last executing test programs: 34.544482031s ago: executing program 2 (id=214): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x1a) 34.530409262s ago: executing program 2 (id=216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x1a) 34.433938798s ago: executing program 2 (id=217): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={&(0x7f0000000100), 0x14, &(0x7f0000000180)={&(0x7f0000000140)="a1d5959b03da04d23b374d67e87370", 0xf}, 0x1, 0x0, 0x0, 0x41}, 0x20040010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) cachestat(r3, &(0x7f0000000040)={0x71a3, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES16=r3, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100002020782500000000002020207b1ae4ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x112, &(0x7f0000000340)=""/222}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 33.602081616s ago: executing program 2 (id=224): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) setresuid(0xee01, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nobarrier}, {@barrier}, {@noauto_da_alloc}, {@noload}, {@nobarrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0xfe, 0x44e, &(0x7f00000010c0)="$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") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x12020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x13) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000000001010400000000000000000200000014000f8008000240000000070800016000000003240001801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c854}, 0x4) 32.607755234s ago: executing program 2 (id=234): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) setresuid(0x0, 0xee00, 0x0) setrlimit(0x7, &(0x7f0000000400)) memfd_secret(0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000001200)='4', 0x1}], 0x1) getdents64(r4, &(0x7f0000002540)=""/4096, 0x1000) 32.256656594s ago: executing program 2 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x1a) 32.223489156s ago: executing program 32 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x1a) 23.816365562s ago: executing program 5 (id=305): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x50}}, 0x4048000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r5, 0x0) mq_timedsend(r5, &(0x7f0000001840)="466c0a99f2943506546544e73322771c066ffc0941f7977845460e06e03dba1f66d881040a838cca8cbb382a41653c5d81907859b0eefc6a0595f14ab25e7ab5fd79972ce78b0bf5ea122b556c2eb50663a6b58df6e6d4f357e32b62879bb3d534905027ab802438b21cee07794c1dcf493f571f24c735c82e4a0a1077286edd3ea5f4e67223edc3bd", 0x89, 0x10001, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r6) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4d0}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x1000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r8, &(0x7f0000000180)=""/213, 0xd5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) 22.840567749s ago: executing program 5 (id=311): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x80) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000280)}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000001}) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44000006) 22.687283528s ago: executing program 5 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 21.779554661s ago: executing program 5 (id=323): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = inotify_init1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000002400000008000300", @ANYRES32=r6, @ANYBLOB="44002f80"], 0x60}, 0x1, 0x0, 0x0, 0x4884}, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516) 21.726479953s ago: executing program 5 (id=324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x1a) 21.482633978s ago: executing program 5 (id=326): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x1e}, 0x6025, 0x4005, 0xb, 0x1, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) 21.466525889s ago: executing program 33 (id=326): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x1e}, 0x6025, 0x4005, 0xb, 0x1, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) 2.711376303s ago: executing program 6 (id=553): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x8, 0x81) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0xffffffff80000000, r0, 'id0\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140)={0x8}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r5, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7fff, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20000084) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000500)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x6, 0x2, 0x8, 0x400, 0x3}) r9 = syz_clone(0x40044000, &(0x7f0000000580)="ee085dd39ffaecb0e3ec96b7ca710b2bfcc74f046046b49e7cc5e7ae4ae265f43fcc3df9c1cfebc1fc233468cd0b3e6d6a1973487767269c7db964287eb9809f4c5e7c247ff42dd2aea6e7bd1cc080fd9c07efed9170b211b36690ab7a60940d2a88ebbcfe29350b77954cc9606c3ef2e102c69653b35302725ba00f6efcbad7feab38f024760a542eeb1f30d365a2384eaf6271233bd6a8650dfeedba58c0e1e1c3c23709e73d026aef395eabd5afd6d9d5d7a12a068b2c773338a0314eae38ea5e9ed7304ebc9d6f4815cdad7abbfdc3c6f5539390dce5b7", 0xd9, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="cd676726b43de2dd3358a1") ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000740)={0xa, 0x2, 0xa, 0x7, 0x8}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4) linkat(r3, &(0x7f0000000900)='./file0\x00', r2, &(0x7f0000000940)='./file0\x00', 0x1400) fspick(r3, &(0x7f0000000980)='./file0\x00', 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f00000009c0)) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r7, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x159d, 0x5b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc40}, 0x20000000) openat(0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00', 0x200400, 0x194) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xee}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x3, 0x40, 0x1, 0x400}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4048040) ptrace$ARCH_SHSTK_LOCK(0x1e, r9, 0x1, 0x5003) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x4000010, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x108, &(0x7f0000000c80)=0x8b9, 0x0, 0x4) write$selinux_attr(r3, &(0x7f0000000cc0)='system_u:object_r:cpu_device_t:s0\x00', 0x22) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x1d}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x81}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x60}, 0x1, 0x0, 0x0, 0x40894}, 0x4004014) 2.172533314s ago: executing program 6 (id=556): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef1, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0xdf, &(0x7f0000000040)={0x0, 0x183, 0x8, 0x3, 0x223}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d2, 0x20, 0x6c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.031683953s ago: executing program 6 (id=559): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_setup(0x8, &(0x7f0000002740)=0x0) add_key(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)="b283f47294a793cc80863fc011cc2973e494df9620872e0080af115d8c1ed7a32d0d993e8dbba2c4cb06d3130eb7f53a4f031bc207da30e95d8d5cd237ae5dc2fbf7aca89936c4f6ad12ef281363ed234e6da26cc472b2f227d2823eeb6aa901508317332b1e0e6569807dc07e49a0f7819f7c02d406f68051299e959ff4eadde34f4de0e9cb2a4287ce620fa51c85913bdb9153bfbe73ce68c33ac412ac1ece4db666e1a70d4afefae54f5910e83bf798d8ad4f557378be9e09dcf4ac98c5c4da46e8773a7c25ed67422ea88fca536a571ea86ee01168", 0xd7, 0xffffffffffffffff) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) (async) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) (async) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x4}, 0x120, 0xffff, 0x33f8, 0x1, 0x3, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r3, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000b63184ec1fe35b3de15c4e5dcc85000000a50095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000b63184ec1fe35b3de15c4e5dcc85000000a50095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f186ddcfd30edd522f3410a66ae780d92227fbbf1597fea99a4dfbed5be2b1291a9e007e3bb3c6c6750b6d", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @empty, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x10000153}, 0x41) io_cancel(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1f4cd98f9ce4a160, 0x6, r7, &(0x7f00000007c0)="35fe9e23d8e4f71b53009b5a45bb44b64a6388e803e6e729edd847166482d6dd0168725a2249509845599f36ff6796fea1c71b254c6ec17bd05bc931fbd483882bc504524b1a1c3a98961453f0114753e13739738fa4a82e04837cdcdba2ec71e6271f0ea17e93890a424d1ab2a2302aaa111b3c707bc7abd6450b6b351051f98592973659e06d3a672954", 0x8b, 0x5, 0x0, 0x2}, &(0x7f00000004c0)) (async) io_cancel(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1f4cd98f9ce4a160, 0x6, r7, &(0x7f00000007c0)="35fe9e23d8e4f71b53009b5a45bb44b64a6388e803e6e729edd847166482d6dd0168725a2249509845599f36ff6796fea1c71b254c6ec17bd05bc931fbd483882bc504524b1a1c3a98961453f0114753e13739738fa4a82e04837cdcdba2ec71e6271f0ea17e93890a424d1ab2a2302aaa111b3c707bc7abd6450b6b351051f98592973659e06d3a672954", 0x8b, 0x5, 0x0, 0x2}, &(0x7f00000004c0)) syz_io_uring_setup(0x88f, &(0x7f0000000740)={0x0, 0x68ec, 0x0, 0x1, 0xbfdfffff}, &(0x7f0000000340), &(0x7f0000000380)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x15, 0x5, 0x0) (async) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 1.934140278s ago: executing program 6 (id=560): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079100000000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240088d0) 1.788506067s ago: executing program 6 (id=562): io_setup(0x8, &(0x7f0000000600)) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2020) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) chdir(0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)="c082b44eb524", 0x6}], 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) 1.361740981s ago: executing program 0 (id=569): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x80000001, 0x4) 1.360909391s ago: executing program 0 (id=570): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1ff0000aa}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x1, @loopback, 0x10}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @remote, 0x779}}, [0x8, 0x9, 0x8, 0x1, 0x7ff, 0xfffffffffffffffa, 0x9, 0x2, 0xe2a5, 0x3, 0x4, 0x7, 0x8, 0x0, 0x7]}, &(0x7f00000002c0)=0x100) 1.353986421s ago: executing program 4 (id=572): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4) syz_open_dev$vcsn(&(0x7f0000001140), 0x7, 0x10001) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001600000", 0x24) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x58021, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0xbffc, 0x27b6a97, @local, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x22, 0x0, 0x6}, {0x6, 0x0, 0x7}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000100)=""/4097, &(0x7f0000000040)=0x1001) socket$inet6(0xa, 0x1, 0x84) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4) (async) syz_open_dev$vcsn(&(0x7f0000001140), 0x7, 0x10001) (async) socket(0x10, 0x3, 0x0) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001600000", 0x24) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) (async) syz_open_procfs(0x0, &(0x7f00000011c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x58021, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0xbffc, 0x27b6a97, @local, 0x9}, 0x1c) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x22, 0x0, 0x6}, {0x6, 0x0, 0x7}]}, 0x10) (async) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) (async) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000100)=""/4097, &(0x7f0000000040)=0x1001) (async) 1.349515942s ago: executing program 3 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x80000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x841) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r5, 0x420, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x3f}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xb1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x27}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff79}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="141ec6c73fda97a6f48e812e269f4ce084a4fc", @ANYRES16=r3, @ANYBLOB="110725bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 1.339225543s ago: executing program 4 (id=576): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) recvmsg(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) sendmsg$unix(r9, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f0", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x400000000, 0x7, 0x0, 0x4, 0x3, 0x0, 0x0, 0x6}, {0x0, 0x2, 0x200000000004}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x2, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r11, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}}}}}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r14, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r15, @ANYBLOB="00002abd7000fcdbdf250a0000002c00028008000200c7870000140003800800020004000000080001002d8400000800010000000000040003804400058007000100696200001400028008000300090000000800010002000000070001006962000007000100696200000c00028008000200010000000800010065746800"], 0x84}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000004) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0x398, r15, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e72ac0ec1e17ece347f95092f6808687ebd96e21e243"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "86e84e43cda82659766bff1939adcdcf6a3c9d0f538eaeb0ad37ba746728"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "7cb7be278eebbb2a24db616ed3eb9bc4c6faea5f39be9b69ad078e39fdd0ffaf7c75"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x86a}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x307}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd217}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x98e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x90, 0x3, "c6ed25dac98e9cfcd63f86e383f3b85a570ed08a18d009efc374df61a42514abf2ab9f9027acca8725da97dfabf335a947b64adf72695f32207a4d69fffd06f0afef8bed71dcaa7d52b2784e01e29f835b5d5a8e0ba8d146283ad5cceff3d443965c32ab3e0bfb8a29359ff415e504e2aa6ff0391833073b1e94c223b41e9b001249709140c375cfcbc5aef5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x67}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}]}, 0x48}}, 0x20008044) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000ecffffff00b703000000000000850000000c000000b7000000000000009500000001000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.276222716s ago: executing program 0 (id=578): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c460007ff84ff7f0000000000000300060003000000a400000038000000aa00000007000000a70b2000010026840400000000000000030000000700020000000000ff070000c300"], 0x58) close(r0) r1 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.222494089s ago: executing program 3 (id=579): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x5, 0xeb0, 0x9, 0x5, 0x2, 0x424}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) timer_create(0x6, &(0x7f0000000100)={0x0, 0x26, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000200)={{r3, r4+60000000}, {r5, r6+10000000}}, 0x0) r7 = openat$cgroup(r0, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f00000002c0)="7908d535885bf9f634c4dbb19a095dfd4a6b32b898866dd85b81bab50a6cdc12d840ac5665559046", 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f0000000300)={0x5, 0x1, 'client1\x00', 0x0, "2c0225deb0db6e8a", "3eb4b4a4ae05834818bc40211fa3214492fdd365d6c0261c8ba87027dc36f6bc", 0x800, 0x9}) r9 = getpid() timer_create(0x7, &(0x7f00000003c0)={0x0, 0x36, 0x0, @tid=r9}, &(0x7f0000000400)=0x0) fcntl$lock(r1, 0x25, &(0x7f0000000440)={0x1, 0x0, 0x8, 0x100, r9}) timer_delete(r10) r11 = fcntl$getown(r1, 0x9) ptrace$peeksig(0x4209, r11, &(0x7f0000000480)={0x0, 0x1, 0x3}, &(0x7f00000004c0)=[{}, {}, {}]) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) futex(&(0x7f0000000640)=0x1, 0x100, 0x2, &(0x7f00000006c0)={r12, r13+60000000}, &(0x7f0000000700), 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000740)={r7, 0x8, 0x0, 0x5}) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f0000000840)={&(0x7f0000000780)=""/179, 0x1000000, 0x0, 0x8, 0x1}, 0x20) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000880)={'\x00', 0x6, 0xcc, 0x7, 0x9, 0x9, r11}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x54f98000) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000900)={0x0, 0x1, 0x12}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000940)='%\x00', 0x800, 0x40, &(0x7f0000000980)={0x6, 0x6, 0x2, 0x200}) epoll_pwait2(r8, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000a40)={0x0, 0x989680}, &(0x7f0000000a80)={[0x100000000]}, 0x8) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000ac0)=0x0) timer_create(0x5, &(0x7f0000000b00)={0x0, 0x3a, 0x1, @tid=r15}, &(0x7f0000000b40)) futex(&(0x7f0000000b80), 0x1, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00), 0x1) 1.134574884s ago: executing program 3 (id=581): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x80000001, 0x4) 1.116181405s ago: executing program 0 (id=582): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd4d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.086359647s ago: executing program 3 (id=583): r0 = syz_clone(0x22820000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a00ffff0900010073797a3100000000300004802c000180090001007866726d000000001c00128008000240000000040800b9d0115c16a1023b3e01400000000e05000300020000000900020073797a32000000001400000011000100000000"], 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2) readv(r5, &(0x7f0000000180)=[{&(0x7f0000001480)=""/4082, 0xff2}, {0x0}], 0x2) io_uring_enter(r5, 0x4938, 0x7660, 0x0, &(0x7f0000000000), 0x8) 866.36882ms ago: executing program 0 (id=584): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r1) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x241}]}, 0x80}, 0x1, 0x7}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000280)={{r3, &(0x7f0000000080)='+)\x04(\x00', 0x709582, &(0x7f00000000c0)={@align=0x9f0d, {0x2, 0x7, 0x800, 0x6}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x1}, {[0x1ff, 0x4, 0x2, 0x8]}, 0xfffffff5, 0x65, &(0x7f0000000180)=""/101}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x100) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) (async) close(r1) (async) openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x241}]}, 0x80}, 0x1, 0x7}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000280)={{r3, &(0x7f0000000080)='+)\x04(\x00', 0x709582, &(0x7f00000000c0)={@align=0x9f0d, {0x2, 0x7, 0x800, 0x6}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x1}, {[0x1ff, 0x4, 0x2, 0x8]}, 0xfffffff5, 0x65, &(0x7f0000000180)=""/101}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x100) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) 865.20597ms ago: executing program 3 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x850714, &(0x7f0000000500), 0xf7, 0x496, &(0x7f0000000680)="$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") r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x3d, &(0x7f0000000280)=[{&(0x7f0000000100)='\b\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x40000) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r3, &(0x7f0000001180)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@private0, 0x0}, &(0x7f0000001100)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001140)={r4, r9, 0x25, 0x4, @val=@iter={&(0x7f0000001200)=@task={0x0, 0x0, r3}, 0x10}}, 0x20) close(r8) r10 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) execveat$binfmt(r10, r7, 0x0, 0x0, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x1018, &(0x7f0000004b00)=""/4120, 0x41100, 0x3}, 0x94) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001600000", 0x24) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061115d0000000000850000008a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32300653600648d270005000000000000005ade4a460c89b6ec0cff3959547f739058ba86c9023cd6693a000000004a32000400160004000a0000000000e000ddf66ed538f25232", 0x78, 0x4000, 0x0, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715}, [@IFLA_MASTER={0x8, 0xa, r15}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 862.32284ms ago: executing program 4 (id=586): r0 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xb}, 0x4, 0x0, 0xbed, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0x5, 0xffffffffffffffff, 0x1) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) tgkill(r0, r0, 0x21) 770.270936ms ago: executing program 1 (id=587): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0xfe, 0x283, &(0x7f0000000400)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 706.966529ms ago: executing program 0 (id=588): r0 = socket(0x10, 0x80003, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x48) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c3000040000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000080)=""/210}, 0x54) fcntl$notify(r1, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1c0) fcntl$notify(r3, 0x402, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 570.288197ms ago: executing program 3 (id=589): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000080)=""/16, &(0x7f00000000c0)=0x10) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r3 = open_tree(r2, &(0x7f0000000300)='./cgroup\x00', 0x89801) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r3, 0x0, r4, 0x0, 0x46) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891d, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\x00\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn[\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\'\x9f\xd0\xcb\xe1mN\x1cA\xe54\xfa4\x84l\xb3\xc8\xc3\xd19\xc6_n\xf3:\x01\xc2\xec\xf0j\xb0nY\xea\x94VXo~\nC\x89\'\n=JBy\xc0\xe5\xe8\xc1.\x1bd\x9d\xe3\xee\xc55)`\xda\xf7\xb1\xc9\x04\xcfc\xd8\xb3F\xd3\xaa*\xc0\xcf\xd8]1\xcd\f\x9b\xb4\x12\x9d\xf37a\x98\x01\\\xb9\xa9\xbd\xf5\\\xd8\x96o\xff\xa5a\x8bkj~7\xd8\xe7F+l]\x18`\x9d\x94\xc6c\x81\xe4n\xa1\x1a{\xf8\xb2\xf0C\x7f\x8d+\xc3z!\xac\xc6\xd4\x1f=\xa2\xc7Y\xfc\xcb\xf6~Kx\x9e\x1d\xd5T\rC\x95\x94\xa7\x85\xb1Ff<2w\xd0s\xac36\xb8\x96U\x9e(Za\xf2\x9bk\xcfK\xd3\xa1\xd6\'\xdb\x8b\x06U\xf4a\xee\xac\xaa\x8b\xe3\x053Q7\xe3\xcc\xa5\xb1\x8a7w\x9b\xaa\xb4W[\xbas_\x95.\xd3\x89\xa7\x01R\xe9\xa3\f\xb8\x15e\x04l\xb1\x03\x82\xfc\x18\xcd6-\xd1\xbe\xc9w\x8a\xbd\x98\xe8\x04\xf0`\xe0O\b;\x9a\xf5\xb8\xcdv)\xaf\x83\x94\x00\xb4\xf9\xb3:Dc\x96K?dK.\x1e\x84r\xae\xc0\xe7\xf0+\xce\x0e\xealJ\xdb\x9b2\x92.\xb4\xbdG\xf7I\xc9\x84\xe0@\x89\xb516\xd0o\x83dr%0%-\xd2\xa2\xcb\xa3\x87f\xack\xfd?\x16u~\xb8\r$&\xb4,e\xc4\xea3\xbf\xab\xfc') 545.826678ms ago: executing program 1 (id=590): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x151, 0x151, 0xb, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @datasec={0xc, 0x6, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x8}, {0x2, 0x7fff, 0x9}, {0x5, 0x7, 0xffffff0a}, {0x2, 0x6, 0x7}, {0x1, 0x2, 0x4}, {0x5}], "11"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x8}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x9, 0x800}, {0xb, 0xfffff554}, {0xa}, {0xf, 0x9}, {0x1, 0x4}, {0x9, 0x5}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @const={0x6, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2d, 0x4}, @struct={0xb, 0x7, 0x0, 0x4, 0x1, 0x1f, [{0x7, 0x0, 0xffff0cb9}, {0x0, 0x2, 0x5}, {0x8, 0x0, 0x1d53}, {0x3, 0x4}, {0x7, 0x1, 0x8}, {0x7, 0x5, 0xf87}, {0x9, 0x5, 0x9}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x9}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x0, 0x0, 0x5f, 0x61, 0x30, 0x61, 0x1e, 0x0]}}, &(0x7f0000000140)=""/92, 0x177, 0x5c, 0x0, 0x9, 0x10000}, 0x28) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000540)={0x18, 0xffffffffffffffff, 'id1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0x6, 0x5, 0x8208, r0, 0xff, '\x00', 0x0, r1, 0x3, 0x4, 0x3, 0x3, @value=r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 454.762694ms ago: executing program 1 (id=591): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000000)='team0\x00', 0x80000, &(0x7f00000000c0)={@_ha_fsid={[0x8, 0xfffffffa]}, {0x6, 0x7, 0x8, 0x5}}, 0x6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x3}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r5, 0x1a, &(0x7f00000002c0)={0x4}, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 454.203544ms ago: executing program 1 (id=592): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 367.772019ms ago: executing program 1 (id=593): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x80000001, 0x4) 343.045891ms ago: executing program 1 (id=594): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x28) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7fffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122800000000009500000000818d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, 0x8e, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830}, 0x4048000) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) syz_io_uring_setup(0x5932, &(0x7f00000004c0)={0x0, 0xf0d1, 0x800, 0x3, 0x1d6}, 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x1de9, &(0x7f0000000540)={0x0, 0x62dc, 0x2, 0x3, 0x4f}, &(0x7f0000000680), &(0x7f0000000700)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000001000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000e40)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x2, 0x9, &(0x7f0000000d80)=[{&(0x7f0000000740)="91a82c2606409a276a7cbd1b13aefe2a2d9fd0d8f7839cfdac1f4797cd0f2e48e70907261dd31bd627e8df4a5a31037fdde1b7b0557cf3cb3cee20082ea1c6c934e287e34cce55092382e3163ba5d90a73520b6fe03173a966e2a329b627ebeac957e0db", 0x64}, {&(0x7f00000007c0)="c430f675ca473f1f95bc257ad1a0d66bac7bb4e36a531266a3c8feac1640cc96a3253d9c985617ba5750b2c960b3260f894baa3dc220416ad427dac93d02a39845811975cf78f87e37aa7de0cdc980a3db86e6f0b4d8a838d9c88f85da617850ea16053ef3f5307aba7d7a1d7da6bd9184f0b18a2b5b336c11ab6a1b72f6732e20c5f66263be763150cb38ef494d9b78f4bb1d358902adad05c76193e51ea56490cacbf8c740b68720323e72404a8a60eab42379e73982f506ff02b1ffdefaca5b269e8e64b2b50d93de45bdbbfa4a68216b9abac9d2f0b896ec6c10f2046b0d22488a5445e8f85672c07609", 0xec}, {&(0x7f00000008c0)="5fc4ced48a04df537dc2c07809d9a1bb388922bee86ada2bb7f414afdd9a3215abb357e94165bd0879a3487289f8d5c2095f4be08932c98b8e8131d72cf77094721be909d57077e274dd32282367090d54d6d80581bb5988162f4119bc8b3a053e3b4bd153f52f6fe2fecfc38399bbfce464a511a262a22ab1283370ae2c02d83ebb0c597679049adb11f69f8c604f19ef8878347300c0f0e4c9c5aa524e06a7ffc722d0f64b0eb925bfb9f1245ce607", 0xb0}, {0x0}, {&(0x7f0000000b80)}, {&(0x7f0000000c40)="bdab9935877c301f5568b474a8f51cd68c3f81f20940b7a14ecd7a074e363c427090d22901dfd12d3d9dec", 0x2b}, {&(0x7f0000000cc0)="aae411330f7bcbcc4b324c3e86a4874de65d210ce916affe312d9cc3990053c4b87126339853ec4d647063c063e2f4d23d9cfd9741b10c121c01d67dcb3d02efccf85ac684dde33d763db23a747879b6af43cf576211d73838a465602975a44877588c0fbd1b2b05764d338bb73274c0d46028598fd6d6c7edb90bcc9dbd210053318dde2fbb9beecc63ecebc0870495edf86dec53968f39e22719", 0x9b}], 0x7, 0x13, 0x1, {0x1}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r8 = syz_io_uring_setup(0x81f, &(0x7f0000000580)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x21, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47bc, 0xe0, 0x21, 0x0, 0x0) r11 = dup(r5) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x18, 0x4008, 0x0, 0x3, 0x0}) 188.568199ms ago: executing program 4 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100396cd8ec00", "3499a517a1df1c71496cffeebaabfe5eb548502ce0f59ce4a4af09f0438ece31", "4277dea9", "0cf02f56bec1eb9e"}, 0x38) sendto$inet6(r2, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x7ff, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc72}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc4}, @in6={0xa, 0x4e21, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000300)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="200000003000e700f4940000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000500140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xc000882) syz_emit_ethernet(0xd6, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xa0, 0x2b, 0x0, @loopback, @local, {[@hopopts={0x3c}, @dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x4}]}], {{0x800, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "0249c9e007342b0148b2f57a13834b13"}, @eol, @sack={0x5, 0x12, [0x4, 0x10, 0xe0000000, 0xffffffa3]}, @md5sig={0x13, 0x12, "bfb66967f7907b3cf24edefecbe7fcc0"}, @md5sig={0x13, 0x12, "62b756bd8aa5e356e388d1484e69f8d6"}]}}, {"7ea514d69903a7e8f2588ad5a44bf912ada0a5f87fb0662b002a742ed0d763a221a5d329"}}}}}}}, 0x0) 179.84727ms ago: executing program 6 (id=596): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$kcm(0xa, 0x3, 0x3a) (async) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="623938f9e5786addc838182333f3ab", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x24000060) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000844}, 0x4054) 177.08394ms ago: executing program 4 (id=597): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000280)={[{@errors_continue}, {@init_itable_val}, {@minixdf}, {@abort}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@nodioread_nolock}, {}, {@noblock_validity}, {@nodiscard}]}, 0x1, 0x475, &(0x7f0000000780)="$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") set_mempolicy(0x1, 0x0, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) 0s ago: executing program 4 (id=598): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x1c8) fcntl$setlease(r0, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e1e}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300af51823c3567", @ANYRES32=0x0], 0x3c}}, 0x4000054) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r7 = syz_io_uring_setup(0xcd2, &(0x7f0000000400)={0x0, 0x54a5, 0x400, 0x1, 0x2ea}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x1f8, 0xe8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@multicast2, @remote, 0xffffff00, 0xffffff00, 0x4, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x80, 0x81, 0x0, 0xbd, 0x5, 'veth0_vlan\x00', 'caif0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x401}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8cc489da1088", @empty, @broadcast, @remote, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x108, &(0x7f0000000180)=0x3, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) io_uring_enter(r7, 0x5c0e, 0x3ce2, 0x20, &(0x7f0000000080)={[0x5]}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) getpid() kernel console output (not intermixed with test programs): t for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 34.854367][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7034: comm kworker/u8:1: Failed to release dquot type 0 [ 34.863259][ T3505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.890431][ T30] loop2: lost filesystem error report for type 5 error -117 [ 34.907987][ T3513] vhci_hcd vhci_hcd.4: invalid port number 22 [ 34.972597][ T3513] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 34.974024][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.992977][ T30] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.028527][ T30] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 35.028697][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7034: comm kworker/u8:1: Failed to release dquot type 0 [ 35.054118][ T3517] loop4: detected capacity change from 0 to 128 [ 35.110538][ T30] loop2: lost filesystem error report for type 5 error -117 [ 35.172455][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 35.272602][ T3521] GUP no longer grows the stack in syz.2.12 (3521): 200000006000-200000008000 (200000004000) [ 35.330910][ T3521] CPU: 1 UID: 0 PID: 3521 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT(full) [ 35.330959][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 35.330978][ T3521] Call Trace: [ 35.331016][ T3521] [ 35.331023][ T3521] __dump_stack+0x1d/0x30 [ 35.331125][ T3521] dump_stack_lvl+0x95/0xd0 [ 35.331152][ T3521] dump_stack+0x15/0x1b [ 35.331176][ T3521] fixup_user_fault+0x4fb/0x550 [ 35.331205][ T3521] fault_in_user_writeable+0x5c/0xc0 [ 35.331257][ T3521] futex_lock_pi+0x60b/0x7e0 [ 35.331294][ T3521] ? __pfx_futex_wake_mark+0x10/0x10 [ 35.331378][ T3521] do_futex+0x21f/0x380 [ 35.331427][ T3521] __se_sys_futex+0x2f6/0x370 [ 35.331461][ T3521] ? xfd_validate_state+0x45/0xf0 [ 35.331550][ T3521] __x64_sys_futex+0x78/0x90 [ 35.331583][ T3521] x64_sys_call+0x24ab/0x3020 [ 35.331617][ T3521] do_syscall_64+0x12c/0x370 [ 35.331729][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.331757][ T3521] RIP: 0033:0x7f12e320bf79 [ 35.331839][ T3521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.331857][ T3521] RSP: 002b:00007f12e1c5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 35.331885][ T3521] RAX: ffffffffffffffda RBX: 00007f12e3485fa0 RCX: 00007f12e320bf79 [ 35.331902][ T3521] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 35.331914][ T3521] RBP: 00007f12e32a27e0 R08: 0000000000000000 R09: 0000000000000000 [ 35.332008][ T3521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.332024][ T3521] R13: 00007f12e3486038 R14: 00007f12e3485fa0 R15: 00007fff0c61ead8 [ 35.332046][ T3521] [ 35.621160][ T3500] syz.0.7 (3500) used greatest stack depth: 10120 bytes left [ 35.629170][ T3528] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.14'. [ 35.768914][ T3528] vhci_hcd vhci_hcd.4: invalid port number 22 [ 35.785287][ T3528] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 35.794019][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 35.839642][ T3535] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 35.863583][ T3535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.18'. [ 35.873715][ T3537] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.17'. [ 35.889858][ T3535] bond0: entered promiscuous mode [ 35.898417][ T3535] bond_slave_0: entered promiscuous mode [ 35.931589][ T3535] bond_slave_1: entered promiscuous mode [ 35.937573][ T3535] bridge0: port 3(bond0) entered blocking state [ 35.944114][ T3535] bridge0: port 3(bond0) entered disabled state [ 35.950492][ T3535] bond0: entered allmulticast mode [ 35.972513][ T3535] bond_slave_0: entered allmulticast mode [ 35.978382][ T3535] bond_slave_1: entered allmulticast mode [ 36.000102][ T3535] bridge0: port 3(bond0) entered blocking state [ 36.006519][ T3535] bridge0: port 3(bond0) entered forwarding state [ 36.014471][ T3537] vhci_hcd vhci_hcd.4: invalid port number 22 [ 36.020593][ T3537] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 36.043848][ T3540] netlink: 'syz.4.19': attribute type 64 has an invalid length. [ 36.067581][ T3540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19'. [ 36.446821][ T3540] netlink: 'syz.4.19': attribute type 64 has an invalid length. [ 36.465441][ T3540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19'. [ 36.516513][ T3548] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 36.526002][ T3548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22'. [ 36.534909][ T3548] dummy0: entered promiscuous mode [ 36.540044][ T3548] dummy0: entered allmulticast mode [ 36.582810][ T3548] bridge0: port 4(dummy0) entered blocking state [ 36.609561][ T3548] bridge0: port 4(dummy0) entered disabled state [ 36.659693][ T3548] bridge0: port 4(dummy0) entered blocking state [ 36.666219][ T3548] bridge0: port 4(dummy0) entered forwarding state [ 36.673019][ T3551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 36.759111][ T3552] vhci_hcd vhci_hcd.4: invalid port number 22 [ 36.767394][ T3552] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 37.038564][ T3573] syz_tun: entered promiscuous mode [ 37.062226][ T3573] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.076700][ T3550] loop4: detected capacity change from 0 to 512 [ 37.092382][ T3550] ext4: Unknown parameter 'smackfshat' [ 37.140743][ T3550] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 37.155210][ T3548] loop3: detected capacity change from 0 to 1024 [ 37.213065][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.352594][ T3586] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET) [ 37.446621][ T3590] loop4: detected capacity change from 0 to 128 [ 37.485413][ T3590] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.145552][ T3568] loop2: detected capacity change from 0 to 1024 [ 38.189979][ T3568] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 38.200015][ T3568] System zones: 0-1, 3-36 [ 38.227146][ T3568] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.27: bad orphan inode 134217728 [ 38.254250][ T28] kauditd_printk_skb: 214 callbacks suppressed [ 38.254336][ T28] audit: type=1400 audit(1770990669.896:318): avc: denied { map } for pid=3602 comm="syz.0.36" path="socket:[5469]" dev="sockfs" ino=5469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.255813][ T3568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.260544][ T28] audit: type=1400 audit(1770990669.896:319): avc: denied { create } for pid=3602 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.263315][ T28] audit: type=1400 audit(1770990669.896:320): avc: denied { setopt } for pid=3602 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.342494][ T28] audit: type=1400 audit(1770990669.986:321): avc: denied { write } for pid=3602 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.363709][ T3603] syz.0.36 (3603) used greatest stack depth: 9288 bytes left [ 38.420783][ T28] audit: type=1400 audit(1770990670.046:322): avc: denied { read open } for pid=3567 comm="syz.2.27" path="/6/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.455531][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.465633][ T28] audit: type=1400 audit(1770990670.046:323): avc: denied { write } for pid=3567 comm="syz.2.27" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.574485][ T3613] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 38.601079][ T3613] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 38.676253][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.806376][ T3624] loop2: detected capacity change from 0 to 2048 [ 38.913937][ T3627] No such timeout policy "syz1" [ 38.943160][ T3292] GPT:first_usable_lbas don't match. [ 38.948727][ T3292] GPT:34 != 290 [ 38.952553][ T3292] GPT: Use GNU Parted to correct GPT errors. [ 38.959589][ T3292] loop2: p1 p2 p3 [ 38.980718][ T3624] GPT:first_usable_lbas don't match. [ 38.998041][ T3624] GPT:34 != 290 [ 39.002826][ T3624] GPT: Use GNU Parted to correct GPT errors. [ 39.006295][ T28] audit: type=1400 audit(1770990670.636:324): avc: denied { watch } for pid=3629 comm="syz.3.43" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.031709][ T3624] loop2: p1 p2 p3 [ 39.062878][ T28] audit: type=1400 audit(1770990670.706:325): avc: denied { read } for pid=3623 comm="syz.2.40" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.102005][ T28] audit: type=1400 audit(1770990670.706:326): avc: denied { open } for pid=3623 comm="syz.2.40" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.144514][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.174758][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 39.192196][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 39.279404][ T28] audit: type=1326 audit(1770990670.916:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.3.49" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43fab4bf79 code=0x0 [ 39.461889][ T3649] netlink: 'syz.0.51': attribute type 7 has an invalid length. [ 39.469555][ T3649] netlink: 'syz.0.51': attribute type 8 has an invalid length. [ 39.501377][ T3649] team0: entered promiscuous mode [ 39.506175][ T3650] loop3: detected capacity change from 0 to 512 [ 39.515964][ T3645] netlink: 'syz.2.48': attribute type 10 has an invalid length. [ 39.531263][ T3649] team_slave_0: entered promiscuous mode [ 39.534107][ T3650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.537476][ T3649] team_slave_1: entered promiscuous mode [ 39.579704][ T3650] EXT4-fs (loop3): 1 truncate cleaned up [ 39.591102][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.601007][ T3649] bond0: entered promiscuous mode [ 39.631632][ T3649] bond_slave_0: entered promiscuous mode [ 39.648278][ T3649] bond_slave_1: entered promiscuous mode [ 39.664532][ T3649] gretap0: entered promiscuous mode [ 39.671522][ T3649] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 39.680310][ T3645] dummy0: entered promiscuous mode [ 39.685724][ T3645] dummy0: entered allmulticast mode [ 39.691568][ T3645] bridge0: port 3(dummy0) entered blocking state [ 39.698020][ T3645] bridge0: port 3(dummy0) entered disabled state [ 39.705226][ T3645] bridge0: port 3(dummy0) entered blocking state [ 39.711607][ T3645] bridge0: port 3(dummy0) entered forwarding state [ 39.765358][ T3663] loop4: detected capacity change from 0 to 512 [ 39.815930][ T3660] loop2: detected capacity change from 0 to 1024 [ 39.865262][ T3660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.968172][ T3663] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.982223][ T3663] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 39.992736][ T3663] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.54: invalid block [ 40.020445][ T3663] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.034958][ T3645] __nla_validate_parse: 10 callbacks suppressed [ 40.034990][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 40.061603][ T3663] EXT4-fs (loop4): Remounting filesystem read-only [ 40.068533][ T3663] EXT4-fs (loop4): 1 truncate cleaned up [ 40.074737][ T3663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.201564][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.232573][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.343777][ T3678] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 40.355790][ T3678] bond0: (slave lo): Error: Device can not be enslaved while up [ 40.392851][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.420116][ T3686] Zero length message leads to an empty skb [ 40.574469][ T3693] netlink: 'syz.3.63': attribute type 9 has an invalid length. [ 40.794707][ T3702] netlink: 10 bytes leftover after parsing attributes in process `syz.1.65'. [ 40.833655][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 40.884447][ T3712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 40.915779][ T3702] team1: entered promiscuous mode [ 40.923469][ T3719] netlink: 'syz.4.71': attribute type 10 has an invalid length. [ 40.934582][ T3702] team1: entered allmulticast mode [ 40.945227][ T3702] 8021q: adding VLAN 0 to HW filter on device team1 [ 40.958746][ T3719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.71'. [ 40.972108][ T3710] netlink: 17 bytes leftover after parsing attributes in process `syz.0.69'. [ 40.981602][ T3712] bridge_slave_1: left allmulticast mode [ 40.992560][ T3712] bridge_slave_1: left promiscuous mode [ 41.032653][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.046625][ T3712] bridge_slave_0: left allmulticast mode [ 41.082324][ T3712] bridge_slave_0: left promiscuous mode [ 41.107956][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.190590][ T3719] dummy0: entered promiscuous mode [ 41.207627][ T3728] loop0: detected capacity change from 0 to 8192 [ 41.222156][ T3719] dummy0: entered allmulticast mode [ 41.239946][ T3719] bridge0: port 3(dummy0) entered blocking state [ 41.263938][ T3634] loop0: p2 p3 p4 [ 41.267835][ T3634] loop0: p2 size 8388608 extends beyond EOD, truncated [ 41.293745][ T3719] bridge0: port 3(dummy0) entered disabled state [ 41.314031][ T3634] loop0: p3 start 134217728 is beyond EOD, truncated [ 41.321616][ T3719] bridge0: port 3(dummy0) entered blocking state [ 41.328032][ T3719] bridge0: port 3(dummy0) entered forwarding state [ 41.335072][ T3634] loop0: p4 size 262144 extends beyond EOD, truncated [ 41.374744][ T3728] loop0: p2 p3 p4 [ 41.381518][ T3728] loop0: p2 size 8388608 extends beyond EOD, truncated [ 41.400128][ T3728] loop0: p3 start 134217728 is beyond EOD, truncated [ 41.422331][ T3728] loop0: p4 size 262144 extends beyond EOD, truncated [ 41.565914][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.590477][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.606259][ T3734] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 41.652666][ T3737] netlink: 324 bytes leftover after parsing attributes in process `syz.0.77'. [ 41.652784][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.673919][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.725593][ T3734] bond1 (unregistering): Released all slaves [ 41.837210][ T3745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 41.946587][ T3758] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 41.964855][ T3758] pim6reg0: linktype set to 780 [ 41.970926][ T3759] loop1: detected capacity change from 0 to 128 [ 41.979774][ T3758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'. [ 72.637559][ T3767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.88'. [ 72.647605][ T3767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.88'. [ 72.662558][ T3767] gretap0: entered promiscuous mode [ 72.672734][ T28] kauditd_printk_skb: 331 callbacks suppressed [ 72.672752][ T28] audit: type=1400 audit(1770990704.316:659): avc: denied { mount } for pid=3772 comm="syz.0.87" name="/" dev="autofs" ino=6244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.722103][ T3767] gretap0: left promiscuous mode [ 72.729605][ T28] audit: type=1400 audit(1770990704.346:660): avc: denied { remount } for pid=3772 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.734862][ T3779] loop4: detected capacity change from 0 to 512 [ 72.778801][ T3779] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.790461][ T3771] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.89'. [ 72.882515][ T3780] vhci_hcd vhci_hcd.4: invalid port number 22 [ 72.888655][ T3780] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 72.907629][ T28] audit: type=1400 audit(1770990704.546:661): avc: denied { setopt } for pid=3788 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.926897][ T28] audit: type=1400 audit(1770990704.566:662): avc: denied { connect } for pid=3788 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.946459][ T28] audit: type=1400 audit(1770990704.576:663): avc: denied { name_connect } for pid=3788 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 72.975791][ T28] audit: type=1400 audit(1770990704.606:664): avc: denied { write } for pid=3774 comm="syz.3.90" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.013242][ T28] audit: type=1400 audit(1770990704.606:665): avc: denied { open } for pid=3774 comm="syz.3.90" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.039563][ T3791] syzkaller1: entered promiscuous mode [ 73.045558][ T3791] syzkaller1: entered allmulticast mode [ 73.054554][ T28] audit: type=1400 audit(1770990704.676:666): avc: denied { getopt } for pid=3788 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.078011][ T3779] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.92: Directory hole found for htree leaf block 0 [ 73.161274][ T3793] netlink: 212 bytes leftover after parsing attributes in process `syz.3.94'. [ 73.210012][ T3796] loop3: detected capacity change from 0 to 512 [ 73.223733][ T3306] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 73.241797][ T3796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.254418][ T3796] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.301585][ T3800] loop4: detected capacity change from 0 to 512 [ 73.384652][ T3800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.400178][ T3800] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.520524][ T28] audit: type=1400 audit(1770990705.156:667): avc: denied { ioctl } for pid=3795 comm="syz.3.95" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.577725][ T3805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3805 comm=syz.0.97 [ 73.623423][ T3805] syzkaller0: entered promiscuous mode [ 73.630246][ T3805] syzkaller0: entered allmulticast mode [ 73.666179][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.745235][ T3811] loop3: detected capacity change from 0 to 1024 [ 73.752815][ T3807] netlink: 'syz.2.99': attribute type 21 has an invalid length. [ 73.762236][ T3807] netlink: 'syz.2.99': attribute type 4 has an invalid length. [ 73.770357][ T3811] EXT4-fs: Ignoring removed nobh option [ 73.780693][ T28] audit: type=1400 audit(1770990705.416:668): avc: denied { write } for pid=3799 comm="syz.4.96" name="ptype" dev="proc" ino=4026532518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.833974][ T3811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 73.842731][ T3811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.910275][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.994825][ T3827] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 74.031441][ T3827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 74.165060][ T3834] loop3: detected capacity change from 0 to 2048 [ 74.199475][ T3837] loop2: detected capacity change from 0 to 512 [ 74.230568][ T3837] EXT4-fs: Invalid want_extra_isize 8 [ 74.338620][ T3840] FAULT_INJECTION: forcing a failure. [ 74.338620][ T3840] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.415313][ T3840] CPU: 0 UID: 0 PID: 3840 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT(full) [ 74.415428][ T3840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 74.415446][ T3840] Call Trace: [ 74.415455][ T3840] [ 74.415463][ T3840] __dump_stack+0x1d/0x30 [ 74.415560][ T3840] dump_stack_lvl+0x95/0xd0 [ 74.415657][ T3840] dump_stack+0x15/0x1b [ 74.415687][ T3840] should_fail_ex+0x263/0x280 [ 74.415725][ T3840] should_fail+0xb/0x20 [ 74.415763][ T3840] should_fail_usercopy+0x1a/0x20 [ 74.415881][ T3840] _copy_from_user+0x1c/0xb0 [ 74.415926][ T3840] memdup_user+0x5e/0xd0 [ 74.415966][ T3840] sctp_getsockopt_connectx3+0x1b2/0x340 [ 74.416001][ T3840] sctp_getsockopt+0x910/0xaa0 [ 74.416037][ T3840] sock_common_getsockopt+0x60/0x70 [ 74.416077][ T3840] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 74.416177][ T3840] do_sock_getsockopt+0x1c4/0x210 [ 74.416212][ T3840] __x64_sys_getsockopt+0x11d/0x1a0 [ 74.416247][ T3840] x64_sys_call+0x2dcf/0x3020 [ 74.416282][ T3840] do_syscall_64+0x12c/0x370 [ 74.416333][ T3840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.416375][ T3840] RIP: 0033:0x7f43fab4bf79 [ 74.416396][ T3840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.416420][ T3840] RSP: 002b:00007f43f959f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 74.416484][ T3840] RAX: ffffffffffffffda RBX: 00007f43fadc5fa0 RCX: 00007f43fab4bf79 [ 74.416502][ T3840] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 74.416519][ T3840] RBP: 00007f43f959f090 R08: 0000200000000180 R09: 0000000000000000 [ 74.416547][ T3840] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 74.416575][ T3840] R13: 00007f43fadc6038 R14: 00007f43fadc5fa0 R15: 00007ffd4eab9498 [ 74.416602][ T3840] [ 74.726106][ T3849] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.110'. [ 74.756254][ T3851] netlink: 'syz.3.111': attribute type 21 has an invalid length. [ 74.764443][ T3851] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 74.817358][ T3853] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.844170][ T3854] vhci_hcd vhci_hcd.4: invalid port number 22 [ 74.850352][ T3854] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 74.911406][ T3856] bond1: entered promiscuous mode [ 74.942777][ T3856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.961673][ T3856] team0: Port device bond1 added [ 75.005380][ T3861] loop3: detected capacity change from 0 to 128 [ 75.042966][ T3861] vfat: Unknown parameter '0xffffffffffffffff' [ 75.118555][ T3861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.115'. [ 75.140598][ T3861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.115'. [ 75.329881][ T3874] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 75.389526][ T3874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 75.527464][ T3800] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.96: corrupted inode contents [ 75.541253][ T3800] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 75.541373][ T3800] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.96: mark_inode_dirty error [ 75.561870][ T3800] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 75.562520][ T3800] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.96: corrupted inode contents [ 75.590718][ T3881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.121'. [ 75.611987][ T3800] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 75.612247][ T3800] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.96: mark_inode_dirty error [ 75.739481][ T3800] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 75.746033][ T3800] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.96: mark inode dirty (error -117) [ 75.772017][ T3800] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 75.777112][ T3800] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 75.962737][ T1719] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.004986][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.018206][ T3398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.026304][ T1719] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.112255][ T3398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.363589][ T3899] loop4: detected capacity change from 0 to 512 [ 76.470464][ T3895] loop1: detected capacity change from 0 to 8192 [ 76.504875][ T3895] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.552492][ T1062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.557341][ T3895] 9p: Bad value for 'rfdno' [ 76.679757][ T3908] Cannot find del_set index 0 as target [ 76.705304][ T3912] loop3: detected capacity change from 0 to 1024 [ 76.760517][ T3912] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.801640][ T3912] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 76.825548][ T3912] EXT4-fs (loop3): invalid journal inode [ 76.831410][ T3912] EXT4-fs (loop3): can't get journal size [ 76.840175][ T3912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.978581][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.008521][ T3927] netlink: 'syz.0.134': attribute type 66 has an invalid length. [ 77.935660][ T3977] __nla_validate_parse: 2 callbacks suppressed [ 77.935738][ T3977] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.142'. [ 77.972576][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 77.972588][ T28] audit: type=1400 audit(1770990709.606:688): avc: denied { create } for pid=3989 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.024119][ T3988] set_capacity_and_notify: 1 callbacks suppressed [ 78.024138][ T3988] loop3: detected capacity change from 0 to 1024 [ 78.039360][ T3988] EXT4-fs: inline encryption not supported [ 78.049521][ T3991] loop2: detected capacity change from 0 to 512 [ 78.109381][ T3995] loop0: detected capacity change from 0 to 1024 [ 78.117218][ T3988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.117664][ T3977] vhci_hcd vhci_hcd.4: invalid port number 22 [ 78.138897][ T3995] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.151081][ T3977] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 78.169111][ T3991] EXT4-fs (loop2): too many log groups per flexible block group [ 78.181587][ T3988] tipc: Failed to remove unknown binding: 66,0,0/0:4063527994/4063527995 [ 78.191526][ T28] audit: type=1400 audit(1770990709.806:689): avc: denied { bind } for pid=3987 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.216860][ T3991] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 78.227426][ T3988] tipc: Failed to remove unknown binding: 66,0,0/0:4063527994/4063527995 [ 78.232185][ T3995] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 78.246202][ T3991] EXT4-fs (loop2): mount failed [ 78.247676][ T28] audit: type=1400 audit(1770990709.886:690): avc: denied { append } for pid=3987 comm="syz.3.144" path="/33/file1/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.282846][ T3995] EXT4-fs (loop0): invalid journal inode [ 78.288546][ T3995] EXT4-fs (loop0): can't get journal size [ 78.310660][ T3988] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.144: Allocating blocks 497-513 which overlap fs metadata [ 78.338770][ T4002] loop4: detected capacity change from 0 to 512 [ 78.339777][ T3995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.370310][ T3988] EXT4-fs (loop3): Remounting filesystem read-only [ 78.384617][ T3995] netlink: 56 bytes leftover after parsing attributes in process `syz.0.145'. [ 78.403422][ T4002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.460094][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.487911][ T4002] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.146: invalid indirect mapped block 83886080 (level 1) [ 78.517349][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.526855][ T28] audit: type=1400 audit(1770990710.166:691): avc: denied { name_bind } for pid=4015 comm="syz.0.149" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 78.532380][ T4002] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.549177][ T4002] EXT4-fs (loop4): Remounting filesystem read-only [ 78.566597][ T4002] EXT4-fs (loop4): 1 orphan inode deleted [ 78.572811][ T4002] EXT4-fs (loop4): 1 truncate cleaned up [ 78.578835][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.597086][ T28] audit: type=1400 audit(1770990710.206:692): avc: denied { read write } for pid=4015 comm="syz.0.149" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.621388][ T28] audit: type=1400 audit(1770990710.206:693): avc: denied { open } for pid=4015 comm="syz.0.149" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.670046][ T4021] loop3: detected capacity change from 0 to 128 [ 78.700906][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.733438][ T4021] program syz.3.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.736880][ T28] audit: type=1400 audit(1770990710.376:694): avc: denied { map } for pid=4020 comm="syz.3.151" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 79.048034][ T28] audit: type=1400 audit(1770990710.376:695): avc: denied { read } for pid=4020 comm="syz.3.151" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.071533][ T28] audit: type=1400 audit(1770990710.376:696): avc: denied { open } for pid=4020 comm="syz.3.151" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.882055][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.076763][ T4091] loop0: detected capacity change from 0 to 1024 [ 80.474188][ T4096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.482736][ T4096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.729657][ T4091] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.787024][ T4091] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 80.869040][ T4091] EXT4-fs (loop0): invalid journal inode [ 80.889368][ T28] audit: type=1400 audit(1770990712.516:697): avc: denied { create } for pid=4101 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.922064][ T4091] EXT4-fs (loop0): can't get journal size [ 80.959416][ T4091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.025306][ T4091] netlink: 56 bytes leftover after parsing attributes in process `syz.0.159'. [ 81.113561][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.382962][ T4115] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.167'. [ 81.478038][ T4127] vhci_hcd vhci_hcd.4: invalid port number 22 [ 81.524545][ T4127] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 81.649124][ T4136] loop0: detected capacity change from 0 to 1024 [ 81.673991][ T4136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.144872][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.266542][ T4145] loop3: detected capacity change from 0 to 2048 [ 82.273774][ T4145] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.297549][ T4145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.312871][ T4145] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.172: bg 0: block 234: padding at end of block bitmap is not set [ 82.329453][ T4150] loop0: detected capacity change from 0 to 512 [ 82.343108][ T4145] EXT4-fs (loop3): Remounting filesystem read-only [ 82.352201][ T4150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.359787][ T4145] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 82.364984][ T4150] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.414135][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.497116][ T4156] loop0: detected capacity change from 0 to 1024 [ 82.532026][ T4156] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 82.559014][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.562802][ T4156] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 82.600317][ T4156] EXT4-fs (loop0): invalid journal inode [ 82.635974][ T4156] EXT4-fs (loop0): can't get journal size [ 82.655897][ T4156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.684155][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 82.693281][ T4168] netlink: 'syz.3.181': attribute type 7 has an invalid length. [ 82.700959][ T4168] netlink: 'syz.3.181': attribute type 8 has an invalid length. [ 82.709042][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 82.720698][ T4168] team0: entered promiscuous mode [ 82.725852][ T4168] team_slave_0: entered promiscuous mode [ 82.731724][ T4168] team_slave_1: entered promiscuous mode [ 82.737550][ T4156] netlink: 56 bytes leftover after parsing attributes in process `syz.0.176'. [ 82.748187][ T4168] team0: left promiscuous mode [ 82.753368][ T4168] team_slave_0: left promiscuous mode [ 82.759237][ T4168] team_slave_1: left promiscuous mode [ 82.783740][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.009573][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 83.009589][ T28] audit: type=1400 audit(1770990714.646:719): avc: denied { write } for pid=4181 comm="syz.4.188" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.039985][ T4178] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.186'. [ 83.070204][ T4180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.187'. [ 83.092001][ T28] audit: type=1400 audit(1770990714.676:720): avc: denied { ioctl } for pid=4181 comm="syz.4.188" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.172208][ T4183] vhci_hcd vhci_hcd.4: invalid port number 22 [ 83.206404][ T4183] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 83.283091][ T28] audit: type=1400 audit(1770990714.926:721): avc: denied { read } for pid=4190 comm="syz.4.192" path="socket:[7341]" dev="sockfs" ino=7341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.320745][ T4180] set_capacity_and_notify: 1 callbacks suppressed [ 83.320766][ T4180] loop3: detected capacity change from 0 to 512 [ 83.425766][ T4180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.467860][ T4180] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.717669][ T28] audit: type=1400 audit(1770990715.356:722): avc: denied { create } for pid=4179 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.774180][ T28] audit: type=1400 audit(1770990715.416:723): avc: denied { wake_alarm } for pid=4202 comm="syz.2.193" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.822050][ T28] audit: type=1326 audit(1770990715.416:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 83.826323][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 83.865494][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 83.872896][ T28] audit: type=1326 audit(1770990715.416:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 83.904100][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.914935][ T28] audit: type=1326 audit(1770990715.436:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 83.940888][ T28] audit: type=1326 audit(1770990715.436:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 83.979892][ T4210] netlink: 256 bytes leftover after parsing attributes in process `syz.3.195'. [ 83.990735][ T4210] netlink: 72 bytes leftover after parsing attributes in process `syz.3.195'. [ 84.038727][ T28] audit: type=1326 audit(1770990715.436:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 84.119684][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 84.235059][ T4233] loop3: detected capacity change from 0 to 2048 [ 84.257021][ T4233] EXT4-fs: Ignoring removed i_version option [ 84.280362][ T4233] EXT4-fs: Ignoring removed orlov option [ 84.289318][ T4230] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.205'. [ 84.292407][ T4233] EXT4-fs: Ignoring removed oldalloc option [ 84.309740][ T4244] loop1: detected capacity change from 0 to 128 [ 84.320884][ T4233] EXT4-fs: quotafile must be on filesystem root [ 84.379130][ T4233] 9p: Bad value for 'rfdno' [ 84.392149][ T4241] vhci_hcd vhci_hcd.4: invalid port number 22 [ 84.398286][ T4241] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 84.584707][ T4262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=4262 comm=syz.3.215 [ 84.689987][ T4267] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.267094][ T4280] loop4: detected capacity change from 0 to 1024 [ 85.275230][ T4280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.291966][ T4280] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.305595][ T4280] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 85.314513][ T4280] System zones: 0-1, 3-36 [ 85.353442][ T4280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.379176][ T4283] loop0: detected capacity change from 0 to 2048 [ 85.416857][ T4285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 85.542788][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.554679][ T4287] loop2: detected capacity change from 0 to 512 [ 85.602997][ T4287] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 85.612488][ T4291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4291 comm=syz.0.226 [ 85.670344][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.224: iget: bad extended attribute block 851968 [ 85.684197][ T4287] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.685910][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.224: couldn't read orphan inode 15 (err -117) [ 85.702637][ T4297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4297 comm=syz.0.226 [ 85.709145][ T4287] fserror_report: 1 callbacks suppressed [ 85.709379][ T4287] loop2: lost filesystem error report for type 5 error -117 [ 85.742164][ T4287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.300449][ T4287] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.224: iget: bad extended attribute block 851968 [ 86.485925][ T3305] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 86.523342][ T3305] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 86.542212][ T4327] netlink: 164 bytes leftover after parsing attributes in process `syz.3.235'. [ 86.774525][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.871432][ T4041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.903280][ T4338] netlink: 'syz.3.240': attribute type 21 has an invalid length. [ 86.983313][ T4041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.030643][ T4347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53447 sclass=netlink_route_socket pid=4347 comm=syz.3.242 [ 87.075192][ T4041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.157414][ T4041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.320062][ T4041] bridge0: port 3(dummy0) entered disabled state [ 87.346868][ T4041] bridge_slave_1: left allmulticast mode [ 87.373148][ T4041] bridge_slave_1: left promiscuous mode [ 87.379120][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.415067][ T4041] bridge_slave_0: left allmulticast mode [ 87.420821][ T4041] bridge_slave_0: left promiscuous mode [ 87.433856][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.465875][ T4372] loop4: detected capacity change from 0 to 512 [ 87.493393][ T4372] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.527753][ T4372] EXT4-fs (loop4): 1 truncate cleaned up [ 87.544813][ T4372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.745906][ T4382] SELinux: Context : is not valid (left unmapped). [ 87.763664][ T4041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.781353][ T4041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.799135][ T4041] bond0 (unregistering): Released all slaves [ 87.809729][ T4387] loop1: detected capacity change from 0 to 512 [ 87.852973][ T4387] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.878742][ T4382] wireguard0: entered promiscuous mode [ 87.885212][ T4382] wireguard0: entered allmulticast mode [ 87.899949][ T4387] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 87.937572][ T4387] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.248: inode #15: comm syz.1.248: iget: illegal inode # [ 87.953146][ T4041] hsr_slave_0: left promiscuous mode [ 87.963366][ T4387] loop1: lost filesystem error report for type 5 error -117 [ 87.964342][ T4041] hsr_slave_1: left promiscuous mode [ 87.969131][ T4387] EXT4-fs (loop1): Remounting filesystem read-only [ 87.984402][ T4041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.993308][ T4387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.007992][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.018481][ T4041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.026392][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.042008][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.049953][ T4041] veth1_macvtap: left promiscuous mode [ 88.055435][ T4393] xt_hashlimit: size too large, truncated to 1048576 [ 88.062363][ T4041] veth0_macvtap: left promiscuous mode [ 88.067868][ T4041] veth1_vlan: left promiscuous mode [ 88.073803][ T4041] veth0_vlan: left promiscuous mode [ 88.089877][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.198284][ T4041] team0 (unregistering): Port device team_slave_1 removed [ 88.216532][ T4041] team0 (unregistering): Port device team_slave_0 removed [ 88.218687][ T4400] tmpfs: Unknown parameter 'obj_user' [ 88.223833][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 88.223848][ T28] audit: type=1400 audit(1770990719.856:788): avc: denied { mounton } for pid=4399 comm="syz.1.251" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 88.315138][ T4402] loop1: detected capacity change from 0 to 1024 [ 88.325304][ T4402] EXT4-fs: Ignoring removed nobh option [ 88.338206][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 88.348154][ T4402] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 88.392591][ T4402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.499928][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.508894][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.509418][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.516429][ T4340] bridge_slave_0: entered allmulticast mode [ 88.531466][ T4340] bridge_slave_0: entered promiscuous mode [ 88.538666][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.547907][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.555552][ T4340] bridge_slave_1: entered allmulticast mode [ 88.555578][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.563426][ T4340] bridge_slave_1: entered promiscuous mode [ 88.587470][ T4415] loop3: detected capacity change from 0 to 512 [ 88.617758][ T4415] EXT4-fs: Ignoring removed orlov option [ 88.636915][ T4415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.646519][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.678679][ T4415] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.692992][ T4415] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.254: bg 0: block 248: padding at end of block bitmap is not set [ 88.711244][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.729337][ T28] audit: type=1400 audit(1770990720.366:789): avc: denied { getopt } for pid=4418 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.777374][ T4415] loop3: lost filesystem error report for type 5 error -117 [ 88.777671][ T4415] Quota error (device loop3): write_blk: dquota write failed [ 88.813181][ T4340] team0: Port device team_slave_0 added [ 88.844169][ T4340] team0: Port device team_slave_1 added [ 88.877726][ T4415] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 88.909075][ T4415] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.254: Failed to acquire dquot type 1 [ 88.909783][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.928754][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.942991][ T4415] loop3: lost filesystem error report for type 5 error -117 [ 88.955620][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.982359][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.988155][ T4415] EXT4-fs (loop3): 1 truncate cleaned up [ 88.989782][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.031419][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.035690][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.081114][ T4439] loop4: detected capacity change from 0 to 512 [ 89.088366][ T4439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.099132][ T4415] syz.3.254 (4415) used greatest stack depth: 9248 bytes left [ 89.111578][ T28] audit: type=1400 audit(1770990720.736:790): avc: denied { mounton } for pid=4414 comm="syz.3.254" path="/57/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.137115][ T4439] EXT4-fs (loop4): 1 truncate cleaned up [ 89.140181][ T4340] hsr_slave_0: entered promiscuous mode [ 89.145548][ T4439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.159372][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.194689][ T4340] hsr_slave_1: entered promiscuous mode [ 89.200634][ T4340] debugfs: 'hsr0' already exists in 'hsr' [ 89.206624][ T4340] Cannot create hsr debugfs directory [ 89.320709][ T28] audit: type=1400 audit(1770990720.956:791): avc: denied { create } for pid=4451 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.370134][ T28] audit: type=1400 audit(1770990720.956:792): avc: denied { ioctl } for pid=4451 comm="syz.3.259" path="socket:[8618]" dev="sockfs" ino=8618 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.447100][ T28] audit: type=1400 audit(1770990720.966:793): avc: denied { getopt } for pid=4451 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.471919][ T4340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.486822][ T28] audit: type=1400 audit(1770990720.976:794): avc: denied { write } for pid=4451 comm="syz.3.259" path="socket:[8620]" dev="sockfs" ino=8620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.514834][ T4340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.528577][ T4340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.560994][ T4340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.563334][ T28] audit: type=1400 audit(1770990720.976:795): avc: denied { create } for pid=4451 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.663272][ T4474] SELinux: policydb version -458261505 does not match my version range 15-35 [ 89.683549][ T4474] SELinux: failed to load policy [ 89.756013][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.797178][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.825544][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.832670][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.863535][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.870665][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.995129][ T4499] __nla_validate_parse: 4 callbacks suppressed [ 89.995148][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 90.082453][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.099700][ T4477] loop1: detected capacity change from 0 to 2048 [ 90.159272][ T3398] Process accounting resumed [ 90.166305][ T3787] Alternate GPT is invalid, using primary GPT. [ 90.178671][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.192257][ T3787] loop1: p2 p3 p7 [ 90.215059][ T4513] loop3: detected capacity change from 0 to 2048 [ 90.250387][ T4477] Alternate GPT is invalid, using primary GPT. [ 90.257046][ T4477] loop1: p2 p3 p7 [ 90.294132][ T2992] Alternate GPT is invalid, using primary GPT. [ 90.306536][ T4513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.319712][ T2992] loop1: p2 p3 p7 [ 90.341428][ T4513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.383912][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 90.384339][ T3785] udevd[3785]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 90.397498][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 90.470275][ T4525] loop4: detected capacity change from 0 to 512 [ 90.496713][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 90.498384][ T3785] udevd[3785]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 90.502892][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 90.507108][ T4525] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.508653][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 90.508845][ T3785] udevd[3785]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 90.509902][ T4525] EXT4-fs (loop4): 1 truncate cleaned up [ 90.510490][ T4525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.510505][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 90.551989][ T4535] sd 0:0:1:0: device reset [ 90.700773][ T4547] loop3: detected capacity change from 0 to 1024 [ 90.752557][ T4547] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.752586][ T4547] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 90.753288][ T4547] EXT4-fs (loop3): invalid journal inode [ 90.753307][ T4547] EXT4-fs (loop3): can't get journal size [ 90.772677][ T4547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.773438][ T4547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.270'. [ 90.801907][ T4340] veth0_vlan: entered promiscuous mode [ 90.877040][ T4340] veth1_vlan: entered promiscuous mode [ 90.917500][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.922211][ T4340] veth0_macvtap: entered promiscuous mode [ 90.946475][ T4340] veth1_macvtap: entered promiscuous mode [ 91.022541][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.044056][ T4558] tipc: Started in network mode [ 91.062325][ T4558] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 91.077041][ T4558] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 91.085727][ T4558] tipc: Enabled bearer , priority 10 [ 91.103027][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.152069][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.186143][ T4075] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.200964][ T4075] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.271479][ T4075] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.292656][ T4075] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.322458][ T4576] netlink: 642 bytes leftover after parsing attributes in process `syz.1.278'. [ 91.342810][ T4577] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.276'. [ 91.492149][ T4577] vhci_hcd vhci_hcd.4: invalid port number 22 [ 91.514209][ T4577] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 91.526061][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 91.535004][ T4583] netlink: 'syz.1.280': attribute type 7 has an invalid length. [ 91.543214][ T4583] netlink: 'syz.1.280': attribute type 8 has an invalid length. [ 91.550903][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 91.590353][ T4583] team0: entered promiscuous mode [ 91.605156][ T4583] team_slave_0: entered promiscuous mode [ 91.622324][ T4583] team_slave_1: entered promiscuous mode [ 91.647866][ T4583] bond0: entered promiscuous mode [ 91.682298][ T4583] bond_slave_0: entered promiscuous mode [ 91.688184][ T4583] bond_slave_1: entered promiscuous mode [ 91.704622][ T4583] gretap0: entered promiscuous mode [ 91.715312][ T4583] debugfs: 'hsr1' already exists in 'hsr' [ 91.740350][ T4583] Cannot create hsr debugfs directory [ 91.746469][ T4583] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 91.922594][ T4588] netlink: 68 bytes leftover after parsing attributes in process `syz.5.239'. [ 91.931538][ T4588] netlink: 56 bytes leftover after parsing attributes in process `syz.5.239'. [ 92.342116][ T4594] loop1: detected capacity change from 0 to 2048 [ 92.505679][ T4594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.622408][ T4552] loop3: detected capacity change from 0 to 1024 [ 92.740730][ T35] tipc: Node number set to 1 [ 92.865412][ T4552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 92.884555][ T4552] System zones: 0-1, 3-36 [ 92.912807][ T4552] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.271: bad orphan inode 134217728 [ 92.928622][ T4552] loop3: lost filesystem error report for type 5 error -117 [ 92.973087][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.990398][ T4552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.161047][ T4561] netlink: 48 bytes leftover after parsing attributes in process `syz.3.271'. [ 93.333651][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.775094][ T4622] netlink: 'syz.3.284': attribute type 29 has an invalid length. [ 93.811251][ T4621] loop1: detected capacity change from 0 to 764 [ 93.824379][ T4616] netlink: 'syz.3.284': attribute type 29 has an invalid length. [ 93.842294][ T4616] netlink: 500 bytes leftover after parsing attributes in process `syz.3.284'. [ 93.883905][ T4625] loop4: detected capacity change from 0 to 512 [ 93.901568][ T4625] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 93.987849][ T4631] loop4: detected capacity change from 0 to 512 [ 93.994982][ T4631] EXT4-fs: dax option not supported [ 94.082322][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 94.082338][ T28] audit: type=1400 audit(1770990725.726:805): avc: denied { setopt } for pid=4636 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.182466][ T28] audit: type=1400 audit(1770990725.826:806): avc: denied { mount } for pid=4640 comm="syz.1.293" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 94.217570][ T4642] syz.1.293 (4642) used greatest stack depth: 9064 bytes left [ 94.233609][ T4622] loop3: detected capacity change from 0 to 512 [ 94.262218][ T4622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.295643][ T4622] EXT4-fs error (device loop3): __ext4_iget:5426: inode #3: block 127754: comm syz.3.284: invalid block [ 94.332030][ T4622] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 94.332219][ T4622] EXT4-fs error (device loop3): ext4_quota_enable:7192: comm syz.3.284: Bad quota inode: 3, type: 0 [ 94.352263][ T4622] loop3: lost filesystem error report for type 5 error -117 [ 94.358857][ T4622] EXT4-fs warning (device loop3): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.381562][ T4622] EXT4-fs (loop3): mount failed [ 94.490199][ T4651] vhci_hcd vhci_hcd.4: invalid port number 22 [ 94.510575][ T4659] loop0: detected capacity change from 0 to 512 [ 94.517996][ T4651] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 94.567844][ T4659] EXT4-fs warning (device loop0): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 94.609612][ T4659] EXT4-fs (loop0): mount failed [ 94.703303][ T4666] program syz.5.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.737920][ T4666] loop5: detected capacity change from 0 to 256 [ 94.902697][ T4675] vhci_hcd vhci_hcd.0: default hub control req: 0016 vc000 i0001 l11 [ 95.072894][ T4679] loop5: detected capacity change from 0 to 512 [ 95.113184][ T28] audit: type=1400 audit(1770990726.756:807): avc: denied { create } for pid=4668 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.146164][ T4680] loop3: detected capacity change from 0 to 512 [ 95.164529][ T4680] EXT4-fs: Ignoring removed nobh option [ 95.189855][ T4680] /dev/loop3: Can't open blockdev [ 95.208052][ T28] audit: type=1400 audit(1770990726.786:808): avc: denied { ioctl } for pid=4668 comm="syz.3.300" path="socket:[9625]" dev="sockfs" ino=9625 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.314524][ T4682] loop5: detected capacity change from 0 to 8192 [ 95.336692][ T4682] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.353980][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.379421][ T4682] FAT-fs (loop5): Filesystem has been set read-only [ 95.386598][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.408460][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.417839][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.466833][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.475904][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.485283][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.494803][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.504368][ T4682] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.547237][ T4681] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.569115][ T4692] loop0: detected capacity change from 0 to 1024 [ 95.587629][ T28] audit: type=1400 audit(1770990727.226:809): avc: denied { read } for pid=4681 comm="syz.5.305" path="socket:[9648]" dev="sockfs" ino=9648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.634222][ T4692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.744378][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.780516][ T4701] netlink: 'syz.0.310': attribute type 7 has an invalid length. [ 95.788550][ T4701] netlink: 'syz.0.310': attribute type 8 has an invalid length. [ 95.796437][ T4701] netlink: 'syz.0.310': attribute type 13 has an invalid length. [ 95.798955][ T4687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.843924][ T4687] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.916450][ T28] audit: type=1326 audit(1770990727.556:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 96.001538][ T28] audit: type=1326 audit(1770990727.556:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 96.057273][ T28] audit: type=1326 audit(1770990727.556:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 96.117076][ T28] audit: type=1326 audit(1770990727.556:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 96.171019][ T28] audit: type=1326 audit(1770990727.596:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43fab4bf79 code=0x7ffc0000 [ 96.362996][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.282890][ T4736] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.334474][ T4736] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.424593][ T4741] __nla_validate_parse: 2 callbacks suppressed [ 97.424613][ T4741] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.321'. [ 97.548698][ T4734] vhci_hcd vhci_hcd.4: invalid port number 22 [ 97.585340][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.587862][ T4045] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.588399][ T4734] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 97.711038][ T4045] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.867566][ T4764] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.926195][ T4045] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.997909][ T4045] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.053466][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 98.344646][ T4755] chnl_net:caif_netlink_parms(): no params data found [ 98.517201][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.545777][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.574441][ T4755] bridge_slave_0: entered allmulticast mode [ 98.587888][ T4755] bridge_slave_0: entered promiscuous mode [ 98.599131][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.607186][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.645934][ T3310] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 98.649823][ T4755] bridge_slave_1: entered allmulticast mode [ 98.661732][ T4755] bridge_slave_1: entered promiscuous mode [ 98.685306][ T4797] EXT4-fs: Mount option(s) incompatible with ext3 [ 98.726771][ T4799] EXT4-fs (loop0): 1 truncate cleaned up [ 98.754078][ T4755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.765433][ T4799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.779051][ T4755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.808399][ T4755] team0: Port device team_slave_0 added [ 98.848735][ T4755] team0: Port device team_slave_1 added [ 98.860070][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 98.874921][ T4807] netlink: 92 bytes leftover after parsing attributes in process `syz.3.341'. [ 98.884860][ T4807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 98.924562][ T4807] batadv1: entered promiscuous mode [ 98.964467][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.971468][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.009611][ T4811] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.340'. [ 99.105762][ T4802] vhci_hcd vhci_hcd.4: invalid port number 22 [ 99.118217][ T4755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.144182][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 99.144200][ T28] audit: type=1400 audit(1770990730.786:1000): avc: denied { create } for pid=4810 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.149564][ T4825] set_capacity_and_notify: 6 callbacks suppressed [ 99.149617][ T4825] loop3: detected capacity change from 0 to 256 [ 99.176885][ T4802] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 99.192332][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.199306][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.246659][ T28] audit: type=1400 audit(1770990730.786:1001): avc: denied { getopt } for pid=4810 comm="syz.1.342" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.293240][ T28] audit: type=1400 audit(1770990730.786:1002): avc: denied { ioctl } for pid=4810 comm="syz.1.342" path="socket:[10438]" dev="sockfs" ino=10438 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.324444][ T4755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.351253][ T4045] bridge_slave_1: left allmulticast mode [ 99.357413][ T4045] bridge_slave_1: left promiscuous mode [ 99.368152][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.394343][ T4832] loop3: detected capacity change from 0 to 4096 [ 99.416107][ T4832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.430208][ T4045] bridge_slave_0: left allmulticast mode [ 99.445225][ T28] audit: type=1400 audit(1770990731.076:1003): avc: denied { map } for pid=4829 comm="syz.3.344" path="/proc/243/task/245/maps" dev="proc" ino=9973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 99.468956][ T4045] bridge_slave_0: left promiscuous mode [ 99.499213][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.528310][ T28] audit: type=1400 audit(1770990731.076:1004): avc: denied { execute } for pid=4829 comm="syz.3.344" path="/proc/243/task/245/maps" dev="proc" ino=9973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 99.551840][ T28] audit: type=1400 audit(1770990731.116:1005): avc: denied { getopt } for pid=4829 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.583861][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.636350][ T4841] netlink: 'syz.0.347': attribute type 10 has an invalid length. [ 99.644951][ T4841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.347'. [ 99.657286][ T4045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.667531][ T4045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.677292][ T4045] bond0 (unregistering): Released all slaves [ 99.691779][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 99.701122][ T4841] dummy0: entered promiscuous mode [ 99.706560][ T4841] dummy0: entered allmulticast mode [ 99.712946][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.722932][ T4841] bridge0: port 3(dummy0) entered blocking state [ 99.729766][ T4841] bridge0: port 3(dummy0) entered disabled state [ 99.737676][ T4841] bridge0: port 3(dummy0) entered blocking state [ 99.744123][ T4841] bridge0: port 3(dummy0) entered forwarding state [ 99.821133][ T4045] hsr_slave_0: left promiscuous mode [ 99.859555][ T4045] hsr_slave_1: left promiscuous mode [ 99.881416][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.889313][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.900601][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.909889][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.926812][ T4045] veth1_macvtap: left promiscuous mode [ 99.932430][ T4045] veth0_macvtap: left promiscuous mode [ 99.937952][ T4045] veth1_vlan: left promiscuous mode [ 99.943334][ T4045] veth0_vlan: left promiscuous mode [ 99.984358][ T4854] loop1: detected capacity change from 0 to 256 [ 100.017946][ T28] audit: type=1326 audit(1770990731.656:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 100.065236][ T28] audit: type=1326 audit(1770990731.656:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 100.073805][ T4860] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.354'. [ 100.093906][ T28] audit: type=1326 audit(1770990731.656:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 100.121269][ T28] audit: type=1326 audit(1770990731.656:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 100.152317][ T4854] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.225311][ T4860] vhci_hcd vhci_hcd.4: invalid port number 22 [ 100.231440][ T4860] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 100.253220][ T4045] team0 (unregistering): Port device team_slave_1 removed [ 100.266018][ T4045] team0 (unregistering): Port device team_slave_0 removed [ 100.540243][ T4755] hsr_slave_0: entered promiscuous mode [ 100.556706][ T4755] hsr_slave_1: entered promiscuous mode [ 100.577983][ T4755] debugfs: 'hsr0' already exists in 'hsr' [ 100.610071][ T4755] Cannot create hsr debugfs directory [ 100.915615][ T4755] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.923888][ T4849] loop4: detected capacity change from 0 to 4096 [ 100.944189][ T4755] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.969394][ T4893] loop3: detected capacity change from 0 to 4096 [ 100.986231][ T4755] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.056759][ T4755] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.123250][ T4914] netlink: 'syz.0.362': attribute type 10 has an invalid length. [ 101.171222][ T4914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'. [ 101.321138][ T4755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.334814][ T4755] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.352787][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.359934][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.389686][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.396889][ T4042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.459746][ T4936] program syz.1.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.642875][ T4947] netlink: 'syz.1.366': attribute type 7 has an invalid length. [ 101.647135][ T4755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.650587][ T4947] netlink: 'syz.1.366': attribute type 8 has an invalid length. [ 101.793464][ T4959] loop1: detected capacity change from 0 to 2048 [ 101.851552][ T3776] loop1: p1 p3 [ 101.855892][ T3776] loop1: p3 start 8388352 is beyond EOD, truncated [ 101.883192][ T4959] loop1: p1 p3 [ 101.887354][ T4959] loop1: p3 start 8388352 is beyond EOD, truncated [ 101.970741][ T4979] loop1: detected capacity change from 0 to 512 [ 102.013295][ T4979] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.014006][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 102.034402][ T4979] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #11: block 1: comm syz.1.370: lblock 0 mapped to illegal pblock 1 (length 1) [ 102.056139][ T4979] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.061301][ T4979] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.093061][ T4755] veth0_vlan: entered promiscuous mode [ 102.101602][ T4979] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.370: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 102.120351][ T4755] veth1_vlan: entered promiscuous mode [ 102.133018][ T4979] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.142858][ T4755] veth0_macvtap: entered promiscuous mode [ 102.157827][ T4979] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.370: ea_inode dec ref err=-117 [ 102.172396][ T4755] veth1_macvtap: entered promiscuous mode [ 102.176526][ T4979] EXT4-fs (loop1): 1 orphan inode deleted [ 102.195166][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.217661][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.242041][ T4046] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.333812][ T4041] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.360638][ T4041] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.371351][ T5000] loop4: detected capacity change from 0 to 4096 [ 102.382628][ T4041] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.405944][ T5010] loop3: detected capacity change from 0 to 512 [ 102.433755][ T5000] EXT4-fs: Ignoring sb option on remount [ 102.441805][ T5005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.449150][ T5010] EXT4-fs: Ignoring removed nobh option [ 102.455689][ T5000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.464303][ T5000] EXT4-fs (loop4): stripe (249) is not aligned with cluster size (16), stripe is disabled [ 102.467864][ T5010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.492478][ T5000] EXT4-fs (loop4): can't disable delalloc during remount [ 102.554665][ T5010] EXT4-fs (loop3): unsupported inode size: 4 [ 102.560730][ T5010] EXT4-fs (loop3): blocksize: 1024 [ 102.599784][ T5000] 9p: Bad value for 'wfdno' [ 103.216902][ T5070] loop3: detected capacity change from 0 to 512 [ 103.263509][ T5070] EXT4-fs mount: 8 callbacks suppressed [ 103.263527][ T5070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.292228][ T5070] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.430114][ T5079] sctp: [Deprecated]: syz.4.383 (pid 5079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.430114][ T5079] Use struct sctp_sack_info instead [ 103.465723][ T5083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5083 comm=syz.6.384 [ 103.749774][ T5096] netlink: 'syz.4.385': attribute type 10 has an invalid length. [ 103.769957][ T5095] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.797560][ T5096] __nla_validate_parse: 4 callbacks suppressed [ 103.797579][ T5096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 103.823207][ T5095] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 103.844912][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.857642][ T5095] EXT4-fs (loop6): invalid journal inode [ 103.872217][ T5095] EXT4-fs (loop6): can't get journal size [ 103.903495][ T5095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.955465][ T5107] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.980042][ T5095] netlink: 56 bytes leftover after parsing attributes in process `syz.6.386'. [ 104.043124][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.075639][ T4755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.098501][ T5107] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.388: Directory hole found for htree leaf block 0 [ 104.152944][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 104.152963][ T28] audit: type=1400 audit(1770990735.786:1021): avc: denied { create } for pid=5123 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.215381][ T5129] set_capacity_and_notify: 2 callbacks suppressed [ 104.215399][ T5129] loop4: detected capacity change from 0 to 512 [ 104.258760][ T5136] loop6: detected capacity change from 0 to 128 [ 104.266225][ T3303] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 104.321567][ T5143] netlink: 'syz.6.397': attribute type 21 has an invalid length. [ 104.340778][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 104.351963][ T5143] netlink: 'syz.6.397': attribute type 4 has an invalid length. [ 104.425654][ T5133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5133 comm=syz.3.394 [ 104.453188][ T5147] netlink: 104 bytes leftover after parsing attributes in process `syz.1.399'. [ 104.473375][ T5147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.399'. [ 105.122998][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 105.190695][ T5169] netlink: 'syz.1.405': attribute type 7 has an invalid length. [ 105.203265][ T5169] netlink: 'syz.1.405': attribute type 8 has an invalid length. [ 105.205159][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 105.211031][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 105.233791][ T5171] netlink: 'syz.0.406': attribute type 7 has an invalid length. [ 105.241605][ T5171] netlink: 'syz.0.406': attribute type 8 has an invalid length. [ 105.249644][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 105.275168][ T5173] sctp: [Deprecated]: syz.4.407 (pid 5173) Use of int in max_burst socket option deprecated. [ 105.275168][ T5173] Use struct sctp_assoc_value instead [ 105.325788][ T28] audit: type=1326 audit(1770990736.966:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.4.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccb84ebf79 code=0x0 [ 105.326512][ T5177] vhci_hcd vhci_hcd.4: invalid port number 254 [ 105.362995][ T5177] vhci_hcd vhci_hcd.4: SetHubDepth req not supported for USB 2.0 roothub [ 105.382516][ T5177] hsr0: entered allmulticast mode [ 105.387700][ T5177] hsr_slave_0: entered allmulticast mode [ 105.393750][ T5177] hsr_slave_1: entered allmulticast mode [ 105.479741][ T5185] loop1: detected capacity change from 0 to 512 [ 105.516199][ T28] audit: type=1400 audit(1770990737.146:1023): avc: denied { create } for pid=5188 comm="syz.6.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.536286][ T28] audit: type=1400 audit(1770990737.146:1024): avc: denied { ioctl } for pid=5188 comm="syz.6.414" path="socket:[11643]" dev="sockfs" ino=11643 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.564324][ T5185] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.666567][ T5200] loop0: detected capacity change from 0 to 512 [ 105.682473][ T5185] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.411: Directory hole found for htree leaf block 0 [ 105.706999][ T5200] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.758682][ T28] audit: type=1400 audit(1770990737.396:1025): avc: denied { create } for pid=5203 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 105.821671][ T5200] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.417: Directory hole found for htree leaf block 0 [ 105.840490][ T3303] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 105.951966][ T3310] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 105.979155][ T5211] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.419'. [ 106.023086][ T5214] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 106.078675][ T28] audit: type=1400 audit(1770990737.716:1026): avc: denied { getopt } for pid=5215 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.102218][ T5211] vhci_hcd vhci_hcd.4: invalid port number 22 [ 106.125285][ T5218] loop3: detected capacity change from 0 to 256 [ 106.131695][ T5211] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 106.140607][ T5218] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.157986][ T28] audit: type=1400 audit(1770990737.796:1027): avc: denied { accept } for pid=5220 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.204554][ T5218] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.378464][ T5230] loop3: detected capacity change from 0 to 512 [ 106.594559][ T5230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.667186][ T5237] loop4: detected capacity change from 0 to 1024 [ 106.717403][ T5230] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.792582][ T5237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.065274][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.106786][ T5247] loop1: detected capacity change from 0 to 1024 [ 107.163125][ T5249] netlink: 'syz.3.429': attribute type 10 has an invalid length. [ 107.171543][ T5247] EXT4-fs: Mount option(s) incompatible with ext2 [ 107.215543][ T5253] loop0: detected capacity change from 0 to 512 [ 107.249887][ T5253] EXT4-fs: Ignoring removed nobh option [ 107.273962][ T5253] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.285365][ T5257] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 107.323229][ T5253] EXT4-fs (loop0): 1 truncate cleaned up [ 107.346967][ T5262] loop3: detected capacity change from 0 to 512 [ 107.353665][ T5253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.413575][ T5262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.433527][ T28] audit: type=1400 audit(1770990739.076:1028): avc: denied { create } for pid=5250 comm="syz.0.431" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 107.492126][ T5262] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.727100][ T28] audit: type=1400 audit(1770990739.146:1029): avc: denied { read } for pid=5250 comm="syz.0.431" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 107.812624][ T28] audit: type=1326 audit(1770990739.206:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5250 comm="syz.0.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd0260bf79 code=0x0 [ 107.986483][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.032388][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.042723][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.186574][ T5284] vfat: Unknown parameter 'shor-g<wer' [ 108.382199][ T5302] vhci_hcd vhci_hcd.4: invalid port number 22 [ 108.440234][ T5302] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 108.654381][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.663754][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.808900][ T5322] __nla_validate_parse: 4 callbacks suppressed [ 108.808916][ T5322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.451'. [ 108.825630][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.452'. [ 108.833279][ T5322] netlink: 'syz.4.451': attribute type 7 has an invalid length. [ 108.842567][ T5322] netlink: 'syz.4.451': attribute type 8 has an invalid length. [ 108.850354][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 108.862894][ T5322] bond0: entered promiscuous mode [ 108.868114][ T5322] bond_slave_0: entered promiscuous mode [ 108.874402][ T5322] bond_slave_1: entered promiscuous mode [ 108.882197][ T5322] bond0: left promiscuous mode [ 108.887295][ T5322] bond_slave_0: left promiscuous mode [ 108.893380][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.902233][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.907843][ T5322] bond_slave_1: left promiscuous mode [ 108.927645][ T5326] EXT4-fs: Ignoring removed nobh option [ 108.944500][ T5326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 108.953341][ T5326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.987781][ T4755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.051394][ T5338] 9p: Bad value for 'wfdno' [ 109.103989][ T5343] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.159504][ T5343] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 109.176150][ T5343] EXT4-fs (loop6): Remounting filesystem read-only [ 109.182893][ T5343] __quota_error: 7 callbacks suppressed [ 109.182937][ T5343] Quota error (device loop6): write_blk: dquota write failed [ 109.189054][ T5351] tipc: Started in network mode [ 109.199648][ T5343] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 109.203898][ T5351] tipc: Node identity 3a1d7c178b22, cluster identity 4711 [ 109.210841][ T5343] Quota error (device loop6): write_blk: dquota write failed [ 109.226055][ T5343] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 109.236423][ T5343] EXT4-fs (loop6): 1 truncate cleaned up [ 109.242236][ T5345] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.458'. [ 109.243386][ T5343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.254711][ T5351] tipc: Enabled bearer , priority 0 [ 109.270467][ T5343] netlink: 'syz.6.459': attribute type 21 has an invalid length. [ 109.278680][ T5343] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.298170][ T4755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.308841][ T5355] syzkaller0: entered promiscuous mode [ 109.314504][ T5355] syzkaller0: entered allmulticast mode [ 109.338792][ T5351] tipc: Resetting bearer [ 109.349503][ T5350] tipc: Resetting bearer [ 109.353725][ T28] audit: type=1400 audit(1770990740.996:1038): avc: denied { getopt } for pid=5356 comm="syz.6.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.375802][ T5352] vhci_hcd vhci_hcd.4: invalid port number 22 [ 109.382061][ T5352] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 109.385076][ T5350] tipc: Disabling bearer [ 109.486212][ T5362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.536728][ T5364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.465'. [ 109.552569][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 109.672289][ T5371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.695362][ T28] audit: type=1326 audit(1770990741.326:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 109.751993][ T28] audit: type=1326 audit(1770990741.326:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 109.768877][ T5378] set_capacity_and_notify: 3 callbacks suppressed [ 109.768951][ T5378] loop1: detected capacity change from 0 to 512 [ 109.816272][ T28] audit: type=1326 audit(1770990741.336:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 109.896924][ T5360] netlink: 64 bytes leftover after parsing attributes in process `syz.6.463'. [ 109.909591][ T28] audit: type=1326 audit(1770990741.336:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 109.937142][ T5360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=800 sclass=netlink_route_socket pid=5360 comm=syz.6.463 [ 109.967339][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.6.463'. [ 110.024777][ T28] audit: type=1326 audit(1770990741.336:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0260bf79 code=0x7ffc0000 [ 110.054608][ T5394] loop0: detected capacity change from 0 to 512 [ 110.066187][ T5394] msdos: Bad value for 'check' [ 110.094878][ T5397] loop3: detected capacity change from 0 to 512 [ 110.134380][ T5397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.189494][ T5397] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.322124][ T5407] syz.0.471 (5407) used obsolete PPPIOCDETACH ioctl [ 110.345686][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.445067][ T5419] bridge0: entered promiscuous mode [ 110.467118][ T5419] macsec1: entered promiscuous mode [ 110.487250][ T5421] xt_CT: No such helper "pptp" [ 110.562403][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 110.581828][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 110.769821][ T5426] bridge0: port 3(dummy0) entered disabled state [ 110.776296][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.783496][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.859265][ T5426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.869401][ T5426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.937793][ T5434] lo: entered allmulticast mode [ 111.026774][ T4041] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.045801][ T5432] lo: left allmulticast mode [ 111.131889][ T4041] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.173597][ T4041] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.193798][ T4041] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.206619][ T5450] loop6: detected capacity change from 0 to 128 [ 111.248490][ T5457] loop0: detected capacity change from 0 to 256 [ 111.275518][ T5438] vhci_hcd vhci_hcd.4: invalid port number 22 [ 111.293972][ T5461] loop3: detected capacity change from 0 to 512 [ 111.317765][ T5438] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 111.361592][ T5461] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.491: corrupted inode contents [ 111.429548][ T5461] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.429734][ T5461] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.491: mark_inode_dirty error [ 111.450651][ T5461] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.455865][ T5461] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.491: corrupted inode contents [ 111.497194][ T5461] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.497326][ T5461] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.491: mark_inode_dirty error [ 111.521159][ T5461] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.521795][ T5461] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.491: Failed to acquire dquot type 0 [ 111.556718][ T5461] loop3: lost filesystem error report for type 5 error -117 [ 111.561210][ T5461] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.491: corrupted inode contents [ 111.595084][ T5461] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.595269][ T5461] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.491: mark_inode_dirty error [ 111.616991][ T5461] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.617516][ T5461] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.491: corrupted inode contents [ 111.638977][ T5461] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.640013][ T5461] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.491: mark_inode_dirty error [ 111.668006][ T5461] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.676227][ T5461] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.491: corrupted inode contents [ 111.699159][ T5461] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.701061][ T5461] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 111.719133][ T5489] validate_nla: 3 callbacks suppressed [ 111.719145][ T5489] netlink: 'syz.4.498': attribute type 2 has an invalid length. [ 111.741969][ T5461] loop3: lost filesystem error report for type 5 error -117 [ 111.742170][ T5461] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.491: corrupted inode contents [ 111.766651][ T5461] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.842430][ T5461] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.491: mark_inode_dirty error [ 111.875938][ T5461] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 111.894617][ T5461] loop3: lost filesystem error report for type 5 error -117 [ 111.895259][ T5461] EXT4-fs (loop3): 1 truncate cleaned up [ 111.909375][ T5461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.922405][ T5461] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.364897][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.485003][ T4077] EXT4-fs error (device loop3): ext4_release_dquot:7034: comm kworker/u8:46: Failed to release dquot type 0 [ 112.506273][ T5502] loop0: detected capacity change from 0 to 512 [ 112.520065][ T4077] loop3: lost filesystem error report for type 5 error -117 [ 112.520281][ T5502] EXT4-fs: Ignoring removed orlov option [ 112.539338][ T4077] EXT4-fs error (device loop3): ext4_release_dquot:7034: comm kworker/u8:46: Failed to release dquot type 1 [ 112.551587][ T4077] loop3: lost filesystem error report for type 5 error -117 [ 112.628550][ T5502] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.669184][ T5502] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 112.677756][ T5502] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.500: attempt to clear invalid blocks 2 len 1 [ 112.691773][ T5502] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 112.706624][ T5502] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.500: invalid indirect mapped block 1819239214 (level 0) [ 112.720897][ T5502] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.500: invalid indirect mapped block 1819239214 (level 1) [ 112.738268][ T5502] EXT4-fs (loop0): 1 truncate cleaned up [ 112.744449][ T5502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.767066][ T5500] EXT4-fs (loop0): shut down requested (2) [ 112.773300][ T5500] No source specified [ 112.845995][ T5508] loop3: detected capacity change from 0 to 4096 [ 112.856851][ T5514] loop1: detected capacity change from 0 to 512 [ 112.863504][ T5514] EXT4-fs: Ignoring removed orlov option [ 112.865586][ T5508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.888537][ T5518] loop6: detected capacity change from 0 to 512 [ 112.918007][ T5508] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.949374][ T5514] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 112.957531][ T5514] System zones: 0-2, 18-18, 34-35 [ 112.963451][ T5514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.976065][ T5514] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.029285][ T5508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.048427][ T5518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.061640][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.062122][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.080363][ T5518] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.103811][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.189717][ T5528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.209364][ T4755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.263325][ T5528] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.507: corrupted xattr block 113: invalid header [ 113.307343][ T5528] EXT4-fs (loop0): Remounting filesystem read-only [ 113.347402][ T5539] vhci_hcd vhci_hcd.4: invalid port number 22 [ 113.367478][ T5539] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 113.379474][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.504928][ T5545] FAT-fs (loop6): Directory bread(block 64) failed [ 113.511493][ T5545] FAT-fs (loop6): Directory bread(block 65) failed [ 113.520093][ T5547] netlink: 'syz.1.514': attribute type 7 has an invalid length. [ 113.560253][ T5547] netlink: 'syz.1.514': attribute type 8 has an invalid length. [ 113.593298][ T5545] FAT-fs (loop6): Directory bread(block 66) failed [ 113.617840][ T5545] FAT-fs (loop6): Directory bread(block 67) failed [ 113.634771][ T5545] FAT-fs (loop6): Directory bread(block 68) failed [ 113.641330][ T5545] FAT-fs (loop6): Directory bread(block 69) failed [ 113.698963][ T5545] FAT-fs (loop6): Directory bread(block 70) failed [ 113.741996][ T5545] FAT-fs (loop6): Directory bread(block 71) failed [ 113.758973][ T5545] FAT-fs (loop6): Directory bread(block 72) failed [ 113.774518][ T5572] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 113.794380][ T5545] FAT-fs (loop6): Directory bread(block 73) failed [ 113.819680][ T5572] __nla_validate_parse: 9 callbacks suppressed [ 113.819694][ T5572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'. [ 113.843224][ T5572] dummy0: entered promiscuous mode [ 113.853120][ T5572] dummy0: entered allmulticast mode [ 113.869365][ T5572] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 113.931213][ T5545] netlink: 205956 bytes leftover after parsing attributes in process `syz.6.510'. [ 113.972133][ T5545] netlink: 3074 bytes leftover after parsing attributes in process `syz.6.510'. [ 114.043951][ T5589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.062053][ T5589] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.072923][ T5545] syz.6.510: attempt to access beyond end of device [ 114.072923][ T5545] loop6: rw=8912896, sector=1192, nr_sectors = 4 limit=256 [ 114.149392][ T5598] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 114.183251][ T5586] syz.6.510: attempt to access beyond end of device [ 114.183251][ T5586] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 114.204564][ T5594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.238718][ T5545] syz.6.510: attempt to access beyond end of device [ 114.238718][ T5545] loop6: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 114.253005][ T5594] ext4 filesystem being mounted at /105/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.263579][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 114.263596][ T28] audit: type=1400 audit(1770990745.906:1070): avc: denied { remove_name } for pid=3304 comm="syz-executor" name="binderfs" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 114.298678][ T28] audit: type=1400 audit(1770990745.906:1071): avc: denied { rmdir } for pid=3304 comm="syz-executor" name="117" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 114.371353][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.400710][ T28] audit: type=1400 audit(1770990746.026:1072): avc: denied { execute } for pid=5607 comm="syz.0.523" name="file1" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.478736][ T5615] EXT4-fs: Ignoring removed orlov option [ 114.542857][ T5615] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 114.624134][ T5615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.642492][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.689244][ T28] audit: type=1400 audit(1770990746.306:1073): avc: denied { connect } for pid=5628 comm="syz.6.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.765129][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.872487][ T5647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.531'. [ 115.044228][ T5660] set_capacity_and_notify: 5 callbacks suppressed [ 115.044247][ T5660] loop1: detected capacity change from 0 to 512 [ 115.062615][ T5655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 115.127407][ T5661] loop4: detected capacity change from 0 to 2048 [ 115.171835][ T5660] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.533: invalid indirect mapped block 4294967295 (level 1) [ 115.249384][ T3776] loop4: p1 [ 115.276707][ T5660] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.533: invalid indirect mapped block 4294967295 (level 1) [ 115.306917][ T5661] loop4: p1 [ 115.319265][ T2992] loop4: p1 [ 115.326960][ T5660] EXT4-fs (loop1): 2 truncates cleaned up [ 115.351244][ T5660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.430957][ T5679] cgroup: Name too long [ 115.436371][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.478144][ T5686] loop3: detected capacity change from 0 to 512 [ 115.494298][ T5689] loop1: detected capacity change from 0 to 128 [ 115.529095][ T5689] /dev/loop1: Can't open blockdev [ 115.582489][ T5686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.620191][ T5695] loop6: detected capacity change from 0 to 2048 [ 115.664985][ T28] audit: type=1400 audit(1770990747.306:1074): avc: denied { write } for pid=5698 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.671309][ T5686] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.695733][ T5699] batman_adv: batadv0: Adding interface: dummy0 [ 115.713570][ T5695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.725805][ T5699] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.807444][ T4755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.842328][ T5699] batman_adv: batadv0: Interface activated: dummy0 [ 115.851943][ T28] audit: type=1400 audit(1770990747.486:1075): avc: denied { ioctl } for pid=5698 comm="syz.1.540" path="socket:[13269]" dev="sockfs" ino=13269 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.893595][ T5702] batadv0: mtu less than device minimum [ 115.914239][ T5704] loop6: detected capacity change from 0 to 512 [ 115.926748][ T28] audit: type=1400 audit(1770990747.566:1076): avc: denied { setopt } for pid=5698 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.927388][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 115.957514][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 115.968472][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 115.972183][ T5704] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 115.979966][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 115.997994][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 116.009036][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 116.020166][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 116.031162][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 116.042190][ T5702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 116.082135][ T5704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 116.090180][ T5704] System zones: 1-12 [ 116.099047][ T5704] EXT4-fs (loop6): 1 truncate cleaned up [ 116.132370][ T5704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.154800][ T5707] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 116.163851][ T5707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.543'. [ 116.188685][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.249856][ T4755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.408426][ T5744] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 116.420584][ T5745] loop1: detected capacity change from 0 to 512 [ 116.428523][ T5744] batman_adv: batadv0: Adding interface: netdevsim1 [ 116.442025][ T5744] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.446263][ T5746] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.549'. [ 116.497358][ T5745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.528234][ T5745] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.547413][ T5736] loop0: detected capacity change from 0 to 1024 [ 116.585967][ T5744] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 116.622629][ T5746] vhci_hcd vhci_hcd.4: invalid port number 22 [ 116.628755][ T5746] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 116.647008][ T5736] EXT4-fs: inline encryption not supported [ 116.685228][ T5736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.752982][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.791723][ T5744] vlan2: entered allmulticast mode [ 116.797044][ T5744] bond0: entered allmulticast mode [ 116.802568][ T5744] bond_slave_0: entered allmulticast mode [ 116.808327][ T5744] bond_slave_1: entered allmulticast mode [ 116.816362][ T5736] netlink: 14 bytes leftover after parsing attributes in process `syz.0.552'. [ 116.865390][ T5757] loop1: detected capacity change from 0 to 164 [ 116.881247][ T28] audit: type=1400 audit(1770990748.516:1077): avc: denied { read } for pid=5756 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.926619][ T5736] bond0 (unregistering): left promiscuous mode [ 116.961373][ T5736] bond_slave_0: left promiscuous mode [ 116.993696][ T5736] bond_slave_1: left promiscuous mode [ 117.017526][ T5764] loop1: detected capacity change from 0 to 512 [ 117.052708][ T5736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.068636][ T5764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.083002][ T5736] bond_slave_0: left allmulticast mode [ 117.102229][ T5736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.122187][ T5736] bond_slave_1: left allmulticast mode [ 117.127830][ T5764] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.139635][ T5736] bond0 (unregistering): Released all slaves [ 117.172196][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.560'. [ 117.189216][ T28] audit: type=1400 audit(1770990748.796:1078): avc: denied { create } for pid=5763 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 117.232261][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.262339][ T28] audit: type=1400 audit(1770990748.856:1079): avc: denied { create } for pid=5763 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 117.305470][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.699782][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.574'. [ 117.784635][ T5830] random: crng reseeded on system resumption [ 117.856058][ T5834] process 'syz.0.578' launched './file0' with NULL argv: empty string added [ 117.932763][ T5838] FAT-fs (loop1): Directory bread(block 32) failed [ 117.956893][ T5838] FAT-fs (loop1): Directory bread(block 33) failed [ 117.974971][ T5838] FAT-fs (loop1): Directory bread(block 34) failed [ 117.991845][ T5838] FAT-fs (loop1): Directory bread(block 35) failed [ 118.004485][ T5838] FAT-fs (loop1): Directory bread(block 36) failed [ 118.021313][ T5838] FAT-fs (loop1): Directory bread(block 37) failed [ 118.031443][ T5838] FAT-fs (loop1): Directory bread(block 38) failed [ 118.051630][ T5838] FAT-fs (loop1): Directory bread(block 39) failed [ 118.058411][ T5838] FAT-fs (loop1): Directory bread(block 40) failed [ 118.071991][ T5838] FAT-fs (loop1): Directory bread(block 41) failed [ 118.121146][ T5838] syz.1.580: attempt to access beyond end of device [ 118.121146][ T5838] loop1: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 118.139050][ T5838] FAT-fs (loop1): Filesystem has been set read-only [ 118.151703][ T5838] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 118.341737][ T5851] bridge0: entered promiscuous mode [ 118.371859][ T5851] macvtap1: entered promiscuous mode [ 118.384744][ T5851] macvtap1: entered allmulticast mode [ 118.396149][ T5851] bridge0: entered allmulticast mode [ 118.403663][ T5851] bridge0: port 5(macvtap1) entered blocking state [ 118.410758][ T5851] bridge0: port 5(macvtap1) entered disabled state [ 118.418766][ T5870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.432166][ T5870] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.443094][ T5851] bridge0: left allmulticast mode [ 118.448797][ T5851] bridge0: left promiscuous mode [ 118.542730][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.634668][ T5886] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 118.647346][ T5886] batman_adv: batadv0: Interface deactivated: dummy0 [ 118.654265][ T5886] batman_adv: batadv0: Removing interface: dummy0 [ 118.850648][ T5893] vhci_hcd vhci_hcd.4: invalid port number 22 [ 118.876283][ T5895] __nla_validate_parse: 7 callbacks suppressed [ 118.876298][ T5895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.595'. [ 118.876784][ T5893] vhci_hcd vhci_hcd.4: default hub control req: 1500 v0000 i0016 l0 [ 118.933265][ T5899] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.979407][ T5899] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.597: Directory hole found for htree leaf block 0 [ 119.088906][ T3306] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 119.107069][ T3776] ================================================================== [ 119.115263][ T3776] BUG: KCSAN: data-race in set_nlink / set_nlink [ 119.121644][ T3776] [ 119.124001][ T3776] read to 0xffff88810750f120 of 4 bytes by task 2992 on cpu 0: [ 119.131576][ T3776] set_nlink+0x29/0xb0 [ 119.135690][ T3776] kernfs_iop_permission+0x1e2/0x220 [ 119.141017][ T3776] inode_permission+0x31f/0x3b0 [ 119.145906][ T3776] link_path_walk+0x779/0xe30 [ 119.150607][ T3776] path_lookupat+0x8c/0x500 [ 119.155125][ T3776] filename_lookup+0x190/0x390 [ 119.159944][ T3776] vfs_statx+0x96/0x170 [ 119.164136][ T3776] vfs_fstatat+0x118/0x170 [ 119.168584][ T3776] __se_sys_newfstatat+0x55/0x3e0 [ 119.173637][ T3776] __x64_sys_newfstatat+0x55/0x70 [ 119.178691][ T3776] x64_sys_call+0x2c64/0x3020 [ 119.183387][ T3776] do_syscall_64+0x12c/0x370 [ 119.187997][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.193920][ T3776] [ 119.196252][ T3776] write to 0xffff88810750f120 of 4 bytes by task 3776 on cpu 1: [ 119.203908][ T3776] set_nlink+0x99/0xb0 [ 119.208000][ T3776] kernfs_iop_permission+0x1e2/0x220 [ 119.213317][ T3776] inode_permission+0x31f/0x3b0 [ 119.218191][ T3776] link_path_walk+0x779/0xe30 [ 119.222888][ T3776] path_openat+0x1c6/0x2050 [ 119.227409][ T3776] do_file_open+0x16c/0x290 [ 119.231930][ T3776] do_sys_openat2+0x94/0x130 [ 119.236535][ T3776] __x64_sys_openat+0xf2/0x120 [ 119.241342][ T3776] x64_sys_call+0x1e39/0x3020 [ 119.246044][ T3776] do_syscall_64+0x12c/0x370 [ 119.250659][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.256568][ T3776] [ 119.258920][ T3776] value changed: 0x00000009 -> 0x00000008 [ 119.264640][ T3776] [ 119.266974][ T3776] Reported by Kernel Concurrency Sanitizer on: [ 119.273149][ T3776] CPU: 1 UID: 0 PID: 3776 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 119.282016][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 119.292100][ T3776] ================================================================== [ 119.412382][ T5906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.598'. [ 119.444363][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 119.444378][ T28] audit: type=1400 audit(1770990751.086:1094): avc: denied { create } for pid=5903 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1