last executing test programs: 6m53.218978956s ago: executing program 32 (id=75): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12006eb376b42f5efb6c00000200a3469e10000019fb662abb3382ee473657432f05ebd6d30763ba6552c34bd12c9e6b0362df", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), 0x0}, 0x20) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfd44) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) close(0x3) 6m5.935663944s ago: executing program 33 (id=454): r0 = perf_event_open(0x0, 0x0, 0xffeffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x16, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4m3.488955435s ago: executing program 34 (id=1570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x164}}, 0x0) 3m26.613957861s ago: executing program 35 (id=1759): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x3b04, &(0x7f0000000680)={0x0, 0x565, 0x8, 0x2, 0x153}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000100)) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47, 0x120, 0x0, 0x0) r3 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140), &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4307, &(0x7f0000000780)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f0000000180)=0x0, &(0x7f0000000300), &(0x7f00000004c0)) syz_io_uring_submit(r7, r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x3, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r6}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x10b002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)="a0c4", 0xfffffec3}], 0x2) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) 2m42.552523131s ago: executing program 36 (id=2098): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f030000000000a6040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m41.446452076s ago: executing program 6 (id=2105): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) 2m41.280541978s ago: executing program 6 (id=2108): membarrier(0x10, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10}}, './file0\x00'}) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000140)=0x7, 0x4) 2m41.123944839s ago: executing program 6 (id=2110): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x4371, 0x81) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r2, &(0x7f0000000540)="10d48760b1dfb2c7da60dba488376bf9e2efeecec81038fd232abbc0d5b73e41dca95dc968a3afdbc1e12e4581a1405533f4f2dbfab979b8e4d27544a85a840c58fd3a6d017f4b39028a60ea34c54592ec954366d513b54a4ede4710571654b1806981ea8590f5fe4fcde8cdc3310dfa374233134a", 0x75) ioctl$TIOCSETD(r3, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000200)={0x6, 0x0, 0x9}) socket$kcm(0x10, 0x400000002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xc3ff, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x190c7}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x43}]}, 0x3c}}, 0x0) 2m39.65547592s ago: executing program 6 (id=2116): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x25e, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) fallocate(r0, 0x54, 0xbf5, 0x800) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x320, 0xfffffffffffffffd}, 0x50c, 0x0, 0xe723, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r3, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40), 0x700}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000820404000000fedbdf250000740b13403900f17cfe828347d051591cee4839c5b3308ee3ca2bd2b4", @ANYRES32=r5, @ANYBLOB="0108000007500500580012800b000100627269646765000048000280050019000200"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m39.320504313s ago: executing program 6 (id=2119): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000020000", @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c"], 0x3c}}, 0x0) 2m38.881292703s ago: executing program 6 (id=2121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000f5ff00000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 2m38.828270877s ago: executing program 37 (id=2121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000f5ff00000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 2m12.719233922s ago: executing program 3 (id=2300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x481, 0x400000) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000050, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d72656c617865642c6d61703d6f66662c686964652c6d61703d6e6f726d616c2c63727566742c686964652c636865636b3d7273657373696f6e3d3078303030303030303030303030303035342c636865636b3d72656c617865642c00c431faf5ed4147f4cf4f2e9e3bf097152ea42d13d5698120d236ed0faf2d9c0c3420c2459c520565cd441fddc65b7fd380123b6285044c67be7a650f2dc607d2da606d7fe3ca65a3b8abe632f38ff0615af777feffac038bcd36fa9259f09d8396e8e05fc5a0b8c618fd4e1190d1e14e73aee3ae9b799e1ff81086fcfdbfa207fed64441267969e2ac72510642c82d26"], 0x1, 0x557, &(0x7f0000000580)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x193) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r4, 0x0) setresuid(0x0, 0xee01, 0x0) mincore(&(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/176) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r6, &(0x7f0000000a00)="c7", 0x1) sendfile(r6, r5, 0x0, 0x3ffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="44000280400001"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r11) sendmsg$nl_xfrm(r5, &(0x7f0000000d00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)=@expire={0x1c0, 0x18, 0x8, 0x70bd26, 0x25dfdbfe, {{{@in6=@loopback, @in6=@empty, 0x4e23, 0x0, 0x4e21, 0x8000, 0xa, 0x0, 0x0, 0x3a}, {@in=@loopback, 0x4d2, 0x32}, @in6=@private1, {0x9, 0x19a8, 0x7, 0x2, 0x5, 0x8000000000000001, 0x1, 0x6}, {0xff, 0x8d6, 0xfff, 0x1ff}, {0x2, 0x2, 0x10001}, 0x70bd2d, 0x0, 0xa, 0x6, 0xed, 0x83}, 0x8}, [@srcaddr={0x14, 0xd, @in6=@local}, @etimer_thresh={0x8, 0xc, 0x1}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4e20, 0x8, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x4, r9, r11}, {0x2, 0x5, 0x10001, 0x5, 0xfffffffffffffff9, 0xfffffffffffffff7, 0xe, 0xff}, {0x4, 0x8000000000000000, 0x8000000000000001, 0x9}, 0x101, 0x6e6bb0, 0x0, 0x0, 0x3, 0x2}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r12 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x802) writev(r12, &(0x7f0000001180)=[{&(0x7f0000000040)="aefdda9d242003005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb01", 0x24}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000000200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000a61bdded8709963ec3883c7da5203c0012800b000100697036746e6c00002c00028014000300ff01000000000000000000000000000114000200fc020000000000000000000000000000760cdcc4615a5e3d53969201c16b3c280e680aefd1"], 0x5c}}, 0x0) 2m12.420848143s ago: executing program 3 (id=2302): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x2c) r1 = open(0x0, 0x101000, 0x190) getdents(r1, &(0x7f0000000040)=""/48, 0x30) ptrace(0x10, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00001000000000000000000020000300050000000000020000000000ffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 2m12.228602176s ago: executing program 3 (id=2304): r0 = socket(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r2 = dup3(r1, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000102004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000200000000000000000000100000002"], 0x110) 2m12.17601186s ago: executing program 3 (id=2305): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m11.764501748s ago: executing program 3 (id=2310): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x4371, 0x81) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r2, &(0x7f0000000540)="10d48760b1dfb2c7da60dba488376bf9e2efeecec81038fd232abbc0d5b73e41dca95dc968a3afdbc1e12e4581a1405533f4f2dbfab979b8e4d27544a85a840c58fd3a6d017f4b39028a60ea34c54592ec954366d513b54a4ede4710571654b1806981ea8590f5fe4fcde8cdc3310dfa374233134a", 0x75) ioctl$TIOCSETD(r3, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000200)={0x6, 0x0, 0x9}) socket$kcm(0x10, 0x400000002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xc3ff, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x190c7}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x43}]}, 0x3c}}, 0x0) 2m10.452868168s ago: executing program 3 (id=2318): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async, rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = fcntl$dupfd(r0, 0x406, r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x878e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56540, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040084) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r11, {0xb}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x14, 0x2, 0x4, 0x2, 0xf, 0x6, 0xb, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x1002, 0xd06, 0xff05, 0x8000, 0x13, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x4, 0x8, 0x4, 0x8, 0x7, 0x9, 0x5, 0x4, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f0000000140)=0x5, 0x4) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) getsockopt(r0, 0x28, 0x2, &(0x7f0000003180)=""/4106, &(0x7f0000000040)=0x100a) 2m10.407341261s ago: executing program 38 (id=2318): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async, rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = fcntl$dupfd(r0, 0x406, r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x878e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56540, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040084) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r11, {0xb}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x14, 0x2, 0x4, 0x2, 0xf, 0x6, 0xb, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x1002, 0xd06, 0xff05, 0x8000, 0x13, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x4, 0x8, 0x4, 0x8, 0x7, 0x9, 0x5, 0x4, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f0000000140)=0x5, 0x4) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) getsockopt(r0, 0x28, 0x2, &(0x7f0000003180)=""/4106, &(0x7f0000000040)=0x100a) 1m47.339092448s ago: executing program 4 (id=2481): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x100001}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) 1m47.067721136s ago: executing program 4 (id=2482): r0 = memfd_secret(0x80000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x223a, 0x0, r0, 0x100, '\x00', 0x0, r0, 0x3, 0x5, 0x5}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0xffffff23, 0x0}, 0xfffffdb7) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x623, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x36}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x240080c5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x59}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4391a8b8148ed9af}, 0x4000001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r9, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r9, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x21}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 1m46.031214238s ago: executing program 4 (id=2488): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x301, 0x0, 0xffff0000, {0x0, 0x0, 0x2, 0x0, {0x0, 0x300}, 0xf0ffdfff}}, 0x4c}}, 0x0) 1m45.756110597s ago: executing program 4 (id=2490): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x25e, &(0x7f0000000540)="$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") creat(&(0x7f0000000180)='./file1\x00', 0x32) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x320, 0xfffffffffffffffd}, 0x50c, 0x0, 0xe723, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') 1m45.487856736s ago: executing program 4 (id=2493): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffa, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x93, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x9105, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0xfffffffc, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x8, 0xc, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0xfffffffd, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x1081, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty=0xe803}}}], 0x20}}], 0x1, 0x8000004) 1m45.148666838s ago: executing program 4 (id=2497): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000040)={[{@bh}, {@grpquota}]}, 0x4, 0x4fb, &(0x7f0000000900)="$eJzs3c1vVF0ZAPDnTju09B3egrJQo4KIoiFMP4CG4ELYaAwhMRJXLqC2Q9N0hmk6LdLKoizdm0jiSv8Edy5MWLlw5053bnBhgko01MTFmHvn0g5thxb7MaXz+yV37j3nzsxzzkzPOXNPOz0B9KzzEbEaESci4kFEDOf5Sb7FrdaW3u/N66dTa6+fTiXRbN77R5KdT/Oi7TGpT/LnHIyIH3w34sfJ1riN5ZW5yWq1spCnRxZr8yON5ZUrs4U8Z3xibGL0xtXr4/tW13O137z6zuydH/7ut196+cfVb/40LVbpZ6eyc+31aNO315itqhej1JbXHxF39vrER0h//vPDxydtbZ+JiAtZ+x+OvuzdBACOs2ZzOJrD7WkA4LhLr/9LkRTK+VxAKQqFcrk1h3c2hgrVemPx8nB96dF0ZHNYp6NYeDhbrYzmc4Wno5ik6bHseCM9vil9NSLORMTPB05m6fJUvTrdzQ8+ANDDPtk0/v97oDX+AwDH3GC3CwAAHDrjPwD0HuM/APSeDxj/fTsQAI4J1/8A0HuM/wDQe3Yc/5/l+5MHXxYA4MB9/+7ddGuu5f//evrx8tK3So+vTFcac+Xa0lR5qr4wX56p12eqlfJUs7nT81Xr9fmxa+vJxvLK/Vp96dHi/dna5EzlfqV4wPUBAHZ25tyLPycRsXrzZLZF21oOxmo43grdLgDQNXte4Ar4aPk+D/SuXVzjmwaAY26bJXrf0fFPhJ5b/BU+Vpc+b/4fepX5f+hd/9/8/7f3vRzA4TP/D72r2Uys+Q8APcYcP7Cn3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjyplW1IoZ2uBr6a3hXI54lREnI5i8nC2WhmNiE8j4k8DxYE0PdbtQgMAe1T4W5Kv/3Vp+GJp89kTyX8Gsn1E/OSX937xZHJxcWEszf/nev7i8zx//EQ3KgAAtLu1Nas1Tuf7tgv5N6+fTr3dDrOIr263FhdN467lW+tMf/Rn+8EoRsTQv5I83ZJ+Xunbh/irzyLicxv1f9IWoZTNgbRWPt0cP4196gDib7z+m+MX3olfyM6l+2L2Wnx2H8oCvebF7VY/mbe9tInl7a8Q57P99u1/MOuh9u5t/7e2pf8rrPd/fVviJ1mbP7+efn9JXl37/fe2ZDaHW+eeRXyhf7v4yXr8pEP/e3GXdfzLF798odO55q8iLsX28VtqWTc7slibH2ksr1yZrU3OVGYqj8bHJ8YmRm9cvT4+ks1Rt27/sF2Mv9+8/Gmn+Gn9hzrEH9yh/l/bZf1//d8HP/rKe+J/46vbv/9n3xM/HRO/vsv4k0O3Oi7fncaf7lD/nd7/y7uM//KvK9O7vCsAcAgayytzk9VqZWGHg/Sz5k73ObSDvg9/1EBEHI3CH72DWI04AsVwcKQOut0zAQdto9F3uyQAAAAAAAAAAAAAAEAnjeWVuYE42K8TdbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHF//CwAA//+zZ8zN") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000104e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)=0xffffffff00002001) 1m45.091373543s ago: executing program 39 (id=2497): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000040)={[{@bh}, {@grpquota}]}, 0x4, 0x4fb, &(0x7f0000000900)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000104e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)=0xffffffff00002001) 1m8.19306409s ago: executing program 0 (id=2825): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x248, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x158) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) 1m6.59832424s ago: executing program 0 (id=2834): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x4371, 0x81) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r2, &(0x7f0000000540)="10d48760b1dfb2c7da60dba488376bf9e2efeecec81038fd232abbc0d5b73e41dca95dc968a3afdbc1e12e4581a1405533f4f2dbfab979b8e4d27544a85a840c58fd3a6d017f4b39028a60ea34c54592ec954366d513b54a4ede4710571654b1806981ea8590f5fe4fcde8cdc3310dfa374233134a", 0x75) ioctl$TIOCSETD(r3, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000200)={0x6, 0x0, 0x9}) socket$kcm(0x10, 0x400000002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xc3ff, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x190c7}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x43}]}, 0x3c}}, 0x0) 1m5.557343881s ago: executing program 0 (id=2843): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 1m5.448412359s ago: executing program 0 (id=2845): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6f19, 0x100, 0x41, 0x400}, &(0x7f0000000100), &(0x7f0000000040)=0x0, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x10000018}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9801) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001bc0)=[{{&(0x7f0000000280)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="7ea4517d94ecfa0e61afb8f3c860f5d500"/29, 0x1d}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000002300)="ef", 0x1}, {&(0x7f00000004c0)="1975a2cd526385d4fc881c23a1a26f22639f0b8eb9f7344e47c3572f1215864ca1f05037605a802743457335271e3c788f1dfd3f497b819eb01a0111de20fbbe9282bc3d4d78f4b21a7c493d6bbe6514a1aa467df49dfdae34c80cb538a3cd4c6e1dbac34979c203a2a4a583146b77d18c2d3e9ecfb28aab16ed3af6ef0e2e15b7b20b196e406cc96d229e7b822a00312f6ef21086e6de226a868afafebf8db479867453fc1cc4ebcd8ab46385e173d99c46d6cd8310ed29f05268673c80bf5849661329a734ebd5be7910335359d0e8d8727d4bff423cde3c15f61f65862db307", 0xe1}], 0x2}}], 0x2, 0x1005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000700000000000000000000000000000000000000b135083591200a026d8d14b843e16a1ef67d203382e7740336651f79bd4512492fff5a061dc1c94ad904851e25e3aa5ea1e8139841af5625f28b849371fb47516a47945a5a03a156d11fc51898f39a878203c664cb917ba7f411124959b99d593bc7347abafbe69ece0e3b85e8dac861deff8259f802c112aab0c1de083bed6a61d0a7fd375b039687f50583e329b77cf7f1c392f907a17c522081f3ef3578279d0e5055cd05d806eb3523b563b273ad83d01bc49a078e4c3a840b2e75fea61e53fd3f6a24a4d293afc5bd7cd121d68642aaec400f4fa22edc708be503f3"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r7 = syz_open_pts(r5, 0x8182) dup3(r7, r5, 0x0) ioctl$TIOCMSET(r5, 0x5418, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) readv(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a6601, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @mcast1, 0x2000}, 0x1c) 1m4.652654384s ago: executing program 0 (id=2854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) 1m3.813740861s ago: executing program 0 (id=2863): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) getpgrp(r0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) shutdown(r1, 0x1) (async) setsockopt(r1, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) ioprio_set$pid(0x1, r0, 0x4004) (async) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = dup(r4) ptrace$pokeuser(0x6, r0, 0x6, 0x4) (async) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000000), 0x0, 0x0, 0x2) r6 = syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) sched_getscheduler(r6) 1m3.764849615s ago: executing program 40 (id=2863): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) getpgrp(r0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) shutdown(r1, 0x1) (async) setsockopt(r1, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) ioprio_set$pid(0x1, r0, 0x4004) (async) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = dup(r4) ptrace$pokeuser(0x6, r0, 0x6, 0x4) (async) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000000), 0x0, 0x0, 0x2) r6 = syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) sched_getscheduler(r6) 17.249505744s ago: executing program 7 (id=3164): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x842, 0x4}, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40004}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000640)={&(0x7f0000000240)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="96d2d8c088", 0x5}], 0x1}, 0x4000080) 14.53918072s ago: executing program 7 (id=3170): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000000000000000fdfdffff00"}) 14.347934314s ago: executing program 7 (id=3174): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x2400c0c1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000200)={[{@block_validity}, {@minixdf}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@auto_da_alloc}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x1, 0xa, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) read(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0xa00, 0x0, 0x4}, 0x2004a090) 13.756685854s ago: executing program 7 (id=3178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 13.594351695s ago: executing program 7 (id=3180): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 13.345195012s ago: executing program 7 (id=3183): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_mreq(r0, 0x84, 0x1b, &(0x7f0000000140)={@remote}, 0x14) 13.345013652s ago: executing program 41 (id=3183): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_mreq(r0, 0x84, 0x1b, &(0x7f0000000140)={@remote}, 0x14) 4.864063966s ago: executing program 9 (id=3242): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x4, 0x400e) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x810, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x1, 0x24a, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendto$rxrpc(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) r4 = socket(0xa, 0x80000, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x68, 0x4000094}, 0x24000052) r5 = openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000001) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x44) socket$inet6(0xa, 0xa, 0xffff2774) r7 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xe0d36febe8fe242e}, 0x810) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3.960681048s ago: executing program 2 (id=3248): syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) unshare(0x28000600) 3.710292725s ago: executing program 2 (id=3249): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x7f49, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0xffffffff}], 0x1, 0x4004000) 3.560307715s ago: executing program 2 (id=3250): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0xb7, 0x1000) 3.160978673s ago: executing program 9 (id=3252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x5, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, 0xffffffffffffffff, 0x7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r3, 0x7, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9cff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(0x0, 0x481, 0x400000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x26}, 0x28) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.003991023s ago: executing program 5 (id=3254): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000002006700000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 2.581277933s ago: executing program 8 (id=3255): socket(0x2, 0x80805, 0x0) unshare(0x600) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x25, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 2) 2.537905086s ago: executing program 5 (id=3256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 2.537332466s ago: executing program 2 (id=3257): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 2.165536791s ago: executing program 1 (id=3258): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x106200, 0x4, 0x8, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x7, 0x4, 0x3ffd, 0x7}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x48, {0x2, 0x0, @broadcast}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_io_uring_setup(0x7b92, &(0x7f0000000280)={0x0, 0x7bc, 0x200, 0x4, 0x122}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) io_uring_setup(0x2c18, &(0x7f00000003c0)={0x0, 0x2d04, 0x200, 0x0, 0x5b, 0x0, r5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00fe1001000071101a000000000095bc000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40, 0x80) openat(r7, &(0x7f00000006c0)='./file0\x00', 0x240202, 0x1) 2.108198535s ago: executing program 9 (id=3259): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000040)={[{@data_err_ignore}, {@noblock_validity}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa5a}}, {@jqfmt_vfsv0}, {@nodiscard}, {@nombcache}]}, 0x1, 0xbbb, &(0x7f0000001800)="$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") (async, rerun: 64) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000100)={0x5, 0x0, 0x2000000, 0x5}) (async, rerun: 32) socket(0x2a, 0x2, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r3 = io_uring_setup(0x115c, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0) (async, rerun: 32) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000180)='./file0\x00', 0x208200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) 2.088144096s ago: executing program 8 (id=3260): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, './file0\x00'}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r2, r2, 0x0, 0x8) perf_event_open(&(0x7f0000000cc0)={0x1, 0x45, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x3}, 0x100, 0x8, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r3, 0x1, &(0x7f0000000140)={{}, {r4, r5+60000000}}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r8 = dup3(r7, r6, 0x80000) write$cgroup_devices(r8, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) timer_gettime(r3, &(0x7f0000000000)) dup(r1) 1.912968679s ago: executing program 9 (id=3261): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_clone(0x100, &(0x7f0000000640)="c95d75ee3d410623438f73e9c713119512c781c68c58333014bcd8dffe", 0x1d, 0x0, &(0x7f00000006c0), &(0x7f0000000700)="419c4d34a3a147b17b145d981bde22e0deecf24d71ef87d3abc7750d32dc59f92ea04cd14373e55bf4e92579f3143b397853530c5aa043ff2cd3cdc11f27b7c0c2a7f821abaac4bff6bedee672a183e5811a1ccb1bee119514f0dab30d327239368372cbb2146992ab34a3941c2b64ed17bc736771bd2d48a251ab760fe4ba1702dab846730c8b64a6e306e23c3efb36781d44a796e5e7ccb300cd313f2e4c646e40ca74a1573ac11032cb590a38b77729ec0f4d2b1e6eadec4060e6261f3fba92c0c5ad") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000a00)='syz0\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r8, &(0x7f0000000a00), 0x0}, 0x20) sendmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="a6b07a09a9e2b3c5ced073cb89ba18ee432d8665383627fbe938f853667a8a8b37d3716278bb53a06d65193f7b3f8d8a882e3667749dd31a051098950b5e1127e184923df506d3cc2d71c00e5f56b000576f9d9186ff75e5cb1c85196cb0cafdb923efe45c5dc7199fc2c6f3701da7fced329d931ba3beecfdfa96a38ea73d8ea7a84b4170bad05ddb9d0f6e421a1fa941cdfdb4bdcad9d96cce1349cd3e3e3fd9acd21a79949bca28b3de6e70fae1e981c5c98f8e8b35b4fb17da1a97edf6728656c709fb3cf8", 0xc7}, {&(0x7f0000000140)}, {&(0x7f0000000180)="43180384a7797848b997c46285e09371a85b2aa35a6055516b5b0e1e9212ca269ffe01978becb8902de0e9e7753aa6c4", 0x30}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000001c0)="b710a1572118509b4400b99654aea6181905952a7990fd88bfc1966cfe7ef081ff8ea1ec2e18063bf52625c19ef1ed7e573bae63db2e7bdab62da2bfef1b7e662d0c963b8acef0b71810ad197d3910bb94588c1b06e2a66fdbde7f62ddec1ba83b9be265084755b682f4", 0x6a}, {&(0x7f0000000340)="597200226b830ef7c5a187cc639410c5ca", 0x11}, {&(0x7f0000000380)="cec96dc12c9d2cf50a3a8ec8de0e7b8b5c9c92d739f9501db656049315cda82af7e0fe4cbd5740d96321396504b8dff8802ccaa14ab2b79541d4daf4c21c41774d2801fe37f73416d8531b981526cd6eebb4569862e5ffc37ec347f4cfc8581972ec38f52cb7fb0cf367d923aa", 0x6d}, {&(0x7f0000000480)="bcfd87a31b99e94f851ea593a4305877501e803e1f7027ec0285ba28a4ef7b58df233e0adb9b44c409701ee68b17ba695faeb6f12f22fe2e8d0598a3cfa559e7f7fb42fbdfd8b6d57ff1314c1dc7cd833817fae069b2e12beb0970484847d1fe0a684ab227611639f5436311e5e0c7a51bef15", 0x73}, {&(0x7f0000000500)="e5b98b10e13c530f031a89933e2035f878e819cc1cc71efe9ce9803dc395cf6d0cad3d59522e0bb87568aad07fab6d9908606d99e36c7e4a6e22", 0x3a}], 0x9, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee00}}}], 0x40, 0x20000000}, 0x20000000) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420, 0xe52, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r4, 0xffffffffffffffff, r5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.912741138s ago: executing program 1 (id=3262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000003c0)=0x7, 0x4) 1.792529437s ago: executing program 1 (id=3263): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000040000000000000000000001000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b8014000180090001006c61737400000000040002802c0001800a0001006c696d69740000001c0002800c00024400000000000000000c000140000000000000000314000000100001"], 0x104}}, 0x0) 1.761784599s ago: executing program 5 (id=3264): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x4371, 0x81) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r2, &(0x7f0000000540), 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xc3ff, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x190c7}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x43}]}, 0x3c}}, 0x0) 1.492785237s ago: executing program 1 (id=3265): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xf509, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x1, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x20, 0x0, 0x3cd, 0xfffffffe, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x1, 0xfffd}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x60bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x1, 0x2], 0x1, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x5c1, 0x0, 0x0, 0x2, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7ffffdbb}]}) setuid(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a3100000000080004400000000009001fe473797a3000000000080003400000000114000000020a0103000000000000000002000003140000001100010000000000000000000b00000a"], 0x78}}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$char_usb(r7, &(0x7f0000001380)=""/4096, 0x1000) syz_read_part_table(0x1048, &(0x7f0000000000)="$eJzszzEKAjEUBNAJm11NI17CI9l7FL2Oraey9QLKStLZigjvNflkJoQffqq1JFNtZT0eSfabZLsGSU6jVeqYlufSp7nfXu5zzS5JTTn37PDpq5L301uS3puO1y+uBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/4xUAAP//FwcHIg==") 1.45149769s ago: executing program 2 (id=3266): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_usb_connect(0x1000000, 0x0, 0x0, 0x0) 1.409982573s ago: executing program 9 (id=3267): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c"], 0x3c}}, 0x0) 1.197162878s ago: executing program 9 (id=3268): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x6c92d8b5, 0x200100) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) unshare(0x6c040000) 1.087830025s ago: executing program 8 (id=3269): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd20, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2974, 0x48056}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x647089f3, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x200088c4) 981.798772ms ago: executing program 8 (id=3270): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x204, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = gettid() pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80c60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) clock_nanosleep(0x2, 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 786.098646ms ago: executing program 5 (id=3271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00ff9f00000000080001000200001004000b"], 0x24}}, 0x0) 724.94043ms ago: executing program 2 (id=3272): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x8, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d7000000000000040000008500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_emit_ethernet(0xba, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x84, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x84, 0x0, @opaque="63334ec728b7c1a985469724e0d1677aa6fea954fc72d22dd39f7f71773acbe223edeba14651f8b22247ff2731a5b6c34b46f0571707000204c263316bb305a5c66f1600defd20ea471e7e5eb19bc47966d4c5c5b478a13a6c180cf07d90c48bdcc98917cdf1d61cbd6017c10c070a8081223ccbba98f132808d4e55"}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 724.4147ms ago: executing program 8 (id=3273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000) ioctl$VT_ACTIVATE(r1, 0x5606, 0xb45) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000300000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 704.105562ms ago: executing program 5 (id=3274): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x800001, 0x40) fremovexattr(r0, &(0x7f0000000dc0)=@known='user.incfs.metadata\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "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", 0x8, 0xc, 0x5, 0x6, 0x6, 0x7, 0x6, 0x1}, r4}}, 0x120) 549.815352ms ago: executing program 1 (id=3275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000003900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c00008006"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 252.838453ms ago: executing program 5 (id=3276): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 177.363388ms ago: executing program 1 (id=3277): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0xdb65}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='minix\x00', 0x1) 0s ago: executing program 8 (id=3278): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x25e, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) fallocate(r0, 0x54, 0xbf5, 0x800) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x320, 0xfffffffffffffffd}, 0x50c, 0x0, 0xe723, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0108000007500500580012800b000100627269646765000048000280050019000200"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.171047][T13935] loop9: detected capacity change from 0 to 512 [ 377.185701][T13935] EXT4-fs: inline encryption not supported [ 377.213320][T13935] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 377.215523][T12841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 377.273204][T13935] EXT4-fs (loop9): 1 truncate cleaned up [ 377.297041][T13935] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.343193][T13935] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.376476][T13942] netlink: 'syz.2.2760': attribute type 21 has an invalid length. [ 377.399663][T13942] FAULT_INJECTION: forcing a failure. [ 377.399663][T13942] name failslab, interval 1, probability 0, space 0, times 0 [ 377.444424][T13942] CPU: 1 UID: 0 PID: 13942 Comm: syz.2.2760 Tainted: G W syzkaller #0 PREEMPT(full) [ 377.444465][T13942] Tainted: [W]=WARN [ 377.444477][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.444491][T13942] Call Trace: [ 377.444498][T13942] [ 377.444507][T13942] __dump_stack+0x1d/0x30 [ 377.444556][T13942] dump_stack_lvl+0x95/0xd0 [ 377.444582][T13942] dump_stack+0x15/0x1b [ 377.444607][T13942] should_fail_ex+0x263/0x280 [ 377.444703][T13942] should_failslab+0x8c/0xb0 [ 377.444742][T13942] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 377.444770][T13942] ? __alloc_skb+0x2d6/0x690 [ 377.444880][T13942] __alloc_skb+0x2d6/0x690 [ 377.444911][T13942] ? __alloc_skb+0x200/0x690 [ 377.444942][T13942] netlink_ack+0xfd/0x500 [ 377.444991][T13942] netlink_rcv_skb+0x192/0x220 [ 377.445026][T13942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.445081][T13942] rtnetlink_rcv+0x1c/0x30 [ 377.445103][T13942] netlink_unicast+0x5c0/0x690 [ 377.445162][T13942] netlink_sendmsg+0x5c8/0x6f0 [ 377.445185][T13942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.445244][T13942] ____sys_sendmsg+0x563/0x5b0 [ 377.445269][T13942] ___sys_sendmsg+0x195/0x1e0 [ 377.445302][T13942] __x64_sys_sendmsg+0xd4/0x160 [ 377.445328][T13942] x64_sys_call+0x194c/0x3020 [ 377.445376][T13942] do_syscall_64+0x12c/0x370 [ 377.445407][T13942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.445431][T13942] RIP: 0033:0x7fb5d9a3c819 [ 377.445453][T13942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.445474][T13942] RSP: 002b:00007fb5d848f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.445544][T13942] RAX: ffffffffffffffda RBX: 00007fb5d9cb5fa0 RCX: 00007fb5d9a3c819 [ 377.445560][T13942] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 377.445575][T13942] RBP: 00007fb5d848f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.445651][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.445665][T13942] R13: 00007fb5d9cb6038 R14: 00007fb5d9cb5fa0 R15: 00007fff3fef2118 [ 377.445687][T13942] [ 377.664717][T13943] syzkaller0: entered promiscuous mode [ 377.717423][T13943] syzkaller0: entered allmulticast mode [ 377.768086][T13950] __nla_validate_parse: 2 callbacks suppressed [ 377.768102][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 377.840386][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2759'. [ 377.945529][T13947] loop9: detected capacity change from 0 to 8192 [ 377.972813][ T3881] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.983656][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 378.023082][ T3302] loop9: p1 p3 p4 [ 378.028459][ T3881] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.056379][ T3302] loop9: p1 size 16778240 extends beyond EOD, truncated [ 378.060813][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2759'. [ 378.076045][T13968] random: crng reseeded on system resumption [ 378.092065][T13967] netlink: 'syz.2.2763': attribute type 11 has an invalid length. [ 378.100466][ T3881] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.115550][ T3302] loop9: p3 size 100663552 extends beyond EOD, truncated [ 378.134344][ T3302] loop9: p4 size 50331648 extends beyond EOD, truncated [ 378.143002][ T28] kauditd_printk_skb: 1322 callbacks suppressed [ 378.143026][ T28] audit: type=1400 audit(2000016574.688:33247): avc: denied { open } for pid=13970 comm="syz.5.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 378.184995][ T28] audit: type=1400 audit(2000016574.688:33248): avc: denied { perfmon } for pid=13970 comm="syz.5.2764" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.202601][ T3881] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.253660][T13947] loop9: p1 p3 p4 [ 378.266771][T13947] loop9: p1 size 16778240 extends beyond EOD, truncated [ 378.297737][T13947] loop9: p3 size 100663552 extends beyond EOD, truncated [ 378.305531][ T28] audit: type=1400 audit(2000016574.688:33249): avc: denied { kernel } for pid=13970 comm="syz.5.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 378.366288][ T28] audit: type=1400 audit(2000016574.728:33250): avc: denied { recv } for pid=13970 comm="syz.5.2764" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.423027][ T28] audit: type=1400 audit(2000016574.728:33251): avc: denied { recv } for pid=13970 comm="syz.5.2764" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.440386][T13947] loop9: p4 size 50331648 extends beyond EOD, [ 378.454106][T13980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13980 comm=syz.0.2765 [ 378.471290][T13947] truncated [ 378.501972][ T28] audit: type=1400 audit(2000016574.728:33252): avc: denied { recv } for pid=13970 comm="syz.5.2764" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.824849][ T28] audit: type=1400 audit(2000016574.768:33253): avc: denied { perfmon } for pid=13970 comm="syz.5.2764" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.868906][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2767'. [ 378.995410][ T28] audit: type=1400 audit(2000016574.778:33254): avc: denied { read write } for pid=13970 comm="syz.5.2764" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.162378][ T28] audit: type=1400 audit(2000016574.778:33255): avc: denied { open } for pid=13970 comm="syz.5.2764" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.216372][ T28] audit: type=1400 audit(2000016574.788:33256): avc: denied { read write } for pid=12709 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.256754][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 379.273542][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 379.289890][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 379.355712][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 379.372097][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 379.388682][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 379.724446][T13992] loop5: detected capacity change from 0 to 4096 [ 379.777043][T13992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.267173][T14004] sctp: [Deprecated]: syz.2.2773 (pid 14004) Use of int in max_burst socket option. [ 380.267173][T14004] Use struct sctp_assoc_value instead [ 380.655580][T14017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14017 comm=syz.9.2775 [ 380.677326][T14015] FAULT_INJECTION: forcing a failure. [ 380.677326][T14015] name failslab, interval 1, probability 0, space 0, times 0 [ 380.711015][T14015] CPU: 1 UID: 0 PID: 14015 Comm: syz.0.2777 Tainted: G W syzkaller #0 PREEMPT(full) [ 380.711085][T14015] Tainted: [W]=WARN [ 380.711093][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.711138][T14015] Call Trace: [ 380.711146][T14015] [ 380.711155][T14015] __dump_stack+0x1d/0x30 [ 380.711235][T14015] dump_stack_lvl+0x95/0xd0 [ 380.711306][T14015] dump_stack+0x15/0x1b [ 380.711333][T14015] should_fail_ex+0x263/0x280 [ 380.711367][T14015] should_failslab+0x8c/0xb0 [ 380.711389][T14015] kmem_cache_alloc_noprof+0x66/0x400 [ 380.711471][T14015] ? security_inode_alloc+0x37/0x100 [ 380.711511][T14015] security_inode_alloc+0x37/0x100 [ 380.711550][T14015] inode_init_always_gfp+0x4b7/0x500 [ 380.711580][T14015] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 380.711665][T14015] alloc_inode+0x58/0x170 [ 380.711708][T14015] new_inode+0x1d/0xe0 [ 380.711738][T14015] shmem_get_inode+0x246/0x750 [ 380.711873][T14015] __shmem_file_setup+0x112/0x210 [ 380.711906][T14015] shmem_file_setup+0x3b/0x50 [ 380.711997][T14015] memfd_alloc_file+0x4e/0x300 [ 380.712034][T14015] __se_sys_memfd_create+0x2e1/0x3b0 [ 380.712096][T14015] __x64_sys_memfd_create+0x31/0x40 [ 380.712124][T14015] x64_sys_call+0x1f22/0x3020 [ 380.712149][T14015] do_syscall_64+0x12c/0x370 [ 380.712178][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.712218][T14015] RIP: 0033:0x7f5ae8b4c819 [ 380.712235][T14015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.712252][T14015] RSP: 002b:00007f5ae759ed58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 380.712268][T14015] RAX: ffffffffffffffda RBX: 00000000000005aa RCX: 00007f5ae8b4c819 [ 380.712280][T14015] RDX: 00007f5ae759eddc RSI: 0000000000000000 RDI: 00007f5ae8be2e71 [ 380.712364][T14015] RBP: 0000200000001b80 R08: 00000000ffffffff R09: 0000000000000000 [ 380.712375][T14015] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 380.712386][T14015] R13: 00007f5ae759eddc R14: 00007f5ae759ede0 R15: 00007ffd6983bd28 [ 380.712405][T14015] [ 381.205656][T14021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14021 comm=syz.0.2779 [ 381.347775][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 381.359077][T12841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.445262][T14033] loop5: detected capacity change from 0 to 1024 [ 381.858162][T14049] loop5: detected capacity change from 0 to 128 [ 381.867167][T14049] ext4: Unknown parameter 'fsmagic' [ 382.257038][T14055] FAULT_INJECTION: forcing a failure. [ 382.257038][T14055] name failslab, interval 1, probability 0, space 0, times 0 [ 382.292474][T14055] CPU: 1 UID: 0 PID: 14055 Comm: syz.2.2789 Tainted: G W syzkaller #0 PREEMPT(full) [ 382.292509][T14055] Tainted: [W]=WARN [ 382.292518][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.292609][T14055] Call Trace: [ 382.292682][T14055] [ 382.292688][T14055] __dump_stack+0x1d/0x30 [ 382.292742][T14055] dump_stack_lvl+0x95/0xd0 [ 382.292766][T14055] dump_stack+0x15/0x1b [ 382.292802][T14055] should_fail_ex+0x263/0x280 [ 382.292828][T14055] should_failslab+0x8c/0xb0 [ 382.292900][T14055] kmem_cache_alloc_noprof+0x66/0x400 [ 382.292953][T14055] ? security_inode_alloc+0x37/0x100 [ 382.292986][T14055] security_inode_alloc+0x37/0x100 [ 382.293021][T14055] inode_init_always_gfp+0x4b7/0x500 [ 382.293062][T14055] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 382.293088][T14055] alloc_inode+0x58/0x170 [ 382.293114][T14055] new_inode+0x1d/0xe0 [ 382.293225][T14055] shmem_get_inode+0x246/0x750 [ 382.293253][T14055] __shmem_file_setup+0x112/0x210 [ 382.293345][T14055] shmem_file_setup+0x3b/0x50 [ 382.293416][T14055] memfd_alloc_file+0x4e/0x300 [ 382.293451][T14055] __se_sys_memfd_create+0x2e1/0x3b0 [ 382.293535][T14055] __x64_sys_memfd_create+0x31/0x40 [ 382.293563][T14055] x64_sys_call+0x1f22/0x3020 [ 382.293646][T14055] do_syscall_64+0x12c/0x370 [ 382.293673][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.293691][T14055] RIP: 0033:0x7fb5d9a3c819 [ 382.293704][T14055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.293720][T14055] RSP: 002b:00007fb5d848ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 382.293815][T14055] RAX: ffffffffffffffda RBX: 0000000000000511 RCX: 00007fb5d9a3c819 [ 382.293830][T14055] RDX: 00007fb5d848eee0 RSI: 0000000000000000 RDI: 00007fb5d9ad2e71 [ 382.293843][T14055] RBP: 0000200000000e00 R08: 00000000ffffffff R09: 0000000000000000 [ 382.293921][T14055] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 382.293960][T14055] R13: 00007fb5d848eee0 R14: 00007fb5d848eea0 R15: 0000200000000180 [ 382.293982][T14055] [ 382.868180][T14072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14072 comm=syz.2.2792 [ 382.902486][T14073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14073 comm=syz.0.2794 [ 383.058976][T14078] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2796'. [ 383.069216][T14077] loop5: detected capacity change from 0 to 512 [ 383.172235][ T28] kauditd_printk_skb: 428 callbacks suppressed [ 383.172257][ T28] audit: type=1400 audit(2000016579.718:33685): avc: denied { recv } for pid=14076 comm="syz.0.2797" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 383.236037][ T28] audit: type=1400 audit(2000016579.748:33686): avc: denied { egress } for pid=9 comm="kworker/0:0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 383.236066][ T28] audit: type=1400 audit(2000016579.748:33687): avc: denied { sendto } for pid=9 comm="kworker/0:0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 383.236091][ T28] audit: type=1400 audit(2000016579.748:33688): avc: denied { egress } for pid=9 comm="kworker/0:0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 383.237125][ T28] audit: type=1400 audit(2000016579.748:33689): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 383.237202][ T28] audit: type=1400 audit(2000016579.758:33690): avc: denied { prog_load } for pid=14074 comm="syz.5.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 383.237225][ T28] audit: type=1400 audit(2000016579.758:33691): avc: denied { bpf } for pid=14074 comm="syz.5.2795" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 383.237252][ T28] audit: type=1400 audit(2000016579.758:33692): avc: denied { create } for pid=14074 comm="syz.5.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 383.237278][ T28] audit: type=1400 audit(2000016579.758:33693): avc: denied { bind } for pid=14074 comm="syz.5.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 383.237301][ T28] audit: type=1400 audit(2000016579.758:33694): avc: denied { name_bind } for pid=14074 comm="syz.5.2795" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 383.546991][T14083] loop2: detected capacity change from 0 to 512 [ 383.593456][T14083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.780621][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2801'. [ 383.780673][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2801'. [ 383.794325][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.943517][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2801'. [ 383.943590][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2801'. [ 384.368861][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2801'. [ 384.368894][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2801'. [ 384.555622][T14102] loop9: detected capacity change from 0 to 512 [ 384.573303][T14102] EXT4-fs: inline encryption not supported [ 384.587003][T14102] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 384.637857][T14102] EXT4-fs (loop9): 1 truncate cleaned up [ 384.651907][T14102] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.712980][T14102] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.863175][T14113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14113 comm=syz.1.2807 [ 384.899351][T14115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14115 comm=syz.5.2806 [ 385.028068][T14120] syzkaller0: entered promiscuous mode [ 385.056395][T14120] syzkaller0: entered allmulticast mode [ 385.086839][T14123] bridge1: entered promiscuous mode [ 385.096407][T14123] bridge1: entered allmulticast mode [ 385.103330][T14123] team0: Port device bridge1 added [ 385.599001][T14146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14146 comm=syz.2.2820 [ 385.835361][T14153] No such timeout policy "syz1" [ 386.116036][T14152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14152 comm=syz.5.2822 [ 386.290864][T14159] 9p: Bad value for 'wfdno' [ 386.318494][T14162] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 386.412140][T14166] loop2: detected capacity change from 0 to 512 [ 386.419859][T14166] EXT4-fs: inline encryption not supported [ 386.452246][T14166] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 386.878978][T14166] EXT4-fs (loop2): 1 truncate cleaned up [ 386.902029][T14166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.954214][T14166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.352062][T14183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14183 comm=syz.5.2831 [ 388.005658][T14194] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14194 comm=syz.5.2836 [ 388.111934][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2839'. [ 388.177746][ T28] kauditd_printk_skb: 537 callbacks suppressed [ 388.177759][ T28] audit: type=1400 audit(2000016584.718:34232): avc: denied { read write } for pid=10813 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.210987][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 388.296200][ T28] audit: type=1400 audit(2000016584.728:34233): avc: denied { recv } for pid=3305 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 388.350529][ T28] audit: type=1400 audit(2000016584.728:34234): avc: denied { recv } for pid=3305 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 388.376141][ T28] audit: type=1400 audit(2000016584.728:34235): avc: denied { recv } for pid=3305 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 388.402404][ T28] audit: type=1400 audit(2000016584.768:34236): avc: denied { read write open } for pid=10813 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.428505][ T28] audit: type=1400 audit(2000016584.768:34237): avc: denied { ioctl } for pid=10813 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.454449][ T28] audit: type=1400 audit(2000016584.768:34238): avc: denied { write } for pid=14202 comm="syz.2.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.475317][ T28] audit: type=1400 audit(2000016584.778:34239): avc: denied { execmem } for pid=14200 comm="syz.5.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 388.495644][ T28] audit: type=1400 audit(2000016584.808:34240): avc: denied { execmem } for pid=14209 comm="syz.9.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 388.515386][ T28] audit: type=1400 audit(2000016584.808:34241): avc: denied { name_bind } for pid=14202 comm="syz.2.2838" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 388.981532][T14218] futex_wake_op: syz.1.2842 tries to shift op by -1; fix this program [ 389.183153][T14233] loop9: detected capacity change from 0 to 512 [ 389.190924][T14233] EXT4-fs: inline encryption not supported [ 389.198095][T14233] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 389.240898][T14233] EXT4-fs (loop9): 1 truncate cleaned up [ 389.256761][T14233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.284356][T14233] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.550671][T14243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14243 comm=syz.5.2849 [ 389.980630][T14252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2853'. [ 390.113449][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2853'. [ 390.140643][T14256] loop9: detected capacity change from 0 to 128 [ 390.176384][T14256] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.208754][T14257] veth3: entered promiscuous mode [ 390.217144][T14256] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.296554][ T50] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.497881][T10080] syz_tun (unregistering): left promiscuous mode [ 390.525365][T14264] loop2: detected capacity change from 0 to 512 [ 390.584950][T14264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.608969][T14268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14268 comm=syz.9.2861 [ 390.648872][T14264] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.776376][T14274] loop9: detected capacity change from 0 to 1024 [ 390.794129][T14274] EXT4-fs: Ignoring removed orlov option [ 390.820312][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2859'. [ 390.844841][T14278] loop5: detected capacity change from 0 to 512 [ 390.851974][T14274] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 390.873161][ T3881] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.879770][T14278] EXT4-fs: inline encryption not supported [ 390.886888][T14274] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.911081][T14278] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.944868][T14274] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 390.963920][T14274] EXT4-fs (loop9): Can't support bigalloc feature without extents feature [ 390.963920][T14274] [ 390.970428][ T3881] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.984667][T14274] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 390.993761][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.003865][T14278] EXT4-fs (loop5): 1 truncate cleaned up [ 391.011590][T14274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.027283][T14278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.076739][T14278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.145144][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 391.166798][T10813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.177637][ T3881] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.328079][ T3881] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.545895][T14307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14307 comm=syz.9.2873 [ 391.589275][T14308] program syz.2.2872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.736025][ T3881] bridge_slave_1: left allmulticast mode [ 391.756922][ T3881] bridge_slave_1: left promiscuous mode [ 391.762670][ T3881] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.777765][ T3881] bridge_slave_0: left allmulticast mode [ 391.788763][ T3881] bridge_slave_0: left promiscuous mode [ 391.798475][ T3881] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.886677][T14314] loop9: detected capacity change from 0 to 512 [ 391.905329][T14314] EXT4-fs: Ignoring removed bh option [ 391.920998][ T3881] ip6gretap0 (unregistering): left promiscuous mode [ 391.945210][T14314] EXT4-fs (loop9): 1 truncate cleaned up [ 391.957287][ T3881] gretap0 (unregistering): left promiscuous mode [ 391.964353][T14314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.029224][ T3881] bond0 (unregistering): left promiscuous mode [ 392.035434][ T3881] bond_slave_0: left promiscuous mode [ 392.041065][ T3881] bond_slave_1: left promiscuous mode [ 392.046528][ T3881] team0: left promiscuous mode [ 392.051400][ T3881] team_slave_0: left promiscuous mode [ 392.056933][ T3881] team_slave_1: left promiscuous mode [ 392.066393][ T3881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.078048][ T3881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.099930][ T3881] bond0 (unregistering): (slave team0): Releasing backup interface [ 392.117745][ T3881] bond0 (unregistering): Released all slaves [ 392.133172][ T3881] bond1 (unregistering): Released all slaves [ 392.142951][ T3881] bond2 (unregistering): Released all slaves [ 392.153839][ T3881] bond3 (unregistering): (slave veth3): Releasing active interface [ 392.166918][ T3881] bond3 (unregistering): (slave veth5): Releasing active interface [ 392.176976][ T3881] bond3 (unregistering): Released all slaves [ 392.189689][T14316] netlink: 'syz.5.2877': attribute type 29 has an invalid length. [ 392.235097][T10813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.271360][T14277] chnl_net:caif_netlink_parms(): no params data found [ 392.385957][T14340] loop2: detected capacity change from 0 to 128 [ 392.409332][ T3881] batadv0: left promiscuous mode [ 392.454053][T14340] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.484043][ T3881] hsr_slave_0: left promiscuous mode [ 392.500509][ T3881] hsr_slave_1: left promiscuous mode [ 392.516341][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.545275][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.571507][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.589674][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.592178][T14340] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.663095][ T3881] veth1_macvtap: left promiscuous mode [ 392.669633][ T3881] veth0_macvtap: left promiscuous mode [ 392.675284][ T3881] veth1_vlan: left promiscuous mode [ 392.688974][ T3881] 6: left promiscuous mode [ 392.796475][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.839014][T14359] loop5: detected capacity change from 0 to 4096 [ 392.917747][T14359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.527096][ T28] kauditd_printk_skb: 1138 callbacks suppressed [ 393.527112][ T28] audit: type=1400 audit(2000016590.078:35380): avc: denied { recv } for pid=14346 comm="syz.5.2881" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 393.570887][ T28] audit: type=1400 audit(2000016590.078:35381): avc: denied { recv } for pid=14346 comm="syz.5.2881" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 393.598878][ T28] audit: type=1400 audit(2000016590.078:35382): avc: denied { recv } for pid=14346 comm="syz.5.2881" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 393.628025][ T28] audit: type=1400 audit(2000016590.118:35383): avc: denied { unmount } for pid=12709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 393.652823][T12709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.683858][ T28] audit: type=1400 audit(2000016590.228:35384): avc: denied { search } for pid=14358 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.734581][ T28] audit: type=1400 audit(2000016590.228:35385): avc: denied { search } for pid=14358 comm="rm" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.778843][ T28] audit: type=1400 audit(2000016590.228:35386): avc: denied { search } for pid=14358 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.801655][ T28] audit: type=1400 audit(2000016590.228:35387): avc: denied { getattr } for pid=14358 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth22.link" dev="tmpfs" ino=12051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 393.831738][ T28] audit: type=1400 audit(2000016590.228:35388): avc: denied { search } for pid=14358 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.869704][ T28] audit: type=1400 audit(2000016590.228:35389): avc: denied { search } for pid=14358 comm="rm" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.973191][ T3881] team0 (unregistering): Port device team_slave_1 removed [ 394.019448][ T3881] team0 (unregistering): Port device team_slave_0 removed [ 394.193885][T14369] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2884'. [ 394.266521][T14370] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14370 comm=syz.9.2885 [ 394.374452][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2884'. [ 394.414211][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.443129][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.465925][T14277] bridge_slave_0: entered allmulticast mode [ 394.485118][T14277] bridge_slave_0: entered promiscuous mode [ 394.493694][T14277] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.501350][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.508966][T14277] bridge_slave_1: entered allmulticast mode [ 394.514329][T12841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.520301][T14277] bridge_slave_1: entered promiscuous mode [ 394.553730][T14376] loop9: detected capacity change from 0 to 512 [ 394.572322][T14378] loop2: detected capacity change from 0 to 256 [ 394.581892][T14376] EXT4-fs: inline encryption not supported [ 394.588801][T14376] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 394.601504][T14277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.630807][T14376] EXT4-fs (loop9): 1 truncate cleaned up [ 394.654717][T14376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.687302][T14376] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.693421][T14277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.799837][T14277] team0: Port device team_slave_0 added [ 394.825321][T14277] team0: Port device team_slave_1 added [ 394.873895][T14277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.911875][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.982919][T14277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.040719][T14277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.059734][T14376] loop9: detected capacity change from 0 to 8192 [ 395.082057][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.172043][T14277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.449112][T14277] hsr_slave_0: entered promiscuous mode [ 395.463662][T14277] hsr_slave_1: entered promiscuous mode [ 395.486777][T14277] debugfs: 'hsr0' already exists in 'hsr' [ 395.496831][T14277] Cannot create hsr debugfs directory [ 395.765414][T14422] loop5: detected capacity change from 0 to 512 [ 395.796993][T14422] EXT4-fs (loop5): invalid inodes per group: 0 [ 395.796993][T14422] [ 396.052615][T14424] bond1: option arp_validate: invalid value (6216) [ 396.093569][T14424] bond1 (unregistering): Released all slaves [ 396.284727][T14277] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 396.324123][T14277] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 396.372994][T14277] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 396.412970][T14277] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.069206][T14277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.134606][T14277] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.265999][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.273124][ T9534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.353932][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.361038][ T9534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.703160][T14497] loop5: detected capacity change from 0 to 512 [ 397.728775][T14497] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 397.912406][T14277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.517900][T13075] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 398.554091][ T28] kauditd_printk_skb: 1317 callbacks suppressed [ 398.554108][ T28] audit: type=1400 audit(2000016595.098:36708): avc: denied { recv } for pid=3296 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 398.691260][ T28] audit: type=1400 audit(2000016595.138:36709): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 398.806685][ T28] audit: type=1400 audit(2000016595.138:36710): avc: denied { map_create } for pid=14509 comm="syz.9.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.875511][ T28] audit: type=1400 audit(2000016595.138:36711): avc: denied { bpf } for pid=14509 comm="syz.9.2904" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.941646][ T28] audit: type=1400 audit(2000016595.138:36712): avc: denied { map_create } for pid=14509 comm="syz.9.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.990206][ T28] audit: type=1400 audit(2000016595.138:36713): avc: denied { map_read map_write } for pid=14509 comm="syz.9.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 399.034915][ T28] audit: type=1400 audit(2000016595.138:36714): avc: denied { create } for pid=14509 comm="syz.9.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 399.082176][T14277] veth0_vlan: entered promiscuous mode [ 399.091648][ T28] audit: type=1400 audit(2000016595.138:36715): avc: denied { connect } for pid=14509 comm="syz.9.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 399.119678][T14277] veth1_vlan: entered promiscuous mode [ 399.134384][ T28] audit: type=1400 audit(2000016595.138:36716): avc: denied { read } for pid=14509 comm="syz.9.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 399.161221][T14277] veth0_macvtap: entered promiscuous mode [ 399.175456][T14277] veth1_macvtap: entered promiscuous mode [ 399.182425][ T28] audit: type=1400 audit(2000016595.148:36717): avc: denied { create } for pid=14509 comm="syz.9.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.218531][T14277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.233423][T14277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.247630][ T3881] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.256870][ T3881] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.265575][ T3881] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.419427][ T3881] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.220379][T14591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14591 comm=syz.1.2913 [ 400.416678][T14597] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.2914'. [ 400.455621][T14597] openvswitch: netlink: Message has 4 unknown bytes. [ 400.502537][T14611] loop9: detected capacity change from 0 to 136 [ 400.513047][T14597] netlink: 'syz.5.2914': attribute type 12 has an invalid length. [ 400.536282][T14611] Attempt to read inode for relocated directory [ 400.536313][T14597] netlink: 'syz.5.2914': attribute type 29 has an invalid length. [ 400.575741][T14597] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2914'. [ 400.604858][T14597] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2914'. [ 400.655866][T14608] syz.9.2918: attempt to access beyond end of device [ 400.655866][T14608] loop9: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 400.678830][T14608] syz.9.2918: attempt to access beyond end of device [ 400.678830][T14608] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 400.695083][T14608] syz.9.2918: attempt to access beyond end of device [ 400.695083][T14608] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 400.746760][T14611] syz.9.2918: attempt to access beyond end of device [ 400.746760][T14611] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 400.776202][T14611] syz.9.2918: attempt to access beyond end of device [ 400.776202][T14611] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 400.810376][T14611] syz.9.2918: attempt to access beyond end of device [ 400.810376][T14611] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 401.592599][T14641] loop5: detected capacity change from 0 to 512 [ 401.830385][T14661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14661 comm=syz.2.2927 [ 401.884923][T14663] netlink: 'syz.2.2928': attribute type 10 has an invalid length. [ 401.995491][T14646] syz.5.2923: attempt to access beyond end of device [ 401.995491][T14646] loop5: rw=34817, sector=352, nr_sectors = 966 limit=512 [ 402.237145][ T9534] kworker/u8:14: attempt to access beyond end of device [ 402.237145][ T9534] loop5: rw=1, sector=1320, nr_sectors = 10112 limit=512 [ 402.303706][ T9534] kworker/u8:14: attempt to access beyond end of device [ 402.303706][ T9534] loop5: rw=1, sector=11432, nr_sectors = 4096 limit=512 [ 402.344999][ T9534] kworker/u8:14: attempt to access beyond end of device [ 402.344999][ T9534] loop5: rw=1, sector=15528, nr_sectors = 936 limit=512 [ 402.724729][T14694] syzkaller0: entered promiscuous mode [ 402.755423][T14694] syzkaller0: entered allmulticast mode [ 403.073556][T14714] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2935'. [ 403.121799][T14714] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2935'. [ 403.164728][T14720] loop2: detected capacity change from 0 to 256 [ 403.270416][T14727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14727 comm=syz.5.2939 [ 403.530658][T14737] random: crng reseeded on system resumption [ 403.584137][ T28] kauditd_printk_skb: 1706 callbacks suppressed [ 403.584153][ T28] audit: type=1400 audit(2000016600.128:38423): avc: denied { search } for pid=14740 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.686289][ T28] audit: type=1400 audit(2000016600.128:38424): avc: denied { read } for pid=14740 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 403.898256][T14751] audit: audit_backlog=65 > audit_backlog_limit=64 [ 403.919938][T14728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 403.946168][T14751] audit: audit_lost=656 audit_rate_limit=0 audit_backlog_limit=64 [ 403.966091][ T6690] audit: audit_backlog=65 > audit_backlog_limit=64 [ 403.986438][T14728] audit: audit_lost=657 audit_rate_limit=0 audit_backlog_limit=64 [ 403.986578][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 404.000812][ C1] audit: audit_lost=658 audit_rate_limit=0 audit_backlog_limit=64 [ 404.008669][ C1] audit: backlog limit exceeded [ 404.213510][T14763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2947'. [ 405.143138][T14766] loop7: detected capacity change from 0 to 256 [ 405.255849][T14766] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.458638][T14770] loop5: detected capacity change from 0 to 256 [ 405.496992][T14770] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.545589][T14770] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.854593][T14784] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2950'. [ 405.943843][T14788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14788 comm=syz.1.2951 [ 405.990865][T14785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2949'. [ 406.191421][T14793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2953'. [ 406.548468][T14811] netlink: 'syz.7.2957': attribute type 21 has an invalid length. [ 406.760985][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 406.787746][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 406.838079][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 406.847068][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 406.887933][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 406.897094][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2961'. [ 407.003623][T14832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14832 comm=syz.7.2963 [ 407.045803][T14804] loop2: detected capacity change from 0 to 1024 [ 407.070202][T14804] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.142856][T14804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.161186][T14804] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.231849][T14833] vhci_hcd vhci_hcd.3: default hub control req: 0217 v0002 i0000 l0 [ 407.405048][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 407.603689][T14851] FAULT_INJECTION: forcing a failure. [ 407.603689][T14851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.668155][T14851] CPU: 1 UID: 0 PID: 14851 Comm: syz.9.2969 Tainted: G W syzkaller #0 PREEMPT(full) [ 407.668183][T14851] Tainted: [W]=WARN [ 407.668188][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.668199][T14851] Call Trace: [ 407.668204][T14851] [ 407.668210][T14851] __dump_stack+0x1d/0x30 [ 407.668272][T14851] dump_stack_lvl+0x95/0xd0 [ 407.668298][T14851] dump_stack+0x15/0x1b [ 407.668317][T14851] should_fail_ex+0x263/0x280 [ 407.668419][T14851] should_fail+0xb/0x20 [ 407.668443][T14851] should_fail_usercopy+0x1a/0x20 [ 407.668502][T14851] copy_folio_from_iter_atomic+0x269/0x1170 [ 407.668616][T14851] ? shmem_write_begin+0xfc/0x1f0 [ 407.668668][T14851] ? shmem_write_begin+0x135/0x1f0 [ 407.668711][T14851] generic_perform_write+0x2c1/0x490 [ 407.668746][T14851] shmem_file_write_iter+0xc5/0xf0 [ 407.668783][T14851] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 407.668826][T14851] vfs_write+0x5a6/0x9f0 [ 407.668855][T14851] ksys_write+0xdc/0x1a0 [ 407.668881][T14851] __x64_sys_write+0x40/0x50 [ 407.668906][T14851] x64_sys_call+0x27e1/0x3020 [ 407.669004][T14851] do_syscall_64+0x12c/0x370 [ 407.669041][T14851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.669085][T14851] RIP: 0033:0x7fade014d04e [ 407.669168][T14851] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.669257][T14851] RSP: 002b:00007faddebe6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.669283][T14851] RAX: ffffffffffffffda RBX: 00007faddebe76c0 RCX: 00007fade014d04e [ 407.669378][T14851] RDX: 0000000000010000 RSI: 00007fadd67c7000 RDI: 0000000000000004 [ 407.669391][T14851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.669453][T14851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 407.669466][T14851] R13: 00007faddebe6ee0 R14: 00007faddebe6ea0 R15: 00007fadd67c7000 [ 407.669486][T14851] [ 407.672901][T14854] loop5: detected capacity change from 0 to 512 [ 407.685205][T14851] loop9: detected capacity change from 0 to 128 [ 407.738032][T14854] ext4: Unknown parameter 'obj_type' [ 407.958489][T14856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14856 comm=syz.2.2971 [ 408.127778][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2972'. [ 408.166843][T14870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14870 comm=syz.5.2974 [ 408.301519][T13071] bridge_slave_0: left allmulticast mode [ 408.325171][T13071] bridge_slave_0: left promiscuous mode [ 408.340996][T13071] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.409043][T13071] veth0_to_team: left allmulticast mode [ 408.525254][T13071] veth0_to_team: left promiscuous mode [ 408.531821][T13071] źë: port 2(veth0_to_team) entered disabled state [ 408.556812][T13071] veth0_to_bridge: left allmulticast mode [ 408.562835][T13071] veth0_to_bridge: left promiscuous mode [ 408.568671][T13071] źë: port 1(veth0_to_bridge) entered disabled state [ 408.606401][ T3421] SELinux: failure in sel_netif_sid_slow(), invalid network interface (82) [ 408.615162][ T3421] SELinux: failure in sel_netif_sid_slow(), invalid network interface (74) [ 408.628759][T13071] ip6gretap0 (unregistering): left promiscuous mode [ 408.663287][ T28] kauditd_printk_skb: 865 callbacks suppressed [ 408.663313][ T28] audit: type=1400 audit(2000016605.208:39163): avc: denied { create } for pid=14876 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.705890][T13071] bridge0 (unregistering): left promiscuous mode [ 408.744563][T14885] loop2: detected capacity change from 0 to 512 [ 408.758700][T14885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 408.789215][T14885] EXT4-fs (loop2): 1 truncate cleaned up [ 408.795959][T14885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.848777][ T3421] SELinux: failure in sel_netif_sid_slow(), invalid network interface (74) [ 408.902511][ T28] audit: type=1400 audit(2000016605.208:39164): avc: denied { write } for pid=14876 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.000477][ T28] audit: type=1400 audit(2000016605.208:39165): avc: denied { read } for pid=14876 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.092846][ T28] audit: type=1400 audit(2000016605.268:39166): avc: denied { prog_load } for pid=14876 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 409.124359][ T28] audit: type=1400 audit(2000016605.268:39167): avc: denied { bpf } for pid=14876 comm="syz.2.2977" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.174104][ T28] audit: type=1400 audit(2000016605.268:39168): avc: denied { open } for pid=14876 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 409.193833][ T28] audit: type=1400 audit(2000016605.268:39169): avc: denied { perfmon } for pid=14876 comm="syz.2.2977" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.241107][ T28] audit: type=1400 audit(2000016605.268:39170): avc: denied { kernel } for pid=14876 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 409.260922][ T28] audit: type=1400 audit(2000016605.278:39171): avc: denied { create } for pid=14876 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.266846][T13071] team0: Port device bridge1 removed [ 409.281870][ T28] audit: type=1400 audit(2000016605.288:39172): avc: denied { read write } for pid=14876 comm="syz.2.2977" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.351049][T14888] loop7: detected capacity change from 0 to 512 [ 409.358854][T13071] bond1 (unregistering): (slave bridge2): Releasing active interface [ 409.379746][T14888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.392776][T14888] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.407413][T13071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.426608][T13071] bond_slave_0: left promiscuous mode [ 409.433280][T13071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.451618][T13071] bond_slave_1: left promiscuous mode [ 409.466988][T13071] bond0 (unregistering): Released all slaves [ 409.478175][T13071] bond1 (unregistering): Released all slaves [ 409.518440][T14277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.549656][T14884] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 409.559079][T14884] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 409.636570][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.677843][T14902] loop5: detected capacity change from 0 to 1024 [ 409.696748][T13071] hsr_slave_0: left promiscuous mode [ 409.718081][T14897] loop9: detected capacity change from 0 to 512 [ 409.735618][T14897] EXT4-fs: inline encryption not supported [ 409.741636][T13071] hsr_slave_1: left promiscuous mode [ 409.765130][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.776062][T14897] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 409.795293][T13071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.840304][T14897] EXT4-fs (loop9): 1 truncate cleaned up [ 409.859984][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.875021][T14897] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.900076][T13071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.938018][T14897] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.029122][T13071] veth1_macvtap: left promiscuous mode [ 410.034642][T13071] veth0_macvtap: left promiscuous mode [ 410.076879][T13071] veth1_vlan: left promiscuous mode [ 410.106320][T13071] veth0_vlan: left promiscuous mode [ 410.215745][T14933] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14933 comm=syz.2.2988 [ 410.399271][T13071] team0 (unregistering): Port device team_slave_1 removed [ 410.431527][T13071] team0 (unregistering): Port device team_slave_0 removed [ 410.628029][T14937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14937 comm=syz.5.2990 [ 410.918549][T14954] netlink: 324 bytes leftover after parsing attributes in process `syz.7.2997'. [ 410.984547][T14955] loop5: detected capacity change from 0 to 512 [ 411.021942][T14955] EXT4-fs (loop5): 1 orphan inode deleted [ 411.036654][T14955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.049373][ T50] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 411.066008][ T50] loop5: lost filesystem error report for type 5 error -117 [ 411.071959][T14955] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.018177][T12841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.113715][T14980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14980 comm=syz.9.3002 [ 412.151144][T14983] bridge2: entered promiscuous mode [ 412.301095][T14986] netlink: 'syz.2.3005': attribute type 1 has an invalid length. [ 412.408233][ T3514] IPVS: starting estimator thread 0... [ 412.516898][T15000] IPVS: using max 2688 ests per chain, 134400 per kthread [ 412.530593][T15010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15010 comm=syz.5.3009 [ 412.687049][T15020] loop5: detected capacity change from 0 to 2048 [ 412.718462][T15020] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 412.758184][T15020] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3012'. [ 413.084874][T15029] bond1: peer notification delay (2048) is not a multiple of miimon (100), value rounded to 2000 ms [ 413.167929][T15029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.214877][T15033] loop2: detected capacity change from 0 to 512 [ 413.253242][T15033] EXT4-fs (loop2): 1 truncate cleaned up [ 413.272410][T15033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.307236][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3014'. [ 413.518249][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 413.693910][ T28] kauditd_printk_skb: 861 callbacks suppressed [ 413.693926][ T28] audit: type=1400 audit(2000016610.238:40033): avc: denied { recv } for pid=15023 comm="syz.5.3014" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 413.808511][ T28] audit: type=1400 audit(2000016610.268:40034): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 413.913541][ T28] audit: type=1400 audit(2000016610.278:40035): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 413.964210][T15046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15046 comm=syz.7.3018 [ 413.984760][T15045] loop9: detected capacity change from 0 to 512 [ 414.017672][T15045] EXT4-fs: inline encryption not supported [ 414.044685][ T28] audit: type=1400 audit(2000016610.328:40036): avc: denied { recv } for pid=3296 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.082913][T15045] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 414.135061][T15045] EXT4-fs (loop9): 1 truncate cleaned up [ 414.141274][T15045] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.153794][ T28] audit: type=1400 audit(2000016610.328:40037): avc: denied { recv } for pid=3296 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.187377][T15045] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.208925][ T28] audit: type=1400 audit(2000016610.338:40038): avc: denied { recv } for pid=3296 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.245884][T15051] loop7: detected capacity change from 0 to 1024 [ 414.272863][ T28] audit: type=1400 audit(2000016610.338:40039): avc: denied { read write } for pid=14277 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.318467][T15051] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.340721][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3020'. [ 414.356251][ T28] audit: type=1400 audit(2000016610.338:40040): avc: denied { open } for pid=14277 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.441157][ T28] audit: type=1400 audit(2000016610.338:40041): avc: denied { ioctl } for pid=14277 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.495185][T14277] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 414.546564][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.586027][ T28] audit: type=1400 audit(2000016610.388:40042): avc: denied { read write } for pid=10813 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.705452][T15061] loop7: detected capacity change from 0 to 512 [ 414.744511][T15061] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.3022: corrupted in-inode xattr: overlapping e_value [ 414.816864][T15061] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 414.826247][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 414.841822][ C0] EXT4-fs (loop7): initial error at time 2000016611: ext4_iget_extra_inode:5040: inode 15 [ 414.851766][ C0] EXT4-fs (loop7): last error at time 2000016611: ext4_iget_extra_inode:5040: inode 15 [ 414.856961][T15061] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3022: couldn't read orphan inode 15 (err -117) [ 414.914508][T15061] loop7: lost filesystem error report for type 5 error -117 [ 414.926990][T15061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.959852][T15066] FAULT_INJECTION: forcing a failure. [ 414.959852][T15066] name failslab, interval 1, probability 0, space 0, times 0 [ 415.001455][T15066] CPU: 0 UID: 0 PID: 15066 Comm: syz.9.3024 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.001498][T15066] Tainted: [W]=WARN [ 415.001506][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.001522][T15066] Call Trace: [ 415.001529][T15066] [ 415.001538][T15066] __dump_stack+0x1d/0x30 [ 415.001570][T15066] dump_stack_lvl+0x95/0xd0 [ 415.001608][T15066] dump_stack+0x15/0x1b [ 415.001635][T15066] should_fail_ex+0x263/0x280 [ 415.001669][T15066] should_failslab+0x8c/0xb0 [ 415.001784][T15066] __kvmalloc_node_noprof+0x155/0x650 [ 415.001818][T15066] ? path_openat+0x1ab2/0x2050 [ 415.001840][T15066] ? traverse+0xa2/0x3a0 [ 415.001903][T15066] traverse+0xa2/0x3a0 [ 415.001941][T15066] ? _parse_integer_limit+0x170/0x190 [ 415.002050][T15066] seq_read_iter+0x85f/0x940 [ 415.002088][T15066] ? _parse_integer+0x27/0x40 [ 415.002117][T15066] ? kstrtoull+0x111/0x140 [ 415.002216][T15066] seq_read+0x279/0x2c0 [ 415.002278][T15066] ? __pfx_seq_read+0x10/0x10 [ 415.002314][T15066] proc_reg_read+0x128/0x1c0 [ 415.002339][T15066] ? __pfx_proc_reg_read+0x10/0x10 [ 415.002420][T15066] vfs_read+0x1ab/0x7f0 [ 415.002441][T15066] ? __rcu_read_unlock+0x4e/0x70 [ 415.002467][T15066] ? __fget_files+0x184/0x1c0 [ 415.002499][T15066] ? mutex_unlock+0x4e/0x90 [ 415.002525][T15066] __x64_sys_pread64+0xfd/0x150 [ 415.002582][T15066] x64_sys_call+0x27b5/0x3020 [ 415.002614][T15066] do_syscall_64+0x12c/0x370 [ 415.002668][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.002700][T15066] RIP: 0033:0x7fade018c819 [ 415.002718][T15066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.002742][T15066] RSP: 002b:00007faddebc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 415.002766][T15066] RAX: ffffffffffffffda RBX: 00007fade0406090 RCX: 00007fade018c819 [ 415.002784][T15066] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 415.002875][T15066] RBP: 00007faddebc6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.002891][T15066] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 415.002906][T15066] R13: 00007fade0406128 R14: 00007fade0406090 R15: 00007fff5d457198 [ 415.002967][T15066] [ 415.404343][T14277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.420341][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.427569][T15055] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.925536][T15076] loop7: detected capacity change from 0 to 2048 [ 415.934749][T15076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.012528][T15076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.433011][T15076] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.506084][T15085] FAULT_INJECTION: forcing a failure. [ 416.506084][T15085] name failslab, interval 1, probability 0, space 0, times 0 [ 416.526633][T15055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.536311][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.7.3027 Tainted: G W syzkaller #0 PREEMPT(full) [ 416.536385][T15085] Tainted: [W]=WARN [ 416.536393][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.536420][T15085] Call Trace: [ 416.536428][T15085] [ 416.536435][T15085] __dump_stack+0x1d/0x30 [ 416.536527][T15085] dump_stack_lvl+0x95/0xd0 [ 416.536550][T15085] dump_stack+0x15/0x1b [ 416.536586][T15085] should_fail_ex+0x263/0x280 [ 416.536612][T15085] should_failslab+0x8c/0xb0 [ 416.536658][T15085] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 416.536679][T15085] ? __alloc_skb+0x2d6/0x690 [ 416.536771][T15085] ? ip6_finish_output2+0xc72/0xd70 [ 416.536809][T15085] __alloc_skb+0x2d6/0x690 [ 416.536840][T15085] ? sk_skb_reason_drop+0xbd/0x290 [ 416.536983][T15085] ? __alloc_skb+0x200/0x690 [ 416.537072][T15085] alloc_skb_with_frags+0x7d/0x470 [ 416.537108][T15085] ? nf_nat_ipv6_out+0x187/0x230 [ 416.537211][T15085] ? __rcu_read_unlock+0x33/0x70 [ 416.537236][T15085] sock_alloc_send_pskb+0x44d/0x500 [ 416.537260][T15085] ? ip6_output+0x112/0x280 [ 416.537284][T15085] __ip6_append_data+0x18ba/0x2410 [ 416.537366][T15085] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 416.537388][T15085] ? __pfx_ip6_mr_output+0x10/0x10 [ 416.537406][T15085] ? __rcu_read_unlock+0x4e/0x70 [ 416.537471][T15085] ? ip6_mtu+0xf5/0x120 [ 416.537499][T15085] ip6_make_skb+0x1ab/0x370 [ 416.537526][T15085] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 416.537583][T15085] udpv6_sendmsg+0x1574/0x17d0 [ 416.537609][T15085] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 416.537641][T15085] ? avc_has_perm+0x101/0x190 [ 416.537671][T15085] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 416.537714][T15085] inet6_sendmsg+0xac/0xd0 [ 416.537745][T15085] ? __pfx_inet6_sendmsg+0x10/0x10 [ 416.537771][T15085] ____sys_sendmsg+0x3c1/0x5b0 [ 416.537802][T15085] ___sys_sendmsg+0x195/0x1e0 [ 416.537818][T15085] ? path_openat+0x1b01/0x2050 [ 416.537844][T15085] __sys_sendmmsg+0x185/0x320 [ 416.537925][T15085] __x64_sys_sendmmsg+0x57/0x70 [ 416.537989][T15085] x64_sys_call+0x27aa/0x3020 [ 416.538014][T15085] do_syscall_64+0x12c/0x370 [ 416.538114][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.538203][T15085] RIP: 0033:0x7fee36dec819 [ 416.538217][T15085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.538233][T15085] RSP: 002b:00007fee35847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 416.538250][T15085] RAX: ffffffffffffffda RBX: 00007fee37065fa0 RCX: 00007fee36dec819 [ 416.538295][T15085] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 416.538310][T15085] RBP: 00007fee35847090 R08: 0000000000000000 R09: 0000000000000000 [ 416.538324][T15085] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.538338][T15085] R13: 00007fee37066038 R14: 00007fee37065fa0 R15: 00007ffdd83e9c38 [ 416.538359][T15085] [ 416.571743][T15055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.456840][T13071] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.503273][T13071] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.535243][T13071] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.580006][T13071] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.724038][ T28] kauditd_printk_skb: 308 callbacks suppressed [ 418.724059][ T28] audit: type=1400 audit(2000016614.578:40340): avc: denied { open } for pid=15097 comm="syz.9.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 418.751590][T15103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15103 comm=syz.2.3031 [ 419.744478][ T28] audit: type=1400 audit(2000016614.578:40341): avc: denied { perfmon } for pid=15097 comm="syz.9.3029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 419.769169][ T28] audit: type=1400 audit(2000016614.578:40342): avc: denied { kernel } for pid=15097 comm="syz.9.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 420.740280][ T28] audit: type=1400 audit(2000016614.578:40343): avc: denied { perfmon } for pid=15097 comm="syz.9.3029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 420.762436][ T28] audit: type=1400 audit(2000016614.588:40345): avc: denied { recv } for pid=15102 comm="syz.5.3032" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.788779][ T28] audit: type=1400 audit(2000016614.588:40344): avc: denied { open } for pid=15102 comm="syz.5.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 420.855787][T15114] sch_fq: defrate 0 ignored. [ 420.884324][ T28] audit: type=1400 audit(2000016614.588:40346): avc: denied { perfmon } for pid=15102 comm="syz.5.3032" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 420.959458][ T28] audit: type=1400 audit(2000016614.588:40347): avc: denied { kernel } for pid=15102 comm="syz.5.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 420.989104][T15118] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.997646][T14277] audit: audit_backlog=65 > audit_backlog_limit=64 [ 422.497712][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3045'. [ 422.559312][T15172] bond2: option arp_all_targets: invalid value (262144) [ 422.567468][T15172] bond2 (unregistering): Released all slaves [ 422.734203][T15175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15175 comm=syz.5.3047 [ 422.885430][T15186] usb usb7: usbfs: process 15186 (syz.2.3050) did not claim interface 0 before use [ 423.038544][T15194] loop2: detected capacity change from 0 to 4096 [ 423.404154][T15205] loop9: detected capacity change from 0 to 1024 [ 423.422036][T15205] EXT4-fs: Ignoring removed orlov option [ 423.465015][T15205] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.496255][T15207] vlan2: entered promiscuous mode [ 423.503639][T15207] bridge0: entered promiscuous mode [ 423.729881][ T28] kauditd_printk_skb: 711 callbacks suppressed [ 423.729895][ T28] audit: type=1400 audit(2000016620.278:41027): avc: denied { allowed } for pid=15216 comm="syz.1.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 423.803762][ T28] audit: type=1400 audit(2000016620.308:41028): avc: denied { write } for pid=15215 comm="syz.5.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 423.825546][ T28] audit: type=1400 audit(2000016620.308:41029): avc: denied { create } for pid=15216 comm="syz.1.3059" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 423.866463][ T28] audit: type=1400 audit(2000016620.318:41030): avc: denied { create } for pid=15197 comm="syz.2.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 423.897685][ T28] audit: type=1400 audit(2000016620.328:41031): avc: denied { create } for pid=15216 comm="syz.1.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.918599][T10813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.928478][ T28] audit: type=1400 audit(2000016620.328:41032): avc: denied { shutdown } for pid=15216 comm="syz.1.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.954821][ T28] audit: type=1400 audit(2000016620.338:41033): avc: denied { getopt } for pid=15216 comm="syz.1.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.973100][T15219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.993552][ T28] audit: type=1400 audit(2000016620.338:41034): avc: denied { connect } for pid=15216 comm="syz.1.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 424.031226][T15219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.059290][ T28] audit: type=1400 audit(2000016620.338:41035): avc: denied { name_connect } for pid=15216 comm="syz.1.3059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 424.091683][ T28] audit: type=1400 audit(2000016620.348:41036): avc: denied { create } for pid=15216 comm="syz.1.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 424.120432][T15223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3062'. [ 424.136538][T15221] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 424.145178][T15223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3062'. [ 424.258596][T15228] x_tables: duplicate underflow at hook 4 [ 424.264075][T15226] netlink: 'syz.2.3065': attribute type 8 has an invalid length. [ 424.280994][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 424.296244][T15229] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.309375][T15226] bond0: entered promiscuous mode [ 424.321655][T15226] bond_slave_0: entered promiscuous mode [ 424.333032][T15226] bond_slave_1: entered promiscuous mode [ 424.347050][T15226] gretap0: entered promiscuous mode [ 424.360975][T15226] batadv0: entered promiscuous mode [ 424.373081][T15226] hsr1: entered promiscuous mode [ 424.467411][T15236] Cannot find add_set index 0 as target [ 424.597091][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3072'. [ 424.798393][T15256] loop2: detected capacity change from 0 to 512 [ 424.874647][T15262] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3078'. [ 425.445396][T15287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.275694][T15294] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3084'. [ 426.308744][T15295] loop9: detected capacity change from 0 to 512 [ 426.424177][T15300] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15300 comm=syz.2.3086 [ 426.792054][T15304] loop7: detected capacity change from 0 to 1024 [ 426.845342][T15304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 426.921544][T15304] System zones: 0-1, 3-36 [ 426.949996][T15304] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3088: bad orphan inode 134217728 [ 426.985725][T15304] loop7: lost filesystem error report for type 5 error -117 [ 426.986220][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 426.999983][ C1] EXT4-fs (loop7): initial error at time 2000016623: ext4_orphan_get:1423 [ 427.008523][ C1] EXT4-fs (loop7): last error at time 2000016623: ext4_orphan_get:1423 [ 427.017414][T15304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.097125][ T9534] kworker/u8:14: attempt to access beyond end of device [ 427.097125][ T9534] loop9: rw=1, sector=2392, nr_sectors = 2056 limit=512 [ 427.136014][T15319] loop5: detected capacity change from 0 to 512 [ 427.168037][ T9534] kworker/u8:14: attempt to access beyond end of device [ 427.168037][ T9534] loop9: rw=1, sector=4448, nr_sectors = 2048 limit=512 [ 427.211488][T15319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.222325][ T9534] kworker/u8:14: attempt to access beyond end of device [ 427.222325][ T9534] loop9: rw=1, sector=6496, nr_sectors = 2056 limit=512 [ 427.244507][T15319] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.258341][ T9534] kworker/u8:14: attempt to access beyond end of device [ 427.258341][ T9534] loop9: rw=1, sector=8552, nr_sectors = 2048 limit=512 [ 427.275399][ T9534] kworker/u8:14: attempt to access beyond end of device [ 427.275399][ T9534] loop9: rw=1, sector=10600, nr_sectors = 2056 limit=512 [ 427.295153][ T9534] kworker/u8:14: attempt to access beyond end of device [ 427.295153][ T9534] loop9: rw=1, sector=12656, nr_sectors = 3576 limit=512 [ 427.312466][ T9534] kworker/u8:14: attempt to access beyond end of device [ 427.312466][ T9534] loop9: rw=1, sector=16232, nr_sectors = 232 limit=512 [ 427.368205][T15326] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15326 comm=syz.1.3096 [ 427.387440][T12841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.433173][T14277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.467092][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 427.481147][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 427.615477][T15336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15336 comm=syz.7.3099 [ 427.636358][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 427.645539][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 428.180347][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 428.225737][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 428.252636][T15343] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3101'. [ 428.624375][T15356] loop5: detected capacity change from 0 to 8192 [ 428.647997][T15361] loop2: detected capacity change from 0 to 512 [ 428.672021][T15356] vfat: Unknown parameter '' [ 428.706270][T15361] EXT4-fs (loop2): invalid inodes per group: 0 [ 428.706270][T15361] [ 428.740293][ T28] kauditd_printk_skb: 862 callbacks suppressed [ 428.740566][ T28] audit: type=1400 audit(2000016625.288:41899): avc: denied { recv } for pid=15352 comm="syz.9.3105" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 428.842972][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3106'. [ 428.865719][ T28] audit: type=1400 audit(2000016625.288:41900): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 428.927943][T15365] loop7: detected capacity change from 0 to 512 [ 428.970956][T15365] msdos: Unknown parameter '„ots' [ 428.982741][ T28] audit: type=1400 audit(2000016625.318:41901): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 429.035163][T15370] loop2: detected capacity change from 0 to 2048 [ 429.065132][T15370] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 429.101665][ T28] audit: type=1400 audit(2000016625.318:41902): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 429.151071][T15372] audit: audit_backlog=65 > audit_backlog_limit=64 [ 429.167008][T15370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.181687][T15370] audit: audit_backlog=65 > audit_backlog_limit=64 [ 429.188624][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 429.188642][T15372] audit: audit_lost=716 audit_rate_limit=0 audit_backlog_limit=64 [ 429.195164][ C1] audit: audit_lost=717 audit_rate_limit=0 audit_backlog_limit=64 [ 429.210818][ C1] audit: backlog limit exceeded [ 429.397318][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.707356][T15396] IPv6: addrconf: prefix option has invalid lifetime [ 429.828037][T15399] loop9: detected capacity change from 0 to 512 [ 429.858920][T15399] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 429.891897][T15399] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 429.955716][T15399] EXT4-fs (loop9): 1 truncate cleaned up [ 430.002088][T15399] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.077445][T15399] EXT4-fs error (device loop9): ext4_append:79: inode #2: comm syz.9.3120: Logical block already allocated [ 430.151176][T15399] EXT4-fs (loop9): Remounting filesystem read-only [ 430.175153][ T9534] Bluetooth: hci0: Frame reassembly failed (-84) [ 430.783633][T10813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.272580][T15428] loop2: detected capacity change from 0 to 512 [ 431.297384][T15428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.310159][T15428] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.583013][T15424] team0: Port device team_slave_0 removed [ 431.688865][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3129'. [ 432.296326][T15409] Bluetooth: hci0: command 0x1003 tx timeout [ 432.302410][ T3695] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 432.886753][T15446] sctp: [Deprecated]: syz.1.3132 (pid 15446) Use of int in max_burst socket option. [ 432.886753][T15446] Use struct sctp_assoc_value instead [ 433.208711][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.272648][T15451] loop7: detected capacity change from 0 to 512 [ 433.321798][T15451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.344857][T15451] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 433.490030][T15451] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3136'. [ 433.569915][T15451] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #2: block 18: comm syz.7.3136: lblock 23 mapped to illegal pblock 18 (length 1) [ 433.671084][T15467] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #2: block 18: comm syz.7.3136: lblock 23 mapped to illegal pblock 18 (length 1) [ 433.763010][ T28] kauditd_printk_skb: 541 callbacks suppressed [ 433.763080][ T28] audit: type=1400 audit(2000016630.298:42432): avc: denied { read write } for pid=6690 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.806442][ T28] audit: type=1400 audit(2000016630.298:42433): avc: denied { open } for pid=6690 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.831389][ T28] audit: type=1400 audit(2000016630.378:42434): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.857534][ T28] audit: type=1400 audit(2000016630.378:42435): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.883023][ T28] audit: type=1400 audit(2000016630.388:42436): avc: denied { read write } for pid=12709 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.954055][ T28] audit: type=1400 audit(2000016630.388:42437): avc: denied { open } for pid=12709 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.034143][ T28] audit: type=1400 audit(2000016630.388:42438): avc: denied { ioctl } for pid=12709 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.128592][T15482] loop9: detected capacity change from 0 to 4096 [ 434.146535][ T28] audit: type=1400 audit(2000016630.408:42439): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 434.175791][T15482] EXT4-fs: Ignoring removed bh option [ 434.192295][T14277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.216641][T15482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.264833][ T28] audit: type=1400 audit(2000016630.408:42440): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 434.291498][ T28] audit: type=1400 audit(2000016630.418:42441): avc: denied { read write } for pid=10813 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.741869][T15496] loop2: detected capacity change from 0 to 256 [ 434.776513][T10813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.971074][T15503] FAULT_INJECTION: forcing a failure. [ 434.971074][T15503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.985236][T15503] CPU: 1 UID: 0 PID: 15503 Comm: syz.1.3152 Tainted: G W syzkaller #0 PREEMPT(full) [ 434.985270][T15503] Tainted: [W]=WARN [ 434.985279][T15503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.985373][T15503] Call Trace: [ 434.985378][T15503] [ 434.985385][T15503] __dump_stack+0x1d/0x30 [ 434.985415][T15503] dump_stack_lvl+0x95/0xd0 [ 434.985441][T15503] dump_stack+0x15/0x1b [ 434.985464][T15503] should_fail_ex+0x263/0x280 [ 434.985508][T15503] should_fail+0xb/0x20 [ 434.985572][T15503] should_fail_usercopy+0x1a/0x20 [ 434.985675][T15503] _copy_from_user+0x1c/0xb0 [ 434.985704][T15503] ___sys_sendmsg+0xc1/0x1e0 [ 434.985779][T15503] __x64_sys_sendmsg+0xd4/0x160 [ 434.985842][T15503] x64_sys_call+0x194c/0x3020 [ 434.985873][T15503] do_syscall_64+0x12c/0x370 [ 434.985937][T15503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.986012][T15503] RIP: 0033:0x7f83337fc819 [ 434.986028][T15503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.986049][T15503] RSP: 002b:00007f833224f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.986071][T15503] RAX: ffffffffffffffda RBX: 00007f8333a75fa0 RCX: 00007f83337fc819 [ 434.986088][T15503] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 434.986183][T15503] RBP: 00007f833224f090 R08: 0000000000000000 R09: 0000000000000000 [ 434.986197][T15503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.986257][T15503] R13: 00007f8333a76038 R14: 00007f8333a75fa0 R15: 00007ffef671c0f8 [ 434.986280][T15503] [ 435.369822][T15511] syzkaller0: entered promiscuous mode [ 435.391049][T15511] syzkaller0: entered allmulticast mode [ 435.472645][T15518] loop9: detected capacity change from 0 to 256 [ 435.498510][T15518] msdos: Bad value for 'uid' [ 435.510838][T15518] msdos: Bad value for 'uid' [ 435.581804][T15522] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3158'. [ 435.640993][T15522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3158'. [ 435.653696][T15518] netlink: 'syz.9.3156': attribute type 26 has an invalid length. [ 435.680271][T15520] tipc: Started in network mode [ 435.706287][T15520] tipc: Node identity dacee3730b51, cluster identity 4711 [ 435.713508][T15520] tipc: Enabled bearer , priority 0 [ 435.731457][T15524] syzkaller0: entered promiscuous mode [ 435.741320][T15524] syzkaller0: entered allmulticast mode [ 435.896790][T15520] tipc: Resetting bearer [ 435.902594][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.910696][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.046241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.054516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.196232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.326293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.334412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.466329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.606253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.614389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.877684][T15520] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3157'. [ 436.897572][T15519] tipc: Resetting bearer [ 436.948661][T15519] tipc: Disabling bearer [ 437.111807][T15092] tipc: Node number set to 3516916595 [ 438.923155][ T28] kauditd_printk_skb: 416 callbacks suppressed [ 438.923185][ T28] audit: type=1400 audit(2000016635.058:42858): avc: denied { write } for pid=15546 comm="syz.7.3164" laddr=fec0:ffff:ffff:ffff::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 438.985601][ T28] audit: type=1400 audit(2000016635.058:42859): avc: denied { connect } for pid=15546 comm="syz.7.3164" laddr=fec0:ffff:ffff:ffff::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 439.117747][ T28] audit: type=1400 audit(2000016635.058:42860): avc: denied { name_connect } for pid=15546 comm="syz.7.3164" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 439.234321][ T28] audit: type=1400 audit(2000016635.128:42861): avc: denied { recv } for pid=15526 comm="syz.5.3161" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 439.274269][T15557] loop9: detected capacity change from 0 to 512 [ 439.305916][T15557] EXT4-fs: inline encryption not supported [ 439.336685][T15557] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 439.466334][ T28] audit: type=1400 audit(2000016635.608:42862): avc: denied { recv } for pid=3296 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 439.571854][T15557] EXT4-fs (loop9): 1 truncate cleaned up [ 439.608247][T15557] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.651209][ T28] audit: type=1400 audit(2000016635.618:42863): avc: denied { read write } for pid=10813 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.700571][T15557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.754209][ T28] audit: type=1400 audit(2000016635.618:42864): avc: denied { open } for pid=10813 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.789873][ T28] audit: type=1400 audit(2000016635.618:42865): avc: denied { ioctl } for pid=10813 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.815791][ T28] audit: type=1400 audit(2000016635.628:42866): avc: denied { recv } for pid=15546 comm="syz.7.3164" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 439.906482][ T28] audit: type=1400 audit(2000016635.628:42867): avc: denied { recv } for pid=3296 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 440.120786][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 440.134839][T15574] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3173'. [ 440.223997][T15578] loop7: detected capacity change from 0 to 512 [ 440.296326][T15578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 440.321087][T15578] System zones: 1-12 [ 440.336530][T15578] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.3174: corrupted in-inode xattr: e_value size too large [ 440.352723][T15578] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 440.356248][T15578] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3174: couldn't read orphan inode 15 (err -117) [ 440.377289][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 440.377318][ C1] EXT4-fs (loop7): initial error at time 2000016636: ext4_iget_extra_inode:5040: inode 15 [ 440.377339][ C1] EXT4-fs (loop7): last error at time 2000016636: ext4_iget_extra_inode:5040: inode 15 [ 440.403705][T15578] loop7: lost filesystem error report for type 5 error -117 [ 440.414298][T15578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.470806][T15585] loop9: detected capacity change from 0 to 128 [ 440.731112][T14277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.906650][T15593] netlink: 'syz.9.3179': attribute type 13 has an invalid length. [ 440.949215][T15597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15597 comm=syz.9.3179 [ 440.980002][T15594] netlink: 'syz.1.3177': attribute type 21 has an invalid length. [ 441.005111][T15597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15597 comm=syz.9.3179 [ 441.018455][T15594] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3177'. [ 441.032178][T15597] netlink: 1195 bytes leftover after parsing attributes in process `syz.9.3179'. [ 441.141921][ T3881] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.200449][T15603] loop2: detected capacity change from 0 to 512 [ 441.249973][T15603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.279916][T15597] loop9: detected capacity change from 0 to 512 [ 441.290836][T15603] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.315768][T15597] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.3179: corrupted inode contents [ 441.341095][T15597] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.342164][ T3881] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.351338][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 441.351358][ C0] EXT4-fs (loop9): initial error at time 2000016637: ext4_do_update_inode:5602: inode 15 [ 441.351389][ C0] EXT4-fs (loop9): last error at time 2000016637: ext4_do_update_inode:5602: inode 15 [ 441.388675][T15597] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 441.397370][T15597] loop9: lost filesystem error report for type 5 error -117 [ 441.406413][T15597] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.3179: corrupted inode contents [ 441.416024][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 441.443689][T15597] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.443901][T15597] EXT4-fs error (device loop9): ext4_evict_inode:313: inode #15: comm syz.9.3179: mark_inode_dirty error [ 441.494213][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 441.516238][T15597] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.516425][T15597] EXT4-fs (loop9): 1 orphan inode deleted [ 441.533531][T15603] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3184'. [ 441.572988][T15597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.589576][T15614] loop5: detected capacity change from 0 to 512 [ 441.639617][ T3881] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.653986][T15614] EXT4-fs: inline encryption not supported [ 441.691063][T15614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 441.728375][T15614] EXT4-fs (loop5): 1 truncate cleaned up [ 441.734489][T15614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.747212][T15619] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.780381][T15614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.833368][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.844447][ T3881] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.029589][T15629] loop2: detected capacity change from 0 to 764 [ 442.049119][T10813] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.092572][T15629] Symlink component flag not implemented [ 442.120536][T15629] Symlink component flag not implemented (116) [ 442.456555][T15604] chnl_net:caif_netlink_parms(): no params data found [ 442.566760][T15604] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.574014][T15604] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.581172][T15604] bridge_slave_0: entered allmulticast mode [ 442.588155][T15604] bridge_slave_0: entered promiscuous mode [ 442.597001][T15604] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.604593][T15604] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.611854][T15604] bridge_slave_1: entered allmulticast mode [ 442.618636][T15604] bridge_slave_1: entered promiscuous mode [ 442.641975][T15604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.654422][T15604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.678474][T15604] team0: Port device team_slave_0 added [ 442.687478][T15604] team0: Port device team_slave_1 added [ 442.715635][T15604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.722942][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.749446][T15604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.763060][T15604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.772102][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.852013][T15604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.887138][T15661] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 442.897651][ T3881] bridge_slave_1: left allmulticast mode [ 442.900102][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.903311][ T3881] bridge_slave_1: left promiscuous mode [ 442.939276][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.959415][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.969116][ T3881] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.980728][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.989386][T15664] loop5: detected capacity change from 0 to 512 [ 442.999894][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.008669][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.017307][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.025809][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.034423][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.043011][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.043588][ T3881] bridge_slave_0: left allmulticast mode [ 443.052750][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.065036][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.082825][T15670] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3195'. [ 443.093407][T15664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.120942][ T3881] bridge_slave_0: left promiscuous mode [ 443.126884][ T3881] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.137660][T15664] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 443.266765][T12841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.394475][T15697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15697 comm=syz.5.3199 [ 443.408483][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3200'. [ 443.434366][T15696] netlink: 200 bytes leftover after parsing attributes in process `syz.9.3200'. [ 443.593935][T15700] loop5: detected capacity change from 0 to 512 [ 443.611890][T15700] EXT4-fs: inline encryption not supported [ 443.623250][T15700] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 443.634203][ T3881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.647746][T15700] EXT4-fs (loop5): 1 truncate cleaned up [ 443.667008][T15700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.679598][ T3881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.696303][T15700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.706503][ T3881] bond0 (unregistering): Released all slaves [ 443.782132][ T3881] tipc: Left network mode [ 443.839828][ T3881] hsr_slave_0: left promiscuous mode [ 443.847609][ T3881] hsr_slave_1: left promiscuous mode [ 443.854196][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.886297][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.933862][ T28] kauditd_printk_skb: 1197 callbacks suppressed [ 443.933878][ T28] audit: type=1400 audit(2000016640.478:44065): avc: denied { read write } for pid=15679 comm="syz.2.3198" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.935276][T15702] loop2: detected capacity change from 0 to 128 [ 443.966341][ T28] audit: type=1400 audit(2000016640.478:44066): avc: denied { read write open } for pid=15679 comm="syz.2.3198" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.978816][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.024458][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.072368][ T3881] veth1_macvtap: left promiscuous mode [ 444.094357][ T28] audit: type=1400 audit(2000016640.478:44067): avc: denied { ioctl } for pid=15679 comm="syz.2.3198" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.101589][T15702] msdos: Bad value for 'dmask' [ 444.124785][ T3881] veth0_macvtap: left promiscuous mode [ 444.136310][ T3881] veth1_vlan: left promiscuous mode [ 444.141551][ T3881] veth0_vlan: left promiscuous mode [ 444.225153][ T28] audit: type=1400 audit(2000016640.498:44068): avc: denied { open } for pid=15699 comm="syz.5.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 444.245521][T15721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 444.255507][T15725] audit: audit_backlog=65 > audit_backlog_limit=64 [ 444.275071][T15725] audit: audit_lost=722 audit_rate_limit=0 audit_backlog_limit=64 [ 444.291202][T15721] audit: audit_lost=723 audit_rate_limit=0 audit_backlog_limit=64 [ 444.314607][T15725] audit: backlog limit exceeded [ 444.319594][ T28] audit: type=1400 audit(2000016640.498:44069): avc: denied { perfmon } for pid=15699 comm="syz.5.3201" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 444.488066][ T3881] team0 (unregistering): Port device team_slave_1 removed [ 444.564600][T15604] hsr_slave_0: entered promiscuous mode [ 444.577166][T15604] hsr_slave_1: entered promiscuous mode [ 444.583053][T15604] debugfs: 'hsr0' already exists in 'hsr' [ 444.604847][T15604] Cannot create hsr debugfs directory [ 444.733886][T15736] FAULT_INJECTION: forcing a failure. [ 444.733886][T15736] name failslab, interval 1, probability 0, space 0, times 0 [ 444.764932][T15736] CPU: 0 UID: 0 PID: 15736 Comm: syz.1.3208 Tainted: G W syzkaller #0 PREEMPT(full) [ 444.764966][T15736] Tainted: [W]=WARN [ 444.764974][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.764988][T15736] Call Trace: [ 444.765074][T15736] [ 444.765084][T15736] __dump_stack+0x1d/0x30 [ 444.765115][T15736] dump_stack_lvl+0x95/0xd0 [ 444.765143][T15736] dump_stack+0x15/0x1b [ 444.765220][T15736] should_fail_ex+0x263/0x280 [ 444.765252][T15736] should_failslab+0x8c/0xb0 [ 444.765277][T15736] kmem_cache_alloc_noprof+0x66/0x400 [ 444.765344][T15736] ? alloc_empty_file+0x76/0x200 [ 444.765371][T15736] alloc_empty_file+0x76/0x200 [ 444.765395][T15736] alloc_file_pseudo+0xf6/0x190 [ 444.765492][T15736] __shmem_file_setup+0x1dd/0x210 [ 444.765524][T15736] shmem_file_setup+0x3b/0x50 [ 444.765553][T15736] memfd_alloc_file+0x4e/0x300 [ 444.765629][T15736] __se_sys_memfd_create+0x2e1/0x3b0 [ 444.765714][T15736] __x64_sys_memfd_create+0x31/0x40 [ 444.765748][T15736] x64_sys_call+0x1f22/0x3020 [ 444.765776][T15736] do_syscall_64+0x12c/0x370 [ 444.765862][T15736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.765894][T15736] RIP: 0033:0x7f83337fc819 [ 444.765912][T15736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.765946][T15736] RSP: 002b:00007f833224ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 444.765966][T15736] RAX: ffffffffffffffda RBX: 0000000000000511 RCX: 00007f83337fc819 [ 444.765981][T15736] RDX: 00007f833224eee0 RSI: 0000000000000000 RDI: 00007f8333892e71 [ 444.765994][T15736] RBP: 0000200000000e00 R08: 00000000ffffffff R09: 0000000000000000 [ 444.766008][T15736] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 444.766021][T15736] R13: 00007f833224eee0 R14: 00007f833224eea0 R15: 0000200000000180 [ 444.766045][T15736] [ 445.191040][T15756] __nla_validate_parse: 2 callbacks suppressed [ 445.191054][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3212'. [ 445.239274][T15760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3213'. [ 445.403620][T15604] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 445.456977][T15604] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 445.491814][T15779] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 445.500300][T15604] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 445.540226][T15604] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 445.833807][T15604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.888775][T15803] loop9: detected capacity change from 0 to 512 [ 445.905501][T15803] EXT4-fs: inline encryption not supported [ 445.929385][T15604] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.945916][T15803] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 445.960351][T13073] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.967445][T13073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.986704][T15803] EXT4-fs (loop9): 1 truncate cleaned up [ 445.992806][T15803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.022611][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.029719][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.037776][T15803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.137339][T15803] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 446.561674][T15836] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3220'. [ 446.679010][T15604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.717597][T15850] loop5: detected capacity change from 0 to 256 [ 446.869273][T15841] pimreg: entered allmulticast mode [ 446.914303][T15841] pimreg: left allmulticast mode [ 447.010062][T15857] loop9: detected capacity change from 0 to 8192 [ 447.166693][T15857] syz.9.3223: attempt to access beyond end of device [ 447.166693][T15857] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 447.521306][T15604] veth0_vlan: entered promiscuous mode [ 447.639601][T15890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15890 comm=syz.9.3225 [ 447.654629][T15604] veth1_vlan: entered promiscuous mode [ 447.720044][T15895] loop5: detected capacity change from 0 to 512 [ 447.761462][T15895] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 447.854682][T15906] bridge2: entered promiscuous mode [ 447.886230][T15906] bridge2: entered allmulticast mode [ 447.915124][T15906] team0: Port device bridge2 added [ 447.964739][T15910] loop5: detected capacity change from 0 to 1024 [ 448.030216][T15604] veth0_macvtap: entered promiscuous mode [ 448.033312][T15910] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.073353][T15604] veth1_macvtap: entered promiscuous mode [ 448.108689][T15604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.130751][T12841] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 448.139937][ T3943] IPVS: starting estimator thread 0... [ 448.141546][T15604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.160690][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.215473][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.238791][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.257408][T15920] IPVS: using max 2688 ests per chain, 134400 per kthread [ 448.266621][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.349567][T15924] loop5: detected capacity change from 0 to 512 [ 448.368933][T15924] EXT4-fs: inline encryption not supported [ 448.405488][T15924] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 448.452822][T15924] EXT4-fs (loop5): 1 truncate cleaned up [ 448.484551][T15924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.498515][T15924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.537247][T15934] loop2: detected capacity change from 0 to 1024 [ 448.605739][T15934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.768537][T15948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.776028][T15948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.851006][T15948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.873131][T15948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.946161][ T28] kauditd_printk_skb: 2114 callbacks suppressed [ 448.946177][ T28] audit: type=1400 audit(2000016645.488:46051): avc: denied { read write } for pid=15922 comm="syz.5.3232" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.987139][T15924] loop5: detected capacity change from 0 to 8192 [ 449.005470][ T28] audit: type=1400 audit(2000016645.538:46052): avc: denied { read write open } for pid=15922 comm="syz.5.3232" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.037045][T15633] loop5: p1 p3 p4 [ 449.046993][T15633] loop5: p1 size 16778240 extends beyond EOD, truncated [ 449.054064][ T28] audit: type=1400 audit(2000016645.538:46053): avc: denied { ioctl } for pid=15922 comm="syz.5.3232" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.085972][ T28] audit: type=1400 audit(2000016645.538:46054): avc: denied { create } for pid=15943 comm="syz.1.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.106214][T15633] loop5: p3 size 100663552 extends beyond EOD, truncated [ 449.115474][T15633] loop5: p4 size 50331648 extends beyond EOD, truncated [ 449.123995][ T28] audit: type=1400 audit(2000016645.538:46055): avc: denied { ioctl } for pid=15922 comm="syz.5.3232" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.158752][T15924] loop5: p1 p3 p4 [ 449.162588][T15924] loop5: p1 size 16778240 extends beyond EOD, truncated [ 449.174621][T15924] loop5: p3 size 100663552 extends beyond EOD, truncated [ 449.193733][T15956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 449.205026][T15924] loop5: p4 size 50331648 extends beyond EOD, truncated [ 449.208802][ T28] audit: type=1400 audit(2000016645.628:46056): avc: denied { search } for pid=15955 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.222547][T15956] audit: audit_lost=768 audit_rate_limit=0 audit_backlog_limit=64 [ 449.244804][T15958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 449.252158][T15958] audit: audit_lost=769 audit_rate_limit=0 audit_backlog_limit=64 [ 449.277793][T15958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3236'. [ 449.417069][T15965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15965 comm=syz.1.3238 [ 449.455802][T15971] loop5: detected capacity change from 0 to 128 [ 449.486602][T15971] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 449.550383][T15971] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 449.604791][T15971] FAT-fs (loop5): Filesystem has been set read-only [ 449.611676][T15971] syz.5.3240: attempt to access beyond end of device [ 449.611676][T15971] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 449.788003][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.872532][T15992] loop9: detected capacity change from 0 to 512 [ 449.901887][T15992] msdos: Unknown parameter '' [ 449.999011][T15993] No such timeout policy "syz1" [ 450.476912][T15633] udevd[15633]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 450.514807][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 450.520238][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 450.652490][T16004] EXT4-fs: inline encryption not supported [ 450.671775][T16004] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 450.708165][T16004] EXT4-fs (loop8): 1 truncate cleaned up [ 450.714563][T16004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.756828][T16004] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.885072][ T6980] udevd[6980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 450.901361][T15633] udevd[15633]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 450.918380][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 452.073580][T16064] FAULT_INJECTION: forcing a failure. [ 452.073580][T16064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.104596][T16064] CPU: 1 UID: 0 PID: 16064 Comm: syz.8.3255 Tainted: G W syzkaller #0 PREEMPT(full) [ 452.104701][T16064] Tainted: [W]=WARN [ 452.104736][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.104747][T16064] Call Trace: [ 452.104752][T16064] [ 452.104758][T16064] __dump_stack+0x1d/0x30 [ 452.104785][T16064] dump_stack_lvl+0x95/0xd0 [ 452.104843][T16064] dump_stack+0x15/0x1b [ 452.104887][T16064] should_fail_ex+0x263/0x280 [ 452.104918][T16064] should_fail+0xb/0x20 [ 452.104946][T16064] should_fail_usercopy+0x1a/0x20 [ 452.104993][T16064] _copy_from_user+0x1c/0xb0 [ 452.105031][T16064] core_sys_select+0x323/0x730 [ 452.105073][T16064] ? set_user_sigmask+0x8b/0x140 [ 452.105166][T16064] ? kmem_cache_free+0xc8/0x380 [ 452.105195][T16064] __se_sys_pselect6+0x23c/0x2a0 [ 452.105226][T16064] __x64_sys_pselect6+0x78/0x90 [ 452.105261][T16064] x64_sys_call+0x8d5/0x3020 [ 452.105297][T16064] do_syscall_64+0x12c/0x370 [ 452.105413][T16064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.105432][T16064] RIP: 0033:0x7fa0a32ac819 [ 452.105445][T16064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.105494][T16064] RSP: 002b:00007fa0a1d07028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 452.105517][T16064] RAX: ffffffffffffffda RBX: 00007fa0a3525fa0 RCX: 00007fa0a32ac819 [ 452.105532][T16064] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 452.105546][T16064] RBP: 00007fa0a1d07090 R08: 0000000000000000 R09: 0000000000000000 [ 452.105560][T16064] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 452.105614][T16064] R13: 00007fa0a3526038 R14: 00007fa0a3525fa0 R15: 00007fff3e4e0908 [ 452.105695][T16064] [ 452.450669][T16068] set_capacity_and_notify: 1 callbacks suppressed [ 452.450682][T16068] loop5: detected capacity change from 0 to 256 [ 452.470532][T16082] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 452.540170][T16088] tipc: Started in network mode [ 452.545095][T16088] tipc: Node identity e620938a9ed5, cluster identity 4711 [ 452.552356][T16088] tipc: Enabled bearer , priority 0 [ 452.712308][ T9] hid_parser_main: 25 callbacks suppressed [ 452.712328][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 452.729192][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 452.769507][T16088] syzkaller0: entered promiscuous mode [ 452.775577][T16088] syzkaller0: entered allmulticast mode [ 452.821760][T16087] tipc: Resetting bearer [ 452.897246][T16087] tipc: Disabling bearer [ 453.134790][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3267'. [ 453.978113][ T28] kauditd_printk_skb: 1799 callbacks suppressed [ 453.978216][ T28] audit: type=1400 audit(2000016650.508:47848): avc: denied { open } for pid=16146 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 454.301439][ T28] audit: type=1400 audit(2000016650.508:47849): avc: denied { perfmon } for pid=16146 comm="syz.2.3272" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.429735][ T28] audit: type=1400 audit(2000016650.508:47850): avc: denied { kernel } for pid=16146 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 454.468583][ T9534] ================================================================== [ 454.476726][ T9534] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 454.484985][ T9534] [ 454.487326][ T9534] write to 0xffff88810b6c1508 of 44 bytes by task 16165 on cpu 1: [ 454.495145][ T9534] tty_set_termios+0xc0/0x910 [ 454.499844][ T9534] set_termios+0x373/0x4f0 [ 454.504328][ T9534] tty_mode_ioctl+0x37f/0x5b0 [ 454.509033][ T9534] n_tty_ioctl_helper+0x87/0x370 [ 454.514008][ T9534] n_tty_ioctl+0x101/0x230 [ 454.518458][ T9534] tty_ioctl+0x83e/0xb80 [ 454.522751][ T9534] __se_sys_ioctl+0xce/0x140 [ 454.527378][ T9534] __x64_sys_ioctl+0x43/0x50 [ 454.532000][ T9534] x64_sys_call+0x1563/0x3020 [ 454.536712][ T9534] do_syscall_64+0x12c/0x370 [ 454.541333][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.547251][ T9534] [ 454.549593][ T9534] read to 0xffff88810b6c1522 of 1 bytes by task 9534 on cpu 0: [ 454.557159][ T9534] n_tty_lookahead_flow_ctrl+0x1bd/0x300 [ 454.562820][ T9534] tty_port_default_lookahead_buf+0x91/0xc0 [ 454.568765][ T9534] flush_to_ldisc+0x288/0x340 [ 454.573489][ T9534] process_scheduled_works+0x513/0xa10 [ 454.578987][ T9534] worker_thread+0x58a/0x780 [ 454.583627][ T9534] kthread+0x22a/0x280 [ 454.587730][ T9534] ret_from_fork+0x150/0x360 [ 454.592364][ T9534] ret_from_fork_asm+0x1a/0x30 [ 454.597159][ T9534] [ 454.599504][ T9534] value changed: 0x13 -> 0x81 [ 454.604199][ T9534] [ 454.606533][ T9534] Reported by Kernel Concurrency Sanitizer on: [ 454.612693][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(full) [ 454.623812][ T9534] Tainted: [W]=WARN [ 454.627734][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 454.637800][ T9534] Workqueue: events_unbound flush_to_ldisc [ 454.643667][ T9534] ================================================================== [ 454.712714][ T28] audit: type=1400 audit(2000016650.518:47851): avc: denied { open } for pid=16146 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 454.732840][ T28] audit: type=1400 audit(2000016650.638:47852): avc: denied { create } for pid=16146 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 454.756270][ T28] audit: type=1400 audit(2000016650.638:47853): avc: denied { recv } for pid=16146 comm="syz.2.3272" saddr=10.128.0.163 src=30036 daddr=10.128.0.140 dest=53860 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 454.795143][ T28] audit: type=1400 audit(2000016650.658:47854): avc: denied { ioctl } for pid=16146 comm="syz.2.3272" path="socket:[46425]" dev="sockfs" ino=46425 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 454.831421][ T28] audit: type=1400 audit(2000016650.708:47855): avc: denied { map_create } for pid=16146 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.857197][ T28] audit: type=1400 audit(2000016650.708:47856): avc: denied { map_read map_write } for pid=16146 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.885627][ T28] audit: type=1400 audit(2000016650.708:47857): avc: denied { prog_load } for pid=16146 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.916426][T16169] loop8: detected capacity change from 0 to 128 [ 454.974153][T16169] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3278'. [ 458.987519][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 458.987536][ T28] audit: type=1400 audit(2000016655.538:48049): avc: denied { search } for pid=16186 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.018890][ T28] audit: type=1400 audit(2000016655.538:48050): avc: denied { search } for pid=16186 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.042481][ T28] audit: type=1400 audit(2000016655.538:48051): avc: denied { search } for pid=16186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.066723][ T28] audit: type=1400 audit(2000016655.538:48052): avc: denied { read open } for pid=16186 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.092797][ T28] audit: type=1400 audit(2000016655.538:48053): avc: denied { getattr } for pid=16186 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.121057][ T28] audit: type=1400 audit(2000016655.538:48054): avc: denied { search } for pid=16186 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.145042][ T28] audit: type=1400 audit(2000016655.538:48055): avc: denied { search } for pid=16186 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.169582][ T28] audit: type=1400 audit(2000016655.538:48056): avc: denied { search } for pid=16186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.194199][ T28] audit: type=1400 audit(2000016655.538:48057): avc: denied { search } for pid=16186 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.204555][T16185] audit: audit_backlog=65 > audit_backlog_limit=64