last executing test programs: 4.12025284s ago: executing program 2 (id=62): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="151d0100000000002800128009000100766c616e000000001800028006000100fe0f00000c0002001a0000001a00000008000500", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) gettid() r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback={0x91}, 0xffffffff}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="34000000130010002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001010002000000921bdc6b3e140035de75657468305f745e5f6261"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) chroot(&(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x401, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) shutdown(r5, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1}}) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000086ad40ecb9566b9b73021a2710942cda32c341521c4533a46594e7b76b6e85ea0684586895bf938480b4079f37ebd81236a53c97a5b4cd66129c52933caa6f35deb2b91b20f8f907c1b847fad9a871de085d42b8fd71", @ANYRES16=r9, @ANYBLOB="0100fdfffffffeffffff240000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20041094) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100003000010028bd7000fbdbdf25040117800c0016"], 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.174637123s ago: executing program 2 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0xfffffffc}, 0xffffff64) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x2030380) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX=0x0], 0x38}, 0x1, 0x2}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/icmp\x00') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time, {0x0, 0x2}, {0x0, 0x5}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) fcntl$setlease(r4, 0x400, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$P9_RSTATu(r2, 0x0, 0x62) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x5, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r2, 0x6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.06711729s ago: executing program 4 (id=94): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) accept4$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000a00)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x6}}, 0x24, 0x2) 1.67108729s ago: executing program 3 (id=98): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x28, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xfc, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x3683, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2d, 0x2, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "000000000000080019000000000000000200"}, 0x80, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(r2, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x1, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r3, 0x5409, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x80000001}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000004c0035006772653000"/56], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x3, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@arp={@empty, @private=0xa010100, 0xff, 0xffffff00, 0xd, 0xd, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0xc726, 0x6, 0xfffb, 0x1, 'vlan0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="8d0a96a10857", @multicast1, @multicast2, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x9, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x6, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.484194614s ago: executing program 3 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x52}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x81, 0xc1, &(0x7f0000000500)=""/193, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xd, 0xfffffffd, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x2, 0xf}, {0x3, 0x1, 0x3, 0xc}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0x0, 0x29, 0x17, &(0x7f0000000800)="1a8dc8bdbabbb2d6d828194c5b6c3668368e37990d2bce76582c8d03d77bdc6ec80632f978c546b002", &(0x7f0000000840)=""/23, 0x1, 0x0, 0x21, 0xf2, &(0x7f0000000880)="0f53ea22d9032150d0eb58f216a2f272f0200f067a22cf7219fac20ea61720a354", &(0x7f00000008c0)="4fb9d95b40e76dcbd8f31489e72c54a58d3613fcc2c1717d1c8f812e88e719c749950a3656ac475ed08d066a1be2d4c89b52093aefbecd2ca300f5fb32e1659c9237104ad5c88519545c29305e294995d2de1899cbb63cd27e6ef5202776b08951c189488db12134a7732f638516dd4e2dc54e7776ab855a90e5ab8e4e964cf971deb2f50dbd9605fa83c679f8ffe7d0c75b5ca9505d0d27b51b33beffa80d49b75980df2cfeff25b79c6ddd16dc1dee50b7dd40f58ec5032590df5384b534c85080dfeadc1d59ec7e23755d45db06928e1909ca5b0467637c77d3f7036fe72e9dfaba4a4b3484a14047785881a4efd38322", 0x6, 0x0, 0x2}, 0x50) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250100000008000800ac141431050004000200000006000a004e"], 0x2c}, 0x1, 0x0, 0x0, 0x40688c4}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="70020000", @ANYRES16=r4, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYRES64=r4], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r7) keyctl$negate(0xd, r7, 0x5, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000d40)=@delsa={0x4c, 0x11, 0x521, 0x70bd27, 0x25dfdbfb, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2, 0x33}, [@srcaddr={0x14, 0xd, @in=@rand_addr=0x64010101}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @iptfs_drop_time={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0xa4, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x52, 0x8, "e1905e5e626a6ddb794606daa6ec9c9d5bfae7fb04fc6518be5562c0d59a4c55171067d9f3105d983c1bbe78859c46dc399c38dd143ad42a2f755edae42e56f466c1b96e596aa0d58618001f655a"}, @NFTA_OBJ_USERDATA={0x30, 0x8, "e3804eb4f17ebc5869984fa22c7344a22885980774b465959ce7606963fb0c62212dd01d266ab1038fb84ab2"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x4040880) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x38040ce, &(0x7f0000000240)={[{@data_writeback}, {@discard}, {@acl}, {@bsdgroups}, {@bh}, {@grpquota}, {@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nomblk_io_submit}]}, 0x3, 0x55d, &(0x7f00000007c0)="$eJzs3V9rLGcZAPBnJrsnyTmpSdULLViLrZxTtZuTxtMGL6qCeFewVLw9xmQTQjbZkmzak1Bsih9AENGCN3rljeAHUKQ33otQ0HtRUaSeoxcKbUdmdtYkm90k1f1Tkt8P5sy88+953kl2zvvOTHYCuLIei4hbETHxQsSTETFbzk/LIQ7bQ77eg/uvruRDEln24ttJJOW8zr4my/GNcrMot/9Wcjru7v7B5nKjUd8py/OtreSdLDt4amNreb2+Xt9eXFx4ZunZpTtLtwdSz7mIeO4rf/7Bd3/61ed+9blX/nD3r7e+naf17yx7LYp6TA4kTrd21asxdWxeJSJ2hhJtPCpFDdvujDkXAADOlrf3PxwRn4q8/T8bE0VrDgAAALhMsi/OxDtJRAYAAABcWmlEzESS1srnfWciTWu19jO8H43raaO52/rsWnNvezVfFjEX1XRto1G/XT47MBfVJC8vlM/YdspPd5UXI+LhiPj+7HRRrq00G6vjvvgBAAAAV8SNrv7/P2fb/f/CYd/NevxFLwAAAPCBNjfuBAAAAICh0/8HAACAy0//HwAAAC61rz3/fD5knfd4r768v7fZfPmp1fruZm1rb6W20tx5qbbebK436rWVqa3z9tdoNl/6fGzv3Ztv1Xdb87v7B3e3mnvbrbsbJ16BDQAAAIzQw5988/dJRBx+YboYctfKZdWIyomVK2NIEBia9P2s/Kfh5QGM3sSx6ekx5gGMniY9XF3VcScAjN15L/RoP7zTo7Xwm+HkAwAADN7Nj/e////22lhTA4asvP+feKEnXD0TF1lpcvh5AKPXvv/3XtY27myAUaqe1QLQKYBLL73w/f8eju7/n/MoYeKEAgAAYzZTDElaK/sBM5GmtVrEQ8VrAarJ2kajfjsiPhQRv5utTublhWLLRGseAAAAAAAAAAAAAAAAAAAAAAAAAC4oy5LIAAAAgEstIv1L581cN2efmOm+PnAt+ddsMY6IV3704g/vLbdaOwv5/L//d37rjXL+0+O4ggEAAAB06/TTO/14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiIqfbowf1XVx5kyUo+HmX4v305IuYipuMoj/ZUpUxtKqoRcf0fSVSObZdExMQA4h++HhEfK+tfDp0Ic0Vq7SxOxL8WkRYZDij+ZES8n/jRjn9jAPHhKnszP/98qdfnP43HinHvz19lQJ//zvmvV/zO+W+iz/nvoX47rZ4sPvLWz+f7xn894pFK7/NfJ36S769H/McvWMdvfv3goN+y7CcRN6NH/ORkrPnpiOt5YWNreb2+Xt9eXFx4ZunZpTtLt+fXNhr18t+eMb73iV+8d1R691T9r/eKX55/i/r3Of5PnFHnyWPT77517/5H2pNdP5moxo+z7NbjvX/+hc+cjt/5v+/T5Vp5OT+G6Rvf6JnLoz/77aP98szrv9qn/lPn1P/WGfU/7skXvvPHC64KAIzA7v7B5nKjUd8xMeaJpGzx/j/7Ka6IpBHDzzk9+hUa36FLIsmjT8aJRctxeuVfDvFXvXPp6tSi18oFy43OofofQkz32POvk+Ef+VGdgAAAgJE5avR3Lzm6AeM+MwAAAAAAAAAAAAAAAAAAAAzXuV8D1rgWPb9PLo2IC36dWHfMw/FUFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgTP8JAAD//10rt7Y=") sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a7c000000060a010400000000000000000a0000010900010073797a3100000000d0000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003b08000240000000021800018008000100647570000c000280080001400000000d0900020073797a3200000000140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10, 0x13}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x6, 0x4, 0x8000, 0xc}}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfffa}, @NL80211_ATTR_SCAN_SSIDS={0x50, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xd, 0x0, @random="6df2ef2f4cdb9c54e5"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x5}, {0x8}, {0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x80000000}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0xfffffffd}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x43}, 0x8890) 1.196194661s ago: executing program 0 (id=103): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x4, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/155) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000440)={@null, 0xe, 'veth0_to_hsr\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xd, 0x0, &(0x7f0000000500)="11223344556677889900aabbcc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r8, 0x0, 0x0}, 0x20) 1.130296673s ago: executing program 4 (id=105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="1700", 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='res', 0x3) socket$inet6(0xa, 0x7, 0x100) 1.073483174s ago: executing program 3 (id=106): getpid() (async) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001000000080001002d000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000001d00000429bd7000ffdbdf2510000a0025bd700029bd70007d00000010000a002dbd70002abd700000040008001800051bc1a10300000050001100ff010000000000000000000000000001e0000002000000000000000000000000ac1e0101000000000000000000000000fc0100000000dfffffff0000000000012b070000000000000a000200080024000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x8090) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r4, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) tkill(r9, 0x7) (async) tkill(r9, 0x7) wait4(r9, 0x0, 0x0, 0x0) capget(&(0x7f0000000000)={0x20071026, r9}, &(0x7f0000000040)={0x4, 0xe, 0x1, 0x1, 0x8, 0x3}) (async) capget(&(0x7f0000000000)={0x20071026, r9}, &(0x7f0000000040)={0x4, 0xe, 0x1, 0x1, 0x8, 0x3}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="500051804c0000800500020005000000090001004f23b93436063020ef000000130004008f9c97606876743f0107cf50fb217c0009000100ab40c43d1c000000090001002a886fa317000000040006000400060019003400cde6a37c987aac6a3ead48604d971afe9a0cca0dd100000004000101bdc1090f443e726bdc806f101b64b31d4e1876cffc6c6362c426e9df0d2c643ddc652df8cae8022fc7698272d938556d99bad95327fdca49e6e4e3dc0f61f0a58d377479c38bdc9517633f83a9a83ae064e8a89deb8fde8c"], 0x8c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc001022}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf253100000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f30000002c00000008000100460000000c009900070000004e00000008005200", @ANYRES32=r0, @ANYBLOB="4abb866425f86e7472b880a68d73a7f61279414b2a977986d683a1da16093cbe68c43c419b1b250916c49bba21e3c5bc7cb1681dd064bc6e821c23016c8e97482bf47a4d7f5771410656cdf129cd3532b5af57b1f617811de20752114577e6b3a7b3d9886c6c0e22ed4493e3b348fa399d808b740daa8021c9c61087670adb195e05a34fab4645d257e2687c5319633ff46a6f345c9de3599059502b8181cfa7b73f2f3b2e41158f6804abb51dd21ea072ce52411922a05617faaf0e89aa39d4ef154105658a705600cae3634264a94896ec4601324e301ae58add62b99ed1debc0000000001000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200080d4}, 0x24048040) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc001022}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf253100000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f30000002c00000008000100460000000c009900070000004e00000008005200", @ANYRES32=r0, @ANYBLOB="4abb866425f86e7472b880a68d73a7f61279414b2a977986d683a1da16093cbe68c43c419b1b250916c49bba21e3c5bc7cb1681dd064bc6e821c23016c8e97482bf47a4d7f5771410656cdf129cd3532b5af57b1f617811de20752114577e6b3a7b3d9886c6c0e22ed4493e3b348fa399d808b740daa8021c9c61087670adb195e05a34fab4645d257e2687c5319633ff46a6f345c9de3599059502b8181cfa7b73f2f3b2e41158f6804abb51dd21ea072ce52411922a05617faaf0e89aa39d4ef154105658a705600cae3634264a94896ec4601324e301ae58add62b99ed1debc0000000001000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200080d4}, 0x24048040) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.018690155s ago: executing program 0 (id=109): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001d0000000000000000000071120d00000000009500000000000000ea84151325f3588b01f573d4b6456a3c80f774c1df50255991b3b8bb061523442a47b0706c90a203e448d6fd44da642309d8cdff588d1d8ea838e93e3c45e1a16453ecfde83630785e0a49b3d6424482bbf78450433c25ab631d4c7979be167c2385acdf8964a51dc53d618c3ef667b1dd61592d3d26cb81a8869a0449a48ab5f8bf4679ad3fda1fc34ddcb2efe2a78ad395b2e4e35f41"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='configfs\x00', 0xa145cf, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000000, 0x50, 0xffffffffffffffff, 0x18a40000) fsetxattr$security_capability(r3, &(0x7f0000000200), &(0x7f0000000240)=@v3={0x3000000, [{0xfffffffd, 0x4}, {0x7, 0x3}]}, 0x18, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) getpeername$netlink(r6, 0x0, &(0x7f0000000280)) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) mmap$qrtrtun(&(0x7f0000141000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r2, 0x2) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000100)=[{{0x3}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}], 0x10) close(r8) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf2502000000060006000000000014000c00fc0100000000000000000000000000010c000300000000000000000008000100", @ANYRES32=r7, @ANYBLOB="8000000000000000000000000000000008004c063c606d13a3fa0300040000000000000000000000001efaefb470aeb8bd2dd371cb006808cd1b134ad2f42b19"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011) 905.916828ms ago: executing program 3 (id=111): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x28, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xfc, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x3683, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2d, 0x2, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "000000000000080019000000000000000200"}, 0x80, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(r2, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x1, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r3, 0x5409, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x80000001}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000004c0035006772653000"/56], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x3, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@arp={@empty, @private=0xa010100, 0xff, 0xffffff00, 0xd, 0xd, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0xc726, 0x6, 0xfffb, 0x1, 'vlan0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="8d0a96a10857", @multicast1, @multicast2, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x9, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x6, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 905.488668ms ago: executing program 0 (id=112): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x48) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, "a4"}, 0x9) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000080)) (async) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 808.956161ms ago: executing program 3 (id=114): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x5fae, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x2000000) 760.143192ms ago: executing program 0 (id=115): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000940)={[{@resgid}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0xa, 0x621, &(0x7f0000000200)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4401000010000100fcffffbf00010000fe880000000000000000000000000001ac1414aa00eb06fe40890e33ebb91c00000000000000004e2300050000a0003a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x3}, @loopback, @private=0xa010105}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x695f}}, 0x5, 0x9, 0x9, 0xa, 0x8c, 0x9, 0x2}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001140)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x40001}, 0x1) write$tun(r3, &(0x7f0000000500)=ANY=[], 0x20) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001200010000000000fddbdf250200000c08000000", @ANYRES32=0x0, @ANYBLOB="0c00e88008003c"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r8, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 759.570862ms ago: executing program 4 (id=116): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x4, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/155) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000440)={@null, 0xe, 'veth0_to_hsr\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xd, 0x0, &(0x7f0000000500)="11223344556677889900aabbcc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r8, 0x0, 0x0}, 0x20) 645.103105ms ago: executing program 4 (id=117): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') accept4$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000a00)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x6}}, 0x24, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) fcntl$notify(r2, 0x402, 0x0) 628.917325ms ago: executing program 4 (id=118): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000940)={[{@resgid}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0xa, 0x621, &(0x7f0000000200)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4401000010000100fcffffbf00010000fe880000000000000000000000000001ac1414aa00eb06fe40890e33ebb91c00000000000000004e2300050000a0003a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x3}, @loopback, @private=0xa010105}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x695f}}, 0x5, 0x9, 0x9, 0xa, 0x8c, 0x9, 0x2}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001140)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x40001}, 0x1) write$tun(r3, &(0x7f0000000500)=ANY=[], 0x20) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001200010000000000fddbdf250200000c08000000", @ANYRES32=0x0, @ANYBLOB="0c00e88008003c"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r8, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 561.161767ms ago: executing program 1 (id=119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xf, 0x0, 0x0, 0x41000, 0x4d}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 552.425137ms ago: executing program 0 (id=120): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xd, 0x3ac}, 0x0, 0x2, 0x3f, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="d5", 0x1}, {0x0}], 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040}, 0x4040000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xd, 0x3ac}, 0x0, 0x2, 0x3f, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) socket(0x10, 0x803, 0x0) (async) pipe2(&(0x7f0000000100), 0x0) (async) socket(0x1, 0x803, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') (async) writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="d5", 0x1}, {0x0}], 0x2) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040}, 0x4040000) (async) 472.131039ms ago: executing program 1 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) geteuid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003340)) syz_clone(0x828b2200, &(0x7f0000003440)="fd8c1e2c1e1a70502c360bc7fd50a87f64cc9bfa0ba134e4949cacac418991499e57bae981542a5f36c649a9fc83b898fff5a39921990c9ba0a4be0144d26c071632bbb9c53031c693ccecbc2c7f396ee0bca1202d65bcc40792b798ef942fb2ee190367a6183715a8d78b17f6985746f4d8b814567ef625b0e75471ab85a02d918946e01e45765d", 0x88, &(0x7f0000003500), &(0x7f0000003540), &(0x7f0000003580)="d0f5b419db399c8a681685706c70ade4b86284a7378ca63cf9babca2622ce6a41e8793f6214b5f4036a52432aec39748d64f43c92f6c2605d03dd2412a490c169d11d6cf5ce74fc6555cefd3a9fcb7345c254814427e3d768cca7c33aafb1e3bd4710ae596d1dd961470152e6640ae3b7be81e66c5443886495b8f5ae12ecca2e857536796b8a4c6c28d83fb456946ab47469ce82086") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003640)) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000003840)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000003880), 0x288180, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000003900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './trace\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000003940)='./trace\x00', &(0x7f0000003980), 0x2000) statx(0xffffffffffffff9c, &(0x7f0000003a00)='./trace\x00', 0x800, 0x400, &(0x7f0000003a40)) socket$rds(0x15, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x0, 0x10) fcntl$notify(r2, 0x402, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r2, 0x402, 0x0) 470.555769ms ago: executing program 4 (id=122): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9b, 0x40}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000001240)={[{@map_off}, {@session={'session', 0x3d, 0x5f}}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@hide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@session={'session', 0x3d, 0x1c}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@gid}]}, 0x0, 0x69d, &(0x7f00000005c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) prctl$PR_SET_VMA(0x4f, 0x15, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x5fae, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) 400.678521ms ago: executing program 1 (id=123): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGp3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRZF723sf+nBv97K7s/2R7iYp3WRD9vOBkzlzZibfc3aY2T0zh5kA+tb5iPhSRDyv1WqXImI4K0+zFJvNVF/v6ZMHM/WURK12670kImmW1Vcbe+V/nsw2OxYRP/huxI+TN+NW1jcWp0ul4mo2X6gurRQq6xuXF5am54vzxeXJyYlrU9enrk6Nd6WdQxFx49v/+dXP//CdG3/5yr1/3v7f2E+SrDziZTu6rdn0XOOzaBmMiNW9CNYDA1l7cq2CNvsaAICDo/U7/wsRcSmGY6Dxaw4AAAA4TGpfH4qPkogaAAAAcGiljTGwSZrPxgEMRZrm880xvJ+JE2mpXKl+ea68tjzbHCs7Erl0bqFUHM/GCo9ELqnPTzTyL+evbJmfjIjTEfHL4eON+fxMuTTb64sfAAAA0CdObun/fzjc7P8DAAAAh8xIrysAAAAA7Dn9fwAAADj89P8BAADgUPvezZv1VGu9/3r27vraYvnu5dliZTG/tDaTnymvruTny+X5xjP7lnb6f6VyeeWrsbx2v1AtVqqFyvrG7aXy2nL19sJrr8AGAAAA9tHpzz/6RxIRm1873kh1R3pdKWBfDL7Nyv/eu3oA+2+g1xUAeuatvv+BQyXX6woAPZdExO+2Wd5x8M5f96Y+AABA941+tv39/3THawOb6T5VEdgjrv9B/3L/H/qX+//Qv3IxEDry0N+SHZa/+/3/Wu2tKgQAAHTdUCMlaT675z8UaZrPR5xqvBYgl8wtlIrjEfGpiPj7cO5ofX6isWWyY58BAAAAAAAAAAAAAAAAAAAAAAAAAGiq1ZKoAQAAAIdaRPrfJHv/1+jwxaGt1weOJM+GG9OIuPfbW7++P12trk7Uy99/UV79TVZ+pRdXMAAAAICtWv30Vj8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrp6ZMHM620n3H//82IGGkXfzCONabHIhcRJz5IYvCV7ZKIGOhC/M2HEfGtH7WJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+0O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffynQsf4DyPODrY//7TiJx3Ofxd2Gf/ODzc2Oi2r/T5itO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+MXn/vx8u/af6BB/ZIf2X9xl+z9+fP/Jp5vZXLv4Yxfa7/8zHeKn2f7/YpavLx9t5Teb+Ved++Pfzm3X/tkO7d9p/4/tsv2Xvv+zf+1yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx6Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99EgAA///hBdEh") mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xffffffffffffff7f, 0x5) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, 0x0, 0x20040800) set_mempolicy(0x3, 0x0, 0x4) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x84, &(0x7f0000000380)=ANY=[], 0x1, 0x65c, &(0x7f0000002280)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x9}, 0xf) socket$inet6(0xa, 0x2, 0x0) 400.363641ms ago: executing program 0 (id=124): syz_usbip_server_init(0xa) 334.358762ms ago: executing program 1 (id=125): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x28, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xfc, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x3683, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2d, 0x2, 0x0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "000000000000080019000000000000000200"}, 0x80, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(r2, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x1, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r3, 0x5409, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x80000001}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000004c0035006772653000"/56], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x3, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000300)={{0x7fffffff, 0x2}, {0x9, 0x7f}, 0x1, 0x1}) 175.630476ms ago: executing program 1 (id=126): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/220, 0xdc, 0x4009) socket$inet6(0xa, 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x40400c4) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000880)={r0, &(0x7f0000000780)='/dev/ptmx\x00', 0x2000, &(0x7f00000007c0)={@_ha_fsid={[0x7, 0x4]}, {0x80, 0xd, 0x1, 0x7}}, 0xfffff9c8, &(0x7f0000000800), &(0x7f0000000840)=0x3}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@cgroup=r2, r0, 0x8, 0x4, 0x0, @void, @value=r0, @void, @void, r1}, 0x20) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @dev}}}], 0x20}, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r5, @ANYBLOB="000227bd7000fbdbdf25230000000c0001800800030001000000d00002803000038020000180040003000c000200706167656d61700004000300080001000e0000000c0001800500020000000093000500869eb6328418b9d147f701821161759b4d1c11ad1b8f5c8b147e67b78f274e0aba017ec58572989db73e904a1390bc63fff87d7d060000009af66993f9d3d02560d7bf49d68a337479f24312b4b95f244778ae248dc70ee8c7af299860b4fccf2b479b44fa83e8dc73d1ad3511636a563d8c4aae0fb7f2734d8267a343935531223f55b4e3c20f463b7a3ba84ca71700"/234], 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x4841) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000040)='}()*$\x00', &(0x7f00000001c0)='pagemap\x00']}, &(0x7f00000003c0)={[&(0x7f0000000240)=')\x00', &(0x7f0000000280)='^{@9\'#,/\x00', &(0x7f00000002c0)='[\x00', &(0x7f0000000300)='pagemap\x00', &(0x7f0000000340)='/dev/ptmx\x00', &(0x7f0000000380)='\x00']}, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r6, 0x2, 0x3) r7 = socket(0x28, 0x801, 0x0) shutdown(r7, 0x2) 135.459227ms ago: executing program 2 (id=127): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4009) socket$inet6(0xa, 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c07e8fe55a1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e71c3dd6b927bb777ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca", 0x98}], 0x1}, 0x40400c4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = dup(r2) lseek(0xffffffffffffffff, 0x2, 0x3) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x101, 0x80, 0x0, 0x11, "0098ba7d82070071ec25f2f7920800ffff6304"}) syz_open_pts(r2, 0x80) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r4) read(r2, &(0x7f00000003c0)=""/227, 0xe3) 132.015327ms ago: executing program 2 (id=128): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x4, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/155) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000440)={@null, 0xe, 'veth0_to_hsr\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xd, 0x0, &(0x7f0000000500)="11223344556677889900aabbcc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r8, 0x0, 0x0}, 0x20) 20.174639ms ago: executing program 1 (id=129): io_setup(0x4, &(0x7f0000000540)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/14, 0xe}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000002010400000000000000000a0000003c0003800c00028005000100000000002c00018014000300fe80000000000000000000f3ffffffba14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001000000000004000180"], 0x90}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, 0xfffffffffffffffc) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7, r3, &(0x7f0000000080)="2a553369aaf88956854f69a5b8d87e770a5a4bb9b0ea1519b663340f51dbaa75bbae6cb9a848d714d433b05ff9ab371fbc5f2282f065165f17a2daa839c3fe20ec72a76646d00d5cbd939cf6a6a80d0afcbd3a7efeec6810aa3c4a76a4ed416efd341a9a4d3a786cf45e2e766d78b767d9544db84dbf042d2dcb3a8720cd19a86e86379af50dd3bdf197b437ef9142087d8f99850e74ecabaad0b88f07a7655b3c745fb28c2511501593e7c2883d22e5f5d434ca3e0e83af35b0d2483d49dadc03535b2ade53d097202c78816c316e00326fe341f3e68e9c904764ec2fc1862d28496ab19b4a5cf1de638bcb29", 0xed}, &(0x7f00000001c0)) r4 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x4}, 0x4) 19.72641ms ago: executing program 2 (id=130): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xffffffffffffff7f, 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x4) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x84, &(0x7f0000000380)=ANY=[], 0x1, 0x65c, &(0x7f0000002280)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) socket$inet6(0xa, 0x2, 0x0) 6.67717ms ago: executing program 2 (id=131): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000940)={[{@resgid}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0xa, 0x621, &(0x7f0000000200)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4401000010000100fcffffbf00010000fe880000000000000000000000000001ac1414aa00eb06fe40890e33ebb91c00000000000000004e2300050000a0003a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x3}, @loopback, @private=0xa010105}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x695f}}, 0x5, 0x9, 0x9, 0xa, 0x8c, 0x9, 0x2}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001140)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="10070000010503000000000000000000050000015402010001000000010000000400ff070500140073797a3000000000000000000000000000000000000000000000000000000000b6a3cb4b34c485a48b8acc560a24c3fb4c851bd152cd1bb8ea0279da321849757821682ce641960c2a887ab86675df1fda62e55fa0469a76ad7b1e3ee724eff00400c50f01000000000000000600020002000000030000000800030002000000010000000827010006000000030000000100010400000000810000000600ff7f0100000009000000008003000300000002000000ff03fdff010000000600000001feff7f01000000f9fffffff1ff090003000000e85e0000060008000000000000000100ff01e60101000000a20a0000050080000100000003000000ff07fdff03000000060000000500ffff0200000005000000020004000000000000080000ff070008000000000300000002005b0001000000030000000100ff03000000000080ffff08000300020000000008000005004d0003000000000100005cff04000200000076880000b402ff0303000000b00900000d000f0002000000b5000000ff0101fe02000000030000000900090000000000010000000f000000000000000500000001fe000001000000000100007bb7350000000000030000000800c9000300000001000000060005000300000002000000ce00000001000000060000000400e50003000000fb000000000005000100000009000000520c01000300000001000000b700800400000000800000000200d22b030000000700000021000200020000000000000006006691030000005d5f00000000040000000000020800005402010000000000000800000709008000000b0073797a3100000000000000000000000000000000000000000000000000000000ebc7d1b3919eeaf17b0c629801956ef64d3cdc5e48208fc99b6a14c78571e9864802c69a36a6c6d7fcc9272b23d8484e53af0b8c98a7f52faa51d301f3fafab30500ff0f000000006bfdffff0900ff0f0200000097e500000300df3b00000000fdffffff0300090001000000050000000104060001000000030000000900933e0100000004000000000206000200000063570000030000080300000001000000f3ff030003000000010000000004610002000000001000000600090000000000300900000300030000000000000000000700090002000000060000000b001000030000000800000004000e0002000000000000008000040002000000030000005a8cff7f02000000f4fdffffdf07070003000000fdffffff0010000001000000040000000700040003000000810000000200faff000000000200000003000400010000000700000007000020030000000000010006002101020000000300000001000000000000000600000006000300030000000800000005000000020000000c0000000600030003000000090000004000090001000000800000000600fdff02000000000200000800000000000000060000000100f10000000000a8000000060009000000000000000000ff07bbe8030000000500000002000700020000000600000005000600010000000200000006000700030000000600000000000600020000002c0b000006000800000000001000000062ba000002000000ff000000540201000100000009000000066605000700060073797a3000000000000000000000000000000000000000000000000000000000e9701211ce8a8eaee479d51c1d0b2f9f02b7946e3cafbac1e41e1c51b070c5ef20f7deb22f79e413a4453d57a1a548b136d82014b70237b3b22dd95e0f19522a4000020002000000faffffff0500d60f000000007f0000000002000001000000080000000180ff0f01000000010000000100020001000000befdffff040b950001000000040000000010070002000000b40000000400000003000000050000000e00030002000000030000000500010000000000ffff0000060005000300000002000000ffff4c230300000002000000020009000200000001000000000005000100000002000000090003d10100000053b9000081002100030000000200000008000200030000003a20000031000a0003000000060000000900050002000000e93c00003d0f7fff020000000500000001800d0001000000030000000180ff0f01000000080000000400ff7f01000000060000000800000001000000090000000f004002020000001fc0907f0600050000000000030000000600000000000000b305ffff030001000300000001000000e302000002000000070000000800010003000000240000000600050001000000060000000104e7f201000000060000000e000004020000000a0000000600060000000000ffff00000700060003000000ff0f0000ff00301f02000000020000000300040001000000000000a006006d00020000001e0000000d00c80a01000000070000003d0005000000000002000000"], 0x710}, 0x1, 0x0, 0x0, 0x40001}, 0x1) write$tun(r3, &(0x7f0000000500)=ANY=[], 0x20) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001200010000000000fddbdf250200000c08000000", @ANYRES32=0x0, @ANYBLOB="0c00e88008003c"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r8, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 3 (id=132): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 31.808170][ T29] audit: type=1400 audit(1791286677.564:117): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.808409][ T29] audit: type=1400 audit(1791286677.564:118): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.808871][ T3288] cgroup: Unknown subsys name 'net' [ 31.809085][ T29] audit: type=1400 audit(1791286677.564:119): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.928425][ T3288] cgroup: Unknown subsys name 'cpuset' [ 31.928965][ T3288] cgroup: Unknown subsys name 'rlimit' [ 32.053392][ T29] audit: type=1400 audit(1791286677.804:120): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.054225][ T29] audit: type=1400 audit(1791286677.804:121): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.054324][ T29] audit: type=1400 audit(1791286677.804:122): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.054519][ T29] audit: type=1400 audit(1791286677.804:123): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.068228][ T29] audit: type=1400 audit(1791286677.814:124): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.081694][ T29] audit: type=1400 audit(1791286677.844:125): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.081874][ T29] audit: type=1400 audit(1791286677.844:126): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.139760][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.171509][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.428894][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.428928][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.428999][ T3298] bridge_slave_0: entered allmulticast mode [ 34.429409][ T3298] bridge_slave_0: entered promiscuous mode [ 34.461774][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.461854][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.461953][ T3299] bridge_slave_0: entered allmulticast mode [ 34.462378][ T3299] bridge_slave_0: entered promiscuous mode [ 34.465870][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.465906][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.465958][ T3298] bridge_slave_1: entered allmulticast mode [ 34.466464][ T3298] bridge_slave_1: entered promiscuous mode [ 34.489486][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.489518][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.489580][ T3299] bridge_slave_1: entered allmulticast mode [ 34.490084][ T3299] bridge_slave_1: entered promiscuous mode [ 34.526295][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.526478][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.526512][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.526639][ T3306] bridge_slave_0: entered allmulticast mode [ 34.527136][ T3306] bridge_slave_0: entered promiscuous mode [ 34.536231][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.536263][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.536394][ T3303] bridge_slave_0: entered allmulticast mode [ 34.536891][ T3303] bridge_slave_0: entered promiscuous mode [ 34.538008][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.538037][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.538100][ T3306] bridge_slave_1: entered allmulticast mode [ 34.538562][ T3306] bridge_slave_1: entered promiscuous mode [ 34.545615][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.553794][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.553825][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.553956][ T3303] bridge_slave_1: entered allmulticast mode [ 34.554360][ T3303] bridge_slave_1: entered promiscuous mode [ 34.556086][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.557397][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.568803][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.586086][ T3298] team0: Port device team_slave_0 added [ 34.586879][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.612678][ T3298] team0: Port device team_slave_1 added [ 34.613345][ T3299] team0: Port device team_slave_0 added [ 34.614253][ T3299] team0: Port device team_slave_1 added [ 34.620617][ T3306] team0: Port device team_slave_0 added [ 34.636196][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.637388][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.638124][ T3306] team0: Port device team_slave_1 added [ 34.643234][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.643264][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.643314][ T3305] bridge_slave_0: entered allmulticast mode [ 34.643912][ T3305] bridge_slave_0: entered promiscuous mode [ 34.644809][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.644906][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.644957][ T3305] bridge_slave_1: entered allmulticast mode [ 34.645397][ T3305] bridge_slave_1: entered promiscuous mode [ 34.651752][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.651765][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.651843][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.667226][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.667240][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.667268][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.673845][ T3303] team0: Port device team_slave_0 added [ 34.679585][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.679598][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.679625][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.679940][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.679951][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.679978][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.683968][ T3303] team0: Port device team_slave_1 added [ 34.691205][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.691218][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.691245][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.694609][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.694622][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.694692][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.695762][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.697200][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.719478][ T3299] hsr_slave_0: entered promiscuous mode [ 34.719868][ T3299] hsr_slave_1: entered promiscuous mode [ 34.726683][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.726694][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.726763][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.746878][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.746892][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.746920][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.754446][ T3298] hsr_slave_0: entered promiscuous mode [ 34.755166][ T3298] hsr_slave_1: entered promiscuous mode [ 34.755388][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 34.755429][ T3298] Cannot create hsr debugfs directory [ 34.756217][ T3305] team0: Port device team_slave_0 added [ 34.766881][ T3306] hsr_slave_0: entered promiscuous mode [ 34.767295][ T3306] hsr_slave_1: entered promiscuous mode [ 34.767654][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.767666][ T3306] Cannot create hsr debugfs directory [ 34.769097][ T3305] team0: Port device team_slave_1 added [ 34.823463][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.823477][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.823505][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.825993][ T3303] hsr_slave_0: entered promiscuous mode [ 34.826414][ T3303] hsr_slave_1: entered promiscuous mode [ 34.826583][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.826595][ T3303] Cannot create hsr debugfs directory [ 34.826994][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.827005][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.827031][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.888756][ T3305] hsr_slave_0: entered promiscuous mode [ 34.889103][ T3305] hsr_slave_1: entered promiscuous mode [ 34.889325][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.889339][ T3305] Cannot create hsr debugfs directory [ 35.070382][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.078806][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.097906][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.108261][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.108817][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.113443][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.137665][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.152126][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.167813][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.196498][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.205007][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.212227][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.212704][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.218146][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.227031][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.227062][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.227200][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.227230][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.228747][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.234634][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.247877][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.251402][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.261055][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.270183][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.278841][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.278868][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.278988][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.279017][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.280434][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.295413][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.296133][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.305862][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.314363][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.322628][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.340767][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.362029][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.370570][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.376208][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.393101][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.427691][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.554509][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.561574][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.572146][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.575794][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.582598][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.590030][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.595774][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.601719][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.603924][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.614318][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.618463][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.707647][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.709452][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.715770][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.721846][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.721878][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.726958][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.737273][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.737307][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.754979][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.765332][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.765366][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.779978][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.780057][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.812539][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.850960][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.859407][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.859442][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.862536][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.864923][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.864955][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.883549][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.901617][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.901650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.925872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.925903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.933297][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.947191][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.961000][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.961036][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.978111][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.978153][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.980848][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.980878][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.123948][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.160124][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.244093][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.264219][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.266513][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.305013][ T3298] veth0_vlan: entered promiscuous mode [ 36.318235][ T3298] veth1_vlan: entered promiscuous mode [ 36.339150][ T3298] veth0_macvtap: entered promiscuous mode [ 36.340843][ T3298] veth1_macvtap: entered promiscuous mode [ 36.346129][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.358116][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.410852][ T313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.411289][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.429116][ T3305] veth0_vlan: entered promiscuous mode [ 36.431513][ T3305] veth1_vlan: entered promiscuous mode [ 36.435235][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.435273][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.444499][ T3305] veth0_macvtap: entered promiscuous mode [ 36.446133][ T3305] veth1_macvtap: entered promiscuous mode [ 36.467191][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.476670][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.516111][ T3298] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.538201][ T3480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.538282][ T3480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.538442][ T3480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.538624][ T3480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.547824][ T3306] veth0_vlan: entered promiscuous mode [ 36.564294][ T3306] veth1_vlan: entered promiscuous mode [ 36.573375][ T3299] veth0_vlan: entered promiscuous mode [ 36.579715][ T3299] veth1_vlan: entered promiscuous mode [ 36.604816][ T3306] veth0_macvtap: entered promiscuous mode [ 36.612185][ T3306] veth1_macvtap: entered promiscuous mode [ 36.624172][ T3299] veth0_macvtap: entered promiscuous mode [ 36.629487][ T3299] veth1_macvtap: entered promiscuous mode [ 36.647450][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.650670][ T43] IPVS: starting estimator thread 0... [ 36.653749][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.655409][ T3303] veth0_vlan: entered promiscuous mode [ 36.656901][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.664594][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.667115][ T3303] veth1_vlan: entered promiscuous mode [ 36.700544][ T3303] veth0_macvtap: entered promiscuous mode [ 36.702077][ T3303] veth1_macvtap: entered promiscuous mode [ 36.703555][ T3506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.735969][ T3510] netlink: 656 bytes leftover after parsing attributes in process `syz.2.3'. [ 36.760964][ T3508] IPVS: using max 2352 ests per chain, 117600 per kthread [ 36.779987][ T3506] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 36.780006][ T3506] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 36.803418][ T3506] syz.3.4 (3506) used greatest stack depth: 10888 bytes left [ 36.807714][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.811304][ T3480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.812350][ T3480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.812604][ T3480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.813172][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.813340][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.813568][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.813658][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.813816][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.846929][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 36.846945][ T29] audit: type=1400 audit(1791286682.594:160): avc: denied { node_bind } for pid=3512 comm="syz.3.6" saddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.854767][ T29] audit: type=1400 audit(1791286682.604:161): avc: denied { name_bind } for pid=3512 comm="syz.3.6" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.862196][ T29] audit: type=1400 audit(1791286682.614:162): avc: denied { create } for pid=3512 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 36.863508][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.869208][ T29] audit: type=1400 audit(1791286682.614:163): avc: denied { create } for pid=3509 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.881673][ T29] audit: type=1400 audit(1791286682.634:164): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.886843][ T29] audit: type=1400 audit(1791286682.644:165): avc: denied { read write } for pid=3512 comm="syz.3.6" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.886873][ T29] audit: type=1400 audit(1791286682.644:166): avc: denied { open } for pid=3512 comm="syz.3.6" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.887105][ T3513] loop3: detected capacity change from 0 to 512 [ 36.889959][ T29] audit: type=1400 audit(1791286682.644:167): avc: denied { ioctl } for pid=3512 comm="syz.3.6" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.904982][ T3513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.905025][ T3513] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.907128][ T3513] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c0a8, mo2=0002] [ 36.907321][ T3513] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.909170][ T3513] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.6: Allocating blocks 42-43 which overlap fs metadata [ 36.909281][ T3513] loop3: lost filesystem error report for type 5 error -117 [ 36.909429][ T3513] EXT4-fs (loop3): Remounting filesystem read-only [ 36.909454][ T3513] Quota error (device loop3): write_blk: dquota write failed [ 36.909478][ T3513] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 36.909608][ T3513] EXT4-fs (loop3): 1 truncate cleaned up [ 36.920503][ T3513] EXT4-fs (loop3): pa ffff888105cd5a10: logic 1, phys. 41, len 23 [ 36.921072][ T3513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.009521][ T3513] syz.3.6 (3513) used greatest stack depth: 10352 bytes left [ 37.018611][ T313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.018652][ T313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.018758][ T313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.018820][ T313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.035941][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.114691][ T3528] loop2: detected capacity change from 0 to 512 [ 37.141686][ T3528] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.141704][ T3528] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.142570][ T3528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c0a8, mo2=0002] [ 37.142683][ T3528] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.143363][ T3528] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.8: Allocating blocks 42-43 which overlap fs metadata [ 37.143391][ T3528] loop2: lost filesystem error report for type 5 error -117 [ 37.143533][ T3528] EXT4-fs (loop2): Remounting filesystem read-only [ 37.143601][ T3528] EXT4-fs (loop2): 1 truncate cleaned up [ 37.157825][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.157859][ C1] EXT4-fs (loop2): initial error at time 1791286682: ext4_mb_mark_diskspace_used:4223 [ 37.157890][ C1] EXT4-fs (loop2): last error at time 1791286682: ext4_mb_mark_diskspace_used:4223 [ 37.218719][ T3528] EXT4-fs (loop2): pa ffff888105cd5a10: logic 1, phys. 41, len 23 [ 37.219202][ T3528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.282362][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.384512][ T3541] loop2: detected capacity change from 0 to 512 [ 37.394308][ T3541] EXT4-fs: quotafile must be on filesystem root [ 37.617073][ T3555] process 'syz.2.15' launched './file1' with NULL argv: empty string added [ 37.617261][ T3540] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 37.637921][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 37.716046][ T3555] loop2: detected capacity change from 0 to 128 [ 37.729374][ T3555] FAT-fs (loop2): Directory bread(block 1048) failed [ 37.729396][ T3555] FAT-fs (loop2): Directory bread(block 1049) failed [ 37.729415][ T3555] FAT-fs (loop2): Directory bread(block 1050) failed [ 37.729434][ T3555] FAT-fs (loop2): Directory bread(block 1051) failed [ 37.729516][ T3555] FAT-fs (loop2): Directory bread(block 1052) failed [ 37.729579][ T3555] FAT-fs (loop2): Directory bread(block 1053) failed [ 37.729595][ T3555] FAT-fs (loop2): Directory bread(block 1054) failed [ 37.729686][ T3555] FAT-fs (loop2): Directory bread(block 1055) failed [ 37.864411][ T3560] FAULT_INJECTION: forcing a failure. [ 37.864411][ T3560] name failslab, interval 1, probability 0, space 0, times 0 [ 37.864469][ T3560] CPU: 1 UID: 0 PID: 3560 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.864546][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.864564][ T3560] Call Trace: [ 37.864570][ T3560] [ 37.864576][ T3560] __dump_stack+0x1d/0x30 [ 37.864599][ T3560] dump_stack_lvl+0x95/0xd0 [ 37.864623][ T3560] dump_stack+0x15/0x1b [ 37.864678][ T3560] should_fail_ex+0x262/0x280 [ 37.864707][ T3560] ? security_file_alloc+0x32/0xf0 [ 37.864731][ T3560] should_failslab+0x8c/0xb0 [ 37.864759][ T3560] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 37.864827][ T3560] ? security_file_alloc+0x32/0xf0 [ 37.864906][ T3560] security_file_alloc+0x32/0xf0 [ 37.864924][ T3560] init_file+0x5b/0x1b0 [ 37.864948][ T3560] alloc_empty_file+0x85/0x1e0 [ 37.864973][ T3560] alloc_file_pseudo+0x92/0x120 [ 37.865001][ T3560] sock_alloc_file+0x9c/0x1e0 [ 37.865057][ T3560] do_accept+0x1e3/0x390 [ 37.865086][ T3560] __sys_accept4+0xbe/0x170 [ 37.865108][ T3560] __x64_sys_accept4+0x51/0x60 [ 37.865130][ T3560] x64_sys_call+0x4f1/0x2550 [ 37.865154][ T3560] do_syscall_64+0x112/0x360 [ 37.865176][ T3560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.865324][ T3560] RIP: 0033:0x7f9fe926e199 [ 37.865346][ T3560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.865366][ T3560] RSP: 002b:00007f9fe7cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 37.865388][ T3560] RAX: ffffffffffffffda RBX: 00007f9fe94f5fa0 RCX: 00007f9fe926e199 [ 37.865404][ T3560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 37.865460][ T3560] RBP: 00007f9fe7cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.865472][ T3560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.865550][ T3560] R13: 00007f9fe94f6038 R14: 00007f9fe94f5fa0 R15: 00007ffe801cd118 [ 37.865570][ T3560] [ 37.885402][ T3566] pim6reg: entered allmulticast mode [ 37.895090][ T3566] ip6t_frag: unknown flags 4 [ 38.040119][ T3573] loop3: detected capacity change from 0 to 512 [ 38.054353][ T3573] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.21: corrupted in-inode xattr: invalid ea_ino [ 38.054384][ T3573] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.054578][ T3573] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.21: couldn't read orphan inode 15 (err -117) [ 38.054604][ T3573] loop3: lost filesystem error report for type 5 error -117 [ 38.055350][ T3573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.134578][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.168455][ T3575] loop2: detected capacity change from 0 to 512 [ 38.182717][ T3575] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.22: corrupted in-inode xattr: invalid ea_ino [ 38.182800][ T3575] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.182920][ T3575] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.22: couldn't read orphan inode 15 (err -117) [ 38.182944][ T3575] loop2: lost filesystem error report for type 5 error -117 [ 38.183462][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.245504][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.454009][ T3592] FAULT_INJECTION: forcing a failure. [ 38.454009][ T3592] name failslab, interval 1, probability 0, space 0, times 0 [ 38.454116][ T3592] CPU: 0 UID: 0 PID: 3592 Comm: syz.3.28 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.454143][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.454212][ T3592] Call Trace: [ 38.454217][ T3592] [ 38.454223][ T3592] __dump_stack+0x1d/0x30 [ 38.454250][ T3592] dump_stack_lvl+0x95/0xd0 [ 38.454273][ T3592] dump_stack+0x15/0x1b [ 38.454295][ T3592] should_fail_ex+0x262/0x280 [ 38.454369][ T3592] ? audit_log_start+0x34c/0x730 [ 38.454390][ T3592] should_failslab+0x8c/0xb0 [ 38.454451][ T3592] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 38.454493][ T3592] ? audit_log_start+0x34c/0x730 [ 38.454558][ T3592] ? __rcu_read_unlock+0x4e/0x70 [ 38.454591][ T3592] audit_log_start+0x34c/0x730 [ 38.454614][ T3592] audit_seccomp+0x49/0x110 [ 38.454638][ T3592] __seccomp_filter+0x909/0x1360 [ 38.454678][ T3592] ? __fget_files+0x184/0x1c0 [ 38.454772][ T3592] ? xfd_validate_state+0x45/0xf0 [ 38.454804][ T3592] __seccomp_permit_syscall+0x7d/0x150 [ 38.454835][ T3592] do_syscall_64+0xca/0x360 [ 38.454929][ T3592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.454954][ T3592] RIP: 0033:0x7fe533a8e199 [ 38.454971][ T3592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.454990][ T3592] RSP: 002b:00007fe5324e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 38.455063][ T3592] RAX: ffffffffffffffda RBX: 00007fe533d15fa0 RCX: 00007fe533a8e199 [ 38.455079][ T3592] RDX: 0000000060000526 RSI: 0000200000000240 RDI: 0000000000000004 [ 38.455094][ T3592] RBP: 00007fe5324e7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.455109][ T3592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.455122][ T3592] R13: 00007fe533d16038 R14: 00007fe533d15fa0 R15: 00007ffc289efc08 [ 38.455141][ T3592] [ 38.478557][ T3594] loop2: detected capacity change from 0 to 512 [ 38.492839][ T3594] EXT4-fs: Ignoring removed nobh option [ 38.503241][ T3594] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.503264][ T3594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.509793][ T3594] EXT4-fs (loop2): 1 truncate cleaned up [ 38.510246][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.736441][ T3600] loop3: detected capacity change from 0 to 164 [ 38.864700][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.927522][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927591][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927611][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927678][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927700][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927720][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927816][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927848][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927867][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.927890][ T3609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.988850][ T3611] loop3: detected capacity change from 0 to 512 [ 39.018953][ T3611] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.35: corrupted in-inode xattr: invalid ea_ino [ 39.019002][ T3611] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.019199][ T3611] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.35: couldn't read orphan inode 15 (err -117) [ 39.019221][ T3611] loop3: lost filesystem error report for type 5 error -117 [ 39.019787][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.188999][ T3615] loop4: detected capacity change from 0 to 256 [ 39.189493][ T3615] vfat: Unknown parameter '' [ 39.216921][ T3615] FAT-fs (loop4): codepage cp874 not found [ 39.351163][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.453633][ T3628] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 39.453650][ T3628] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 39.453982][ T3628] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 39.453995][ T3628] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 39.481794][ T3626] EXT4-fs: Ignoring removed oldalloc option [ 39.481914][ T3626] ext4: Unknown parameter 'fowner' [ 39.538704][ T3626] ======================================================= [ 39.538704][ T3626] WARNING: The mand mount option has been deprecated and [ 39.538704][ T3626] and is ignored by this kernel. Remove the mand [ 39.538704][ T3626] option from the mount to silence this warning. [ 39.538704][ T3626] ======================================================= [ 39.710518][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.710586][ T3649] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.825744][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.923947][ T3658] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=3658 comm=syz.4.53 [ 39.932106][ T3662] netlink: 252 bytes leftover after parsing attributes in process `syz.0.55'. [ 39.966361][ T3664] FAULT_INJECTION: forcing a failure. [ 39.966361][ T3664] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 39.966388][ T3664] CPU: 1 UID: 0 PID: 3664 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.966426][ T3664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 39.966438][ T3664] Call Trace: [ 39.966445][ T3664] [ 39.966451][ T3664] __dump_stack+0x1d/0x30 [ 39.966493][ T3664] dump_stack_lvl+0x95/0xd0 [ 39.966519][ T3664] dump_stack+0x15/0x1b [ 39.966542][ T3664] should_fail_ex+0x262/0x280 [ 39.966630][ T3664] should_fail_alloc_page+0xf2/0x100 [ 39.966752][ T3664] __alloc_frozen_pages_noprof+0x157/0x400 [ 39.966780][ T3664] alloc_pages_mpol+0xaf/0x1d0 [ 39.966809][ T3664] alloc_pages_noprof+0x94/0x140 [ 39.966895][ T3664] __pmd_alloc+0x47/0x430 [ 39.966917][ T3664] handle_mm_fault+0x2bba/0x3bb0 [ 39.966944][ T3664] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 39.967040][ T3664] do_user_addr_fault+0x404/0x1060 [ 39.967114][ T3664] ? __rcu_read_unlock+0x4e/0x70 [ 39.967177][ T3664] exc_page_fault+0x62/0xa0 [ 39.967318][ T3664] asm_exc_page_fault+0x26/0x30 [ 39.967341][ T3664] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 39.967377][ T3664] Code: c4 10 e9 84 23 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 23 02 00 66 2e [ 39.967432][ T3664] RSP: 0018:ffffc90001c07df0 EFLAGS: 00050202 [ 39.967450][ T3664] RAX: ffff8881046d3f08 RBX: 0000000000000004 RCX: 0000000000000004 [ 39.967465][ T3664] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90001c07e18 [ 39.967481][ T3664] RBP: 0000000000000005 R08: 00000000000004fd R09: 0000000000000000 [ 39.967523][ T3664] R10: 0001c90001c07e18 R11: 0001c90001c07e1b R12: 0000000000000004 [ 39.967539][ T3664] R13: 000000000000011b R14: ffffc90001c07e18 R15: 0000200000000100 [ 39.967560][ T3664] _copy_from_user+0x6f/0xb0 [ 39.967598][ T3664] xsk_setsockopt+0x233/0x640 [ 39.967674][ T3664] ? __pfx_xsk_setsockopt+0x10/0x10 [ 39.967697][ T3664] __sys_setsockopt+0x184/0x200 [ 39.967775][ T3664] __x64_sys_setsockopt+0x64/0x80 [ 39.967827][ T3664] x64_sys_call+0x248f/0x2550 [ 39.967855][ T3664] do_syscall_64+0x112/0x360 [ 39.967882][ T3664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.967969][ T3664] RIP: 0033:0x7fe533a8e199 [ 39.967982][ T3664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.967998][ T3664] RSP: 002b:00007fe5324e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 39.968016][ T3664] RAX: ffffffffffffffda RBX: 00007fe533d15fa0 RCX: 00007fe533a8e199 [ 39.968031][ T3664] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 39.968042][ T3664] RBP: 00007fe5324e7090 R08: 0000000000000004 R09: 0000000000000000 [ 39.968081][ T3664] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 39.968095][ T3664] R13: 00007fe533d16038 R14: 00007fe533d15fa0 R15: 00007ffc289efc08 [ 39.968116][ T3664] [ 40.062927][ T3667] EXT4-fs: Ignoring removed nobh option [ 40.063386][ T3667] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 40.142322][ T3669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.162593][ T3669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.166027][ T3669] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.503547][ T3705] mmap: syz.4.65 (3705) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.533500][ T3705] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 40.539647][ T3708] netlink: 236 bytes leftover after parsing attributes in process `syz.2.62'. [ 40.711505][ T3719] batman_adv: Routing algorithm 'B' is not supported [ 40.740369][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.740440][ T3719] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.789325][ T3719] ext4: Unknown parameter 'mpol' [ 40.877708][ T913] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0001/input/input5 [ 40.888118][ T913] hid-generic 0005:0009:0040.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 40.917073][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.932063][ T3303] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 40.932337][ T3303] EXT4-fs (loop4): Remounting filesystem read-only [ 40.934141][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.951354][ T313] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.951381][ T313] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.951467][ T313] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 41.047036][ T3731] fido_id[3731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.103558][ T3737] EXT4-fs: Ignoring removed nobh option [ 41.114076][ T3737] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 41.297226][ T3745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 41.406109][ T3746] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 41.544667][ T3755] random: crng reseeded on system resumption [ 41.645693][ T3757] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.84: corrupted in-inode xattr: invalid ea_ino [ 41.645722][ T3757] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.645874][ T3757] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.84: couldn't read orphan inode 15 (err -117) [ 41.645901][ T3757] loop0: lost filesystem error report for type 5 error -117 [ 41.646571][ T3757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.729581][ T3757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 41.853664][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.937371][ T3769] netlink: 76 bytes leftover after parsing attributes in process `syz.1.89'. [ 41.984682][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 41.984697][ T29] audit: type=1400 audit(1791286687.734:341): avc: denied { create } for pid=3773 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.987219][ T29] audit: type=1400 audit(1791286687.734:342): avc: denied { setopt } for pid=3773 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.987451][ T29] audit: type=1400 audit(1791286687.734:343): avc: denied { write } for pid=3773 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.014348][ T29] audit: type=1400 audit(1791286687.744:344): avc: denied { create } for pid=3766 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.067778][ T29] audit: type=1400 audit(1791286687.814:345): avc: denied { bind } for pid=3766 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.073750][ T3778] set_capacity_and_notify: 12 callbacks suppressed [ 42.073765][ T3778] loop4: detected capacity change from 0 to 512 [ 42.110618][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.110718][ T3778] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.287559][ T3767] loop0: detected capacity change from 0 to 512 [ 42.308445][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.353900][ T3767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.364394][ T29] audit: type=1400 audit(1791286688.114:346): avc: denied { create } for pid=3785 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.366082][ T29] audit: type=1400 audit(1791286688.114:347): avc: denied { getopt } for pid=3785 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.379653][ T3767] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.88: iget: bad i_size value: 38620345925642 [ 42.379772][ T3767] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.380483][ T3767] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.88: couldn't read orphan inode 15 (err -117) [ 42.380593][ T3767] loop0: lost filesystem error report for type 5 error -117 [ 42.393774][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.453430][ T3767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.520510][ T29] audit: type=1400 audit(1791286688.274:348): avc: denied { name_connect } for pid=3797 comm="syz.1.96" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.648813][ T29] audit: type=1400 audit(1791286688.394:349): avc: denied { read } for pid=3797 comm="syz.1.96" lport=49992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.861886][ T3805] loop3: detected capacity change from 0 to 512 [ 42.866143][ T3805] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.98: corrupted in-inode xattr: invalid ea_ino [ 42.866169][ T3805] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.866324][ T3805] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.98: couldn't read orphan inode 15 (err -117) [ 42.866360][ T3805] loop3: lost filesystem error report for type 5 error -117 [ 42.866967][ T3805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.931699][ T29] audit: type=1400 audit(1791286688.684:350): avc: denied { write } for pid=3804 comm="syz.3.98" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.984568][ T3805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 43.044616][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.227516][ T3812] loop3: detected capacity change from 0 to 512 [ 43.259735][ T3812] EXT4-fs: Ignoring removed bh option [ 43.260476][ T3812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.280676][ T3812] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.280766][ T3812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e054e01c, mo2=0002] [ 43.280945][ T3812] System zones: 0-1, 15-15, 18-18, 34-34 [ 43.281616][ T3812] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.286714][ T3812] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.286756][ T3812] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 43.288772][ T3812] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.100: bad orphan inode 16 [ 43.288828][ T3812] loop3: lost filesystem error report for type 5 error -117 [ 43.295107][ T3812] ext4_test_bit(bit=15, block=18) = 1 [ 43.295279][ T3812] is_bad_inode(inode)=0 [ 43.295297][ T3812] NEXT_ORPHAN(inode)=0 [ 43.295460][ T3812] max_ino=32 [ 43.295477][ T3812] i_nlink=2 [ 43.331822][ T3812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.374094][ T3812] netlink: 92 bytes leftover after parsing attributes in process `syz.3.100'. [ 43.422502][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.455076][ T3827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 43.486806][ T3827] capability: warning: `syz.3.106' uses deprecated v2 capabilities in a way that may be insecure [ 43.518270][ T3837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.109'. [ 43.518655][ T3837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.109'. [ 43.522227][ T3837] Zero length message leads to an empty skb [ 43.598491][ T3843] loop3: detected capacity change from 0 to 512 [ 43.602628][ T3843] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.111: corrupted in-inode xattr: invalid ea_ino [ 43.602658][ T3843] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.602820][ T3843] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.111: couldn't read orphan inode 15 (err -117) [ 43.602845][ T3843] loop3: lost filesystem error report for type 5 error -117 [ 43.603401][ T3843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.634552][ T3843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 43.700076][ T3823] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 43.732619][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.765927][ T3852] loop0: detected capacity change from 0 to 1024 [ 43.787889][ T3852] EXT4-fs: inline encryption not supported [ 43.792296][ T3852] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 43.792467][ T3852] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 43.792506][ T3852] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.793419][ T3852] EXT4-fs (loop0): invalid journal inode [ 43.793447][ T3852] EXT4-fs (loop0): can't get journal size [ 43.803972][ T3852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.852183][ T3852] netlink: 84 bytes leftover after parsing attributes in process `syz.0.115'. [ 43.907327][ T3863] loop4: detected capacity change from 0 to 1024 [ 43.909483][ T3863] EXT4-fs: inline encryption not supported [ 43.909768][ T3863] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 43.909879][ T3863] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 43.910005][ T3863] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.910699][ T3863] EXT4-fs (loop4): invalid journal inode [ 43.910723][ T3863] EXT4-fs (loop4): can't get journal size [ 43.911494][ T3863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.939940][ T3863] netlink: 84 bytes leftover after parsing attributes in process `syz.4.118'. [ 43.975013][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.058244][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.094520][ T3879] loop1: detected capacity change from 0 to 512 [ 44.095133][ T3881] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.115190][ T3879] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.117391][ T3879] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 44.117515][ T3879] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.118764][ T3879] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.123: Allocating blocks 42-43 which overlap fs metadata [ 44.118793][ T3879] loop1: lost filesystem error report for type 5 error -117 [ 44.118945][ T3879] EXT4-fs (loop1): Remounting filesystem read-only [ 44.119083][ T3879] EXT4-fs (loop1): 1 truncate cleaned up [ 44.137938][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 44.138008][ C1] EXT4-fs (loop1): initial error at time 1791286689: ext4_mb_mark_diskspace_used:4223 [ 44.138088][ C1] EXT4-fs (loop1): last error at time 1791286689: ext4_mb_mark_diskspace_used:4223 [ 44.156469][ T3879] EXT4-fs (loop1): pa ffff888105cd59a0: logic 1, phys. 41, len 23 [ 44.156916][ T3879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.192507][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.223663][ T3884] loop1: detected capacity change from 0 to 512 [ 44.231687][ T3884] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.125: corrupted in-inode xattr: invalid ea_ino [ 44.231718][ T3884] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.231839][ T3884] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.125: couldn't read orphan inode 15 (err -117) [ 44.231865][ T3884] loop1: lost filesystem error report for type 5 error -117 [ 44.232520][ T3884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.312802][ T3877] loop4: detected capacity change from 0 to 764 [ 44.351221][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.503140][ T2983] ================================================================== [ 44.503177][ T2983] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 44.503213][ T2983] [ 44.503219][ T2983] write to 0xffff88810070e9f0 of 8 bytes by task 3284 on cpu 0: [ 44.503233][ T2983] dentry_unlink_inode+0x65/0x260 [ 44.503265][ T2983] d_delete+0x164/0x180 [ 44.503294][ T2983] d_delete_notify+0x32/0x100 [ 44.503310][ T2983] vfs_unlink+0x287/0x490 [ 44.503340][ T2983] filename_unlinkat+0x1dc/0x410 [ 44.503358][ T2983] __se_sys_unlink+0x2b/0xe0 [ 44.503378][ T2983] __x64_sys_unlink+0x1f/0x30 [ 44.503397][ T2983] x64_sys_call+0x18ee/0x2550 [ 44.503422][ T2983] do_syscall_64+0x112/0x360 [ 44.503448][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.503468][ T2983] [ 44.503473][ T2983] read to 0xffff88810070e9f0 of 8 bytes by task 2983 on cpu 1: [ 44.503488][ T2983] step_into_slowpath+0x12c/0x4c0 [ 44.503511][ T2983] path_lookupat+0x2eb/0x4c0 [ 44.503531][ T2983] filename_lookup+0x18f/0x390 [ 44.503555][ T2983] do_readlinkat+0x74/0x2f0 [ 44.503582][ T2983] __x64_sys_readlink+0x47/0x60 [ 44.503605][ T2983] x64_sys_call+0x1d41/0x2550 [ 44.503630][ T2983] do_syscall_64+0x112/0x360 [ 44.503653][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.503676][ T2983] [ 44.503680][ T2983] value changed: 0xffff88811ad4aeb8 -> 0x0000000000000000 [ 44.503694][ T2983] [ 44.503698][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 44.503708][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 44.503734][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.503747][ T2983] ================================================================== [ 44.505824][ T3899] iso9660: Corrupted directory entry in block 4 of inode 1792