 3070 on cpu 1: [ 24.574016][ T3070] generic_fillattr+0x1e0/0x2f0 [ 24.578856][ T3070] shmem_getattr+0x17b/0x200 [ 24.583433][ T3070] vfs_getattr+0x19b/0x1e0 [ 24.587837][ T3070] vfs_statx+0x140/0x320 [ 24.592072][ T3070] vfs_fstatat+0xcd/0x100 [ 24.596390][ T3070] __se_sys_newfstatat+0x58/0x260 [ 24.601398][ T3070] __x64_sys_newfstatat+0x55/0x70 [ 24.606406][ T3070] x64_sys_call+0x1451/0x2d70 [ 24.611070][ T3070] do_syscall_64+0xc9/0x1c0 [ 24.615559][ T3070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 24.621436][ T3070] [ 24.623747][ T3070] value changed: 0x0000000021eede1b -> 0x000000000683d439 [ 24.630843][ T3070] [ 24.633148][ T3070] Reported by Kernel Concurrency Sanitizer on: [ 24.639288][ T3070] CPU: 1 PID: 3070 Comm: udevd Not tainted 6.10.0-rc5-syzkaller-00280-g27b31deb900d #0 [ 24.648901][ T3070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 24.658940][ T3070] ==================================================================