last executing test programs: 4m2.618159112s ago: executing program 3 (id=146): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x32cf}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}, @in6={0xa, 0x4e20, 0x68c0, @local, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x842}, @in={0x2, 0x4e21, @local}], 0xdc) set_mempolicy(0x3, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x9, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x80000000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x10000, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x23, 0x4, 0x9) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@oldalloc}, {@sysvgroups}]}, 0x3, 0x584, &(0x7f0000001300)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) fallocate(r7, 0x10, 0x10c01, 0x8000) setresgid(r5, r5, r6) socket$inet6(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) accept$inet6(0xffffffffffffffff, 0x0, 0x0) 4m0.491253893s ago: executing program 3 (id=165): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r5) 3m57.468940035s ago: executing program 3 (id=169): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x4, 0x8e, &(0x7f0000000040)="6acef93da246ce93bdf80991a9496d373c450033c6ac3ba3d785282d64c1ed4827c5740314837374f8cb8301759fc50c78c8ecd47b53d3611926432d23007eb83c10787d3b12577071497b2990ae10238edaf267d47c3849ac3983cdcc9903393c67c73a09d1fa8f0808131e3b2db9c3e4a1bbb17f01633f1452eb52733a7566746ccf81dd9732307a113ba02ef6"}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x1, 0x7, 0x3}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x2, 0x9}, 0xc) (async) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7fffffff, 0x101000) (async) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x3, 0x8100) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x8001, {0x0, 0x0, 0x0, 0x9, 0xfb, 0x0, 0x6, 0x13, 0x8, "7edcb570db9a2de2b917021d93fe8c0677b221cda686bd16b5f4b0dfbe848b571261a2cbb7b53a5d85156f15b801863148fff0331e09b43306ac26bf27ce1f69", "2cd821fde1a33b1dcaa57a78d419a9e5437efe5ff0ce5d2c1d9b7b32ea19b454347c2a2ba2f83342f435f41e86e281e49d4bb95d0e24af9b91b1f71d37350d17", "15f90ad78f043c3e5049972b90cfe777e73a8ff9320b33182b9b70849d632a92", [0x9, 0x7b3b]}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) ioctl$TUNSETLINK(r4, 0x400454cd, 0xffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2040940}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r6, 0x400, 0x70bd2b, 0x3, {{}, {@void, @val={0xc, 0x99, {0x95, 0x50}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)) (async) syz_usb_connect(0x6, 0x978, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x53, 0xf6, 0x52, 0x8, 0x413c, 0x81bb, 0xd07, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x966, 0x2, 0xfa, 0x4a, 0x40, 0xfc, "", [{{0x9, 0x4, 0xff, 0x19, 0xd, 0x2, 0xd, 0x0, 0x7, [], [{{0x9, 0x5, 0xa, 0xc, 0x40, 0x9b, 0xe4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x208, 0x7, 0xfc, 0xd, [@generic={0x99, 0x5, "8e5443c7a0501fa2278d0e7719889ff7ea1356be7cc75d0b8643206b2f659feeb2d36d7534796019760885244561f5a70bb03791d92ef84e1e63c1b779948de85f1b18e12dd02cc3bec9d185972476729b69065d77b08b533b454486e3528938e3bead6b05fe094b4e505fbe1f952003f7ec1a020700be1b66eecc152e61d09bd247f38f1ee2aecf35cc6b51e353e1210ef03787a43ef8"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x66, 0xb6, 0x9}}, {{0x9, 0x5, 0x1, 0x14, 0x3ff, 0x9, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x5, 0x7, 0x80}}, {{0x9, 0x5, 0x8, 0x1, 0x3bf, 0x0, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xfffc}, @generic={0x35, 0x2, "3273b037b61f9cdb70d76d96534de83fad5223d519854f68c3e6e60969db973618a4268ecda9ff41bd0fbbe24fd29bf99bb9c7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xd7, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x5}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x7, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x8}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x4, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x2, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0x80, 0x81, [@generic={0xfb, 0x3, "850f47cbe0c9bce142f2df3428cd9d4eb0ac320fede8c1e06f8e3c7fa019a32091c02f3a5edb0dccfcf4622eebdde2884c25c391b5617df670420f5b36f484e463d7b4a99ba9658a41f0de26022b4957de32aa2fbd8041a5dfff265bad7ae5bd9c3137d753bd2d99a0a5a64e01fea936f4b83fad3ff3b49dd08e7acf9f697ee532dcf9a9b69ed3bea9c5044afd3a56bbaa99816df8e7a9a0dedcd1bc14c10d86d1faddf54dc863feb49d8717049f7662b27a5e5d741a75bb41935656ae7eb4b164092e715e9640d7a1dc08b76dd01658c751b3e4bf1e96700340c5dd6cd30d2b942a5446d346f5c228deda8e2b7bed5ec472b93d01acb9913e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x7a, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x91}]}}, {{0x9, 0x5, 0xe, 0xe094dfab56c05704, 0x200, 0x7, 0x2, 0x9, [@generic={0x97, 0xe, "ded863a91f33323686accd2eeb12287028fa4802996161fc04c077d9bcc2feb59be1752d4974817664f3a9dec14371717a553eec02677b704e89e27dca5ef7a3df761ef4c5adbf79d781b7f43ed9c3deb46140c740ea26963e83babb0ea8c5186a547f367f7aeadc873fabec5fc4c9ac2faa2a26e18dfd3e3f39fbfeb6fa4c46cf98b00e6bbbaf5db10ff75c880edd58458f3bbc9d"}]}}]}}, {{0x9, 0x4, 0x8e, 0x5, 0xb, 0xff, 0x5d, 0x81, 0x0, [@generic={0xdf, 0x21, "74c48c104a17e831578f1e18aa032670d867898e32a4dc823e4a47527749da22914382e47dad1e0788ac3b79917d14bf693a05016d9c8e4d4c474e74e4b5282d92319b4bf07ec7a06fe15039e99fee7660fd720aae1e398ce9ad0f9b45043e634dd70565e5bf7c2bb8417e528d96ebcc541b505c2216a0e7120e2e13ad609a9d318cf21a818fd1690541a69e5284eb8e4065d3a8411bcf8ab3a034df3f43fac0cf3ab33bad1379aa10972d811d615ac81bb3bdda636b1197c858406d413afcb487c43ec501fa1c3d171c135e93691af8646e537dab28cf1781b57ded79"}], [{{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x4, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xfffd}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x81, 0x2, 0x7, [@generic={0x92, 0x21, "ea56700b2a776b6b2664e29b8e3a955980b40194ed185b0b72f6963a92841a3ab32e86aeeff2022a14669488488f8bb0b907398f368c2147cf072b8ff88dd7cdec4c3e3808b6664750d26fa18407dd630dfebe73724c4766e486b0fdae919080e88ead1316e4cc47abe09643faaf0874833943ae05ddfccd7393cd19b846fdfcfb6922a6b4f24a6f9db37b0fbc3c55ac"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7f, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x2}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x8, 0x8, 0x5, [@generic={0xec, 0x31, "eaa34d680b8def1faee28155425f9dc3b683fa4591600532e73e8fc691f5de49bc3de9b2db5f3dccf7b06b2c9c110ab2c1a20d1ac5a34a19f40d3afcd31b6e9317559f73adb6055f1de78a28877d06b63223a88a24f553c30a71c8229085d35091954c42b3cff3cdc09312f8d660f800ed5fe9d1919bd4c99e89a0d01c7de4e081c2e0c619e19b2e885c3d2743c4b475de5a19624028e3edf13d8705ac393944ecbcb07ea365041de5abe500f30ca7d7e3f7472b71a9cc8aa7e2466709696528932ff3581147210064deb3d0fac7eecd3ee7b00c21be7cbe124425679f9a0df840061084d92c9689a1ea"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x4, 0xff, 0x1, [@generic={0x86, 0x31, "71fde5d16730fa87963fd0aa8194a4ff860a0a42b79ea51ecc77ea84c59236f69ac06411013a43eabd7a6087d98c20c245cad9280dc3f4efa93c7ed55009b3e9e79e58a15bd029120194f2a36a98cdb2e31f7e7507c49e5fe07e9bf7c9e7cc27d05ded8321546f8205fb01755f9475a7785c4255dc022dc02cf2634deb0b11ba6e9ee7cd"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0xff, 0x0, [@generic={0xea, 0xe, "c1cacd3ab8886e27f1f734e52c06cd55e82463d7ddf9f6ace839550e428b230a93a51b6a65a1484ea4ed61ce49e59dd6d590162fe596c97f667ac727d78e33f3c9b43950c8c320a45443217539a6400e05f2595d4437b76806c80a94c945c7fbb59da96b67a9559caefff55688c20fec70528cb65b33a49f8f7ac9c9d06b39a3140d75e3f3715de9a60dd4dccb1c0b38cae1ad651e9ac9cb6b1364208b5d898a6efc877567c0f4571bf5748d77503e527f546131b559ee9313434425b05d455465f0d65de4b407d07e032f9bb97bd2c09b1f1606b33602a28f6d1ba65b49e93c29934761f66441aa"}, @generic={0x56, 0x6, "e8ec71944147ab8d0a03169267405474873f592164af55412c1d1101f10e26ddf1982ac63aa6e757f8839208aecb906e2605a148b75fbbd773021bf13dcbe76132d66acfdf44fc61b0e51545bb3b2224dc82c94f"}]}}, {{0x9, 0x5, 0x2, 0x0, 0xe4aac7cc09495edd, 0xff, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x58, 0x9}, @generic={0x68, 0xc, "05a9d0bd71149b06345410ec9aaf9c39b42468a76053725559df9c896e3d89b55107ac5355b1d583a6c4c7ebf6976fc94769863e0afab8127b8224415d798ab64fc818da45f5a74bc5e8bf250bb24afeed1a1e4e86dd4f036421dcdb5a2276eafe6b3f67419c"}]}}, {{0x9, 0x5, 0x553a4be3e6a4464, 0x4, 0x10, 0xf, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x56, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x2, 0x2, 0xba}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xa, 0x2, 0x4, [@generic={0x4c, 0xf, "f0894a2767a0d2f82995e70f69bcbdba0b2e2d5e0fb4fbe3c1f7796995d4ac5e04aa19f4ce3572aad9e739b77b8350e4162653b6b938b720e71aca3981f434f20b9e0756b172dcc56a3f"}, @generic={0xd3, 0x0, "eb907eee87651f0d18ed51315d2d099428228cfbf1e389991d242f2e4ed8d010731b0850c2b3c7182c90a906ce27654ebe6f62070494bb177575803e57ea8e68e3e81ff216f2177196bfcfcb8060910b3f1c335da82c889e2c7a9f38a80cc2d84c7bd2a13daaabd56ddc79dda657331f05b037173d6a94355aae946fed6d28a1b44f32eadf8044a42b63bf05f21cfa804125c50ff50618c9f9f34dd62770abfdebfb2131ceed22e4e1795f53746df5dd6bb530d5a7a27438c754a3c60351cedd9882f18a7bdc2812524bf99764aae8dbcb"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x1, 0xa, 0x5}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x300, 0x5, 0x0, 0x5, 0x8, 0x4}, 0xc, &(0x7f0000001040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x9, 0x3}]}, 0x2, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x2409}}]}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001140)={0x9, 0x18, 0xe6, 0xe64c, "f04f8922110e02f075481756758ab3b82dcf17cb550493f5204cfa4ba5de6202"}) (async) syz_open_dev$loop(&(0x7f0000001180), 0x9, 0x400) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x6000004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x8c, r8, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000801) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000014c0)) r9 = syz_open_dev$MSR(&(0x7f0000001500), 0x2, 0x0) read$msr(r9, &(0x7f0000001540), 0x0) signalfd4(r0, &(0x7f0000001580)={[0x3]}, 0x8, 0x80000) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0xa25, @bearer=@l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4041) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0x7, &(0x7f00000016c0)={0x1, 0x7, 0x401, 0x3}, 0x10) (async) fcntl$dupfd(r4, 0x406, r4) 3m56.862221949s ago: executing program 3 (id=170): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000000100)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x2, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(0x0, 0x3000000) capset(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x80049367, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") chdir(&(0x7f0000000080)='./file0\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000000) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) 3m55.187937559s ago: executing program 3 (id=174): perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x4, 0x0, 0x3, 0x80000000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ext4\x00'}]}, 0x11) r1 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r3 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) recvmsg(r1, 0x0, 0x20) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000c0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x1111082, &(0x7f00000001c0), 0x1, 0xbda, &(0x7f0000000300)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3m53.225422105s ago: executing program 3 (id=185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) (async) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x30827183761d30fe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000040)) (async) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x36282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfab8eb7e23cb1a80}, 0x9000, 0x0, 0x5, 0x4, 0x1000000, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x3, &(0x7f0000000280)=@raw=[@exit, @generic={0x3, 0x0, 0xa, 0x5, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], 0x0, 0xf, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x45, 0x10, 0xd, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x9, 0x25, 0x1, {0x22, 0x678}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x1, 0xe}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x7f, 0x80, 0x7, 0xff, 0x5}, 0x37, &(0x7f00000004c0)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x1, 0xf, 0xafa, [0xff0000, 0xc060]}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0xb, 0xf000, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x5, 0xb, 0x40, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x8}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4}}]}) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r6 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) (rerun: 32) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) (async, rerun: 64) open_tree(r5, &(0x7f0000000580)='./file0\x00', 0x81000) (async, rerun: 64) close(r6) (async) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) (async) socket$kcm(0x2, 0x1, 0x84) close(r7) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3m53.225028525s ago: executing program 32 (id=185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) (async) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x30827183761d30fe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000040)) (async) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x36282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfab8eb7e23cb1a80}, 0x9000, 0x0, 0x5, 0x4, 0x1000000, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x3, &(0x7f0000000280)=@raw=[@exit, @generic={0x3, 0x0, 0xa, 0x5, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], 0x0, 0xf, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x45, 0x10, 0xd, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x9, 0x25, 0x1, {0x22, 0x678}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x1, 0xe}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x7f, 0x80, 0x7, 0xff, 0x5}, 0x37, &(0x7f00000004c0)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x1, 0xf, 0xafa, [0xff0000, 0xc060]}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0xb, 0xf000, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x5, 0xb, 0x40, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x8}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4}}]}) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r6 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) (rerun: 32) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) (async, rerun: 64) open_tree(r5, &(0x7f0000000580)='./file0\x00', 0x81000) (async, rerun: 64) close(r6) (async) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) (async) socket$kcm(0x2, 0x1, 0x84) close(r7) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m6.012967641s ago: executing program 0 (id=958): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x7e000000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1840, &(0x7f0000000140), 0xb, 0x241, &(0x7f0000000540)="$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") 2m5.706034509s ago: executing program 0 (id=960): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) (async) r1 = open(0x0, 0x40016b042, 0x2a) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) (async) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0006}]}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) (async) munlockall() (async) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001852900002f0600ac141430e0000001808a8972bd"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in6=@dev}}, {{}, 0x0, @in6}}, 0x0) (async) setsockopt(r2, 0x104, 0x100, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000d06010100000000000000000a00771ef1c6b2ecc0c14774508f00020e0003006269746d61703a697000000005000100"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(r9, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f00000002c0)) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) 2m5.624671511s ago: executing program 0 (id=963): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x40f00, 0x7}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa246f3594010baf6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 2m5.494761854s ago: executing program 0 (id=965): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x11000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f0000000740)={[{@nogrpid}, {@usrjquota, 0x22}, {@delalloc}, {@resgid={'resgid', 0x3d, r5}}, {@data_ordered}, {@noblock_validity}, {@init_itable}, {@noblock_validity}, {@grpjquota, 0x22}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 2m5.152159672s ago: executing program 0 (id=969): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x19148, 0xfffffffffffffffc, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x20, 0x161, 0x9, 0x6, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000400b704000001000000850000003300000085000000110000"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 2m3.238335688s ago: executing program 0 (id=980): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80184, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x7fffffff, 0x4}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff8, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2m3.211580518s ago: executing program 33 (id=980): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80184, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x7fffffff, 0x4}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff8, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.115351666s ago: executing program 1 (id=2090): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) io_uring_enter(r0, 0x2219, 0x771d, 0x16, 0x0, 0x0) 3.070600467s ago: executing program 1 (id=2091): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100), 0x4) sendfile(r3, r2, 0x0, 0x3ffff) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r4, &(0x7f0000000540)="eb07", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0xde76], 0x0, 0x0, 0x2, 0x1}}, 0x40) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f0000000000)=[{0x4, 0x2}], 0x1) semop(r6, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) write(r1, &(0x7f0000000200)="c7", 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x50022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendfile(r1, r0, 0x0, 0x7ffff000) 2.072280851s ago: executing program 1 (id=2102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x47fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x114b, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000c, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xa}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x8090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x12) 1.889993945s ago: executing program 6 (id=2105): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) request_key(&(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)='!-+\x00', 0xfffffffffffffffa) capset(0x0, &(0x7f0000002100)={0x101, 0x5, 0xffff, 0x101, 0x6, 0x9}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000029c0)=""/4105, 0xffffffffffffff3f) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.822165617s ago: executing program 6 (id=2108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x548, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) capset(0x0, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r6, &(0x7f0000001000)={0x10, 0x0, 0x25dfdbfe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x3800, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 1.736549169s ago: executing program 2 (id=2112): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f00000007c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39b, &(0x7f00000002c0)="$eJzs3U1oHOUbAPBnM5uvP+0/OQiiIIzeBC1tFUQvJpQUirlUWaoexGBbLdkoNLjYHprGi3gUetSTNw968NCbF1GR3jx4tYJUxYP2VrB0ZHZmd2YzGxuQbS3+foflyfs+zzvvfCQ7mbBvXl2K9ZPTcfr69WsxN9eK9tKRpbjRisVIYuBiNM2MaQMA7g03siz+yAoRX+ylpDX5WQEAk9R//399f63l3a+r+KtGfla8+0/fibkBAJNR/v4/X29LduTMNarmJz0tAGCCRp//R8QjjZTan/rbjXsDAODe88JLLz+3vBrxfJrORWy81+v0OvFM1b98Os5EN07FwViImxHFjUL+0uq/Hj22unIwTdOt+HkxOnlFrxOxsdXrFHcKy0m/fjYOxUIslvXl3UaWZcnRz1dXDqV9EXFxqzedj7LR6nWm+08ZlufjzA//i1NxONK4r1EfcWx1ZXhP0sm329/+dMR29dwin/+BWIjvXou3ohsnI68d3Nasrlw4lKZHstV9rap+q9eZ7ecVmk9AAAAAAAAAAAAAAAAAAAAAAADgnzhQrL2zP03TxeH6OVm1fs+BMmGkvx1RrPUzXB9ou1gfKJvNIst+f+fxzvtJjKwP1F/gZ2R9nXZM3d1dBwAAAAAAAAAAAAAAAAAAgH+NzXMzsdbtnjq7ee78ej3YOrt5bioi8pY3v/30y/kYzZkvBxitGgnaRUZS60qrqiwZJGdJRLM8yTfeahctn1wezriWU9uLqnyqypnd0TUS7H/4pw/Prw9GeCgZVN2qcpIYu1/nk9FpjAQb/y8GHLRc2v34NIPDt8m5mmXZbuUXXmlWRSuivetUa8HcXmeYn7g8+ObaGw88sTm4CLLCo48tnLh66eNf19e6+ZZz3e7M2c2b2fpa+fX4i60R5GeuPAXVtdEqL7ZW/Uporz156/i+XUbeHm1ZS77/7cUHP7hStkzVTtOYaWQnrlQtb4/JSYqNfraza6YI8mkOu57Ng/wYNcYpv0vitoflqdj7hTQmuP+jpbXLF378Za9VtR8SFuoAAAAAAAAAAAAAAAAAAIA7ovZZ8VL5Yd/pv6t6+vjkZwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd071//+HQUxt72jZW/DnVgxaTsSgazYfMGZqW1y8i3sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/1V8BAAD//6ymVxM=") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x81848c, &(0x7f0000000b80)=ANY=[], 0x6, 0x232, &(0x7f0000000880)="$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") (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x81848c, &(0x7f0000000b80)=ANY=[], 0x6, 0x232, &(0x7f0000000880)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xa}, 0x2022, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) 1.67412413s ago: executing program 2 (id=2114): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100), 0x4) sendfile(r3, r2, 0x0, 0x3ffff) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r4, &(0x7f0000000540)="eb07", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0xde76], 0x0, 0x0, 0x2, 0x1}}, 0x40) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f0000000000)=[{0x4, 0x2}], 0x1) semop(r6, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) write(r1, &(0x7f0000000200)="c7", 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x50022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendfile(r1, r0, 0x0, 0x7ffff000) 1.66866251s ago: executing program 5 (id=2116): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000780)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@dax_always}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}], [{@hash}, {@obj_type={'obj_type', 0x3d, '\x05\x00\x00\x00\xf8\x88F\t\x893Y\xd1\x9d\xd5\x89636\xe0\x06r\xfa \t0\xfe\xef\xd24:\xa3\xdb\xd2\x83\xf3z\xa5\xb2_FJ\xbf\x11Wus\x01\x9c\xac\x95\x85\x03\x19\x16\xc6'}}, {@hash}, {@subj_type}, {@fsname={'fsname', 0x3d, '1f\xe4\x9c\xf5B\xbdy\x0f}\x94v\f3\xe6;/\xdf\xb7IAL\xe1uk\xdb\xfa\x92\x96\xbe/]\x8f\x04u\xbd\xb1\x8c\xbe\"\xa6\x80\xf4\x875\x84\x1fo`\xcc\x03\x8e'}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '-,^\'#{'}}, {@subj_role={'subj_role', 0x3d, '1f\xe4\x9c\xf5B\xbdy\x0f}\x94v\f3\xe6;/\xdf\xb7IAL\xe1uk\xdb\xfa\x92\x96\xbe/]\x8f\x04u\xbd\xb1\x8c\xbe\"\xa6\x80\xf4\x875\x84\x1fo`\xcc\x03\x8e'}}, {@uid_eq}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42642, 0x1ea) fallocate(r0, 0x10, 0x800, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xb41bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0xffffffffffff8000, 0x6, 0xafed, 0x0, 0x80, 0x0, 0x2100000200b}, 0x0, 0xb, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mkdir(0x0, 0x190) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x7fff) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'dummy0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001e00010029bd7000fbdbdf25fe8000000000000000000000000000bb000004d602006c00ff0100000000000000000000000000010010000004350000240009000010000000000000020000000000000001000000000000000100000000000000db3967cd43f7771d14dfe79b5a13171c74dbbe052b3a9bf562baa272e9a9114fb65aa9c47362355b919a83b7da40b1f2111cfd62a3b3e66ca018d54174ccefc0f70401db3efc508bb3f7015b02022dec69cb0df44a0a70d4e8f5e86ee575fa273eac344cd3"], 0x64}, 0x1, 0x0, 0x0, 0xc5}, 0x24000004) 1.610001452s ago: executing program 5 (id=2117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x200, 0xd}, 0xf00, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000002c0)=0x5, 0x38) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000906010200000000000000030000000900020073797a31000000000500010007000000280007800c00018020000140ffffffbb4f23d983f8887c40040000000c0002800800014064010101218d344c926fb591cd4698e9fc16996ad6948b2618783832fef711ba5b898d65953fd58a36e02ec2a14a78ad1427e84b4e3a774d7b46325cf91b96be7b73b5c60ee1afd4495383bb97d1f851965b16e9289474741199d827864dd53514965be341afb6"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="900000001800010029bd7000fdcbdf251d0104000c000b00010000a0030000801500040001000040000200005f8fd14ca5127c0b0600000008000500fd06020d15000100030000a008000000bc1d118ca1d0d62512ded0950c000b00030000e0000000801500020003000080080000001dff23ea435cf1d60400000008000e"], 0x90}}, 0x4c0c8) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000740)={0x14, r6, 0xf1aad47e89fb43b5, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0xc0440c0}, 0x8040) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1dc, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)={0x3c, r7, 0x211, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004014}, 0x8000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f0000000780)=0xffffffff, 0x4) 1.526219594s ago: executing program 5 (id=2118): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000036f6eae52bb558c1d473854ae38811e2f034f9eb0444261d6619ab18b0eada23798232d17725cb43627959f568b3294fa3389b007d737be50955f345c8cca6db45d278fc7757e4a3908a9b443368445a6acfbb3e795f49aa417de726d7cbff0700000000000099b3432720af05008ad4fc8f45da48560bda082a61b32bbe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="1820009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8001}, 0x11c613, 0xac5d, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd08d308098ee6888808", 0x0, 0x200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf25070000003000018008000700", @ANYRES64, @ANYBLOB="14000400fc0000000000000000000001060005004e220000060001000a00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@i_version}, {@usrquota}, {@errors_remount}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0xb, 0x101882) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.25034971s ago: executing program 4 (id=2120): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x7fffffff}, 0x10a01, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x40, 0x305, &(0x7f0000000200)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/42, 0x2d}, 0x8000}], 0x400000000000305, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) ptrace(0x10, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a40)={0x0, 0x4, 0x0, 0x1, 0xc7a}, &(0x7f0000000a80)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ffa56200000000711027000000000095000000000c"], &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x800000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2d0, &(0x7f00000002c0)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10004, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xe80, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) 1.102254174s ago: executing program 1 (id=2121): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20009080) (async) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20009080) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x9, 0x6, 0x6, 0x2, 0x11]}, &(0x7f00000002c0)=0x54) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x9, 0x6, 0x6, 0x2, 0x11]}, &(0x7f00000002c0)=0x54) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffefff) (async) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffefff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000007aa8070b43013f5005fe8af732ee4f2100000000202000000007010000f8ffffffb702000005000000b70372d065f20004f30cf6401c625a4e0000ff030000"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff11, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000001880)={&(0x7f0000001840)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="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", 0xfe}, {&(0x7f00000016c0)="81e1ed951869ae3d893986e924270e8959fbfe86c6076541442341ade868fad4c45414b9e53f2cdf0f5877c8b039b1edd21b3f291e912308527f28fe004f1ace0946dff7b79110e662a47b8610f5e0beebd8f263340717dd060112ca83cf067dd26014617439b4660464d2bf2ba00712faf5f38f180af327b38b8af8ae3c8051466d05ca4ce40d7657f8f6e20ec53f6ae83d6f4033bbd98661d948cd45a25a6e0e5b3a6edd3420b006b47a0eb72ac9f248aaa3b41fe640a37402610c3c91a54347254b84fd53566df87f922412a7df92b992cc81b63ef6ec76c3a430d9", 0xdd}, {&(0x7f00000017c0)="826de383518b14345c3d5d14f8d3bdb33481a0a3e72acec671d0ba27e4af8381d37a2f47a0749626bb79685b5675a6d68cc0d03563caff2175a1664372f0acfd262fd8a31b13a3", 0x47}], 0x4, 0x3, 0x0, 0x400, 0x7, 0x6, 0x8, 0x5}) 1.102033234s ago: executing program 1 (id=2122): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000540)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff04, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b"], 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x24040014) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="365259dea983b7d9e7c7c865e656c3432df300e307097a6006778b85ebf7f643a6b9a9", 0x23, r7) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000380)={0xa}, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) inotify_init1(0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000001902000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061796c006164000c00028008000240000000040800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @cgroup_sock_addr=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'ipvlan1\x00'}) 734.943523ms ago: executing program 2 (id=2123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x800799c) unshare(0x20000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'syztnl1\x00', r5, 0x4, 0x1, 0xfd, 0x6, 0x50, @mcast2, @local, 0x20, 0x80, 0x9, 0xc0000000}}) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xae4, 0x3}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4094, 0xffe}, {&(0x7f0000000280)=""/63, 0x3f}], 0x2, 0x60, 0x4}}], 0x48, 0x48004}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0f00000000100000daaeca142300b7fb0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x2, 0x805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={r8}, &(0x7f0000000140)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) mmap(&(0x7f0000350000/0x2000)=nil, 0x2000, 0x100000f, 0x2012, r0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000340)=@req={0x9, 0x4e, 0x9, 0x6}, 0x10) 676.707634ms ago: executing program 2 (id=2124): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="480000001000010428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="88dd0300007e03001400030076657468315f6d61637674617000000008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000740)=0x60, 0x80800) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000880)=0x1c, 0x41000) r7 = socket$inet(0x2, 0x3, 0x8) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001fc0)=@newtclass={0x500, 0x28, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0xe}, {0x0, 0x9}, {0x5, 0xfff2}}, [@c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_FD={0x8}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff3}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x8}}]}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x14, 0x2, 0x0, 0x3, 0x9, 0x0, 0x7ff, 0x6}}]}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8001, 0x6, 0x10001, 0xe8f, 0x3, 0xe, 0xdf1, 0x0, 0x4, 0x9, 0xe, 0x6, 0x98, 0x8001, 0x0, 0x2, 0xa, 0x0, 0x5, 0x8, 0x6, 0x8, 0x3, 0x670, 0x7, 0x7, 0x2, 0x6, 0x6ef0, 0x9, 0x489, 0x7, 0x6, 0x0, 0x7, 0x4, 0x7, 0x10, 0xa, 0x7, 0x80, 0x7ff, 0x3, 0x2, 0xfffffff9, 0x8, 0xfdb9, 0x9, 0x9, 0x488f, 0x4f, 0x4, 0x8, 0x80, 0x77c, 0x5, 0x1fa, 0x8, 0x5, 0x77674ae, 0x7, 0x4, 0x1, 0x5, 0x101, 0x3, 0xc, 0xb8e, 0xc, 0x3, 0x1, 0x7, 0x1, 0xb, 0x9, 0x9, 0x101, 0x4, 0x100, 0x6, 0x8, 0x6, 0x2, 0x6, 0x400, 0x3, 0xfffffff8, 0x6f, 0x3, 0x1, 0x2, 0x401, 0x7fffffff, 0x9, 0x4, 0x6, 0x3, 0xfc000000, 0x3, 0x8, 0x3327, 0x3, 0x0, 0x1000, 0x8, 0x800, 0xfffffff8, 0x5, 0x6, 0x1, 0x9, 0x81, 0x7fffffff, 0x424, 0x6, 0x2, 0x7fff, 0x9, 0x0, 0x6, 0x4, 0x4, 0x1000, 0x1, 0x100, 0xe18e, 0x3, 0x4, 0x1, 0xfffffffb, 0x2, 0x0, 0x2, 0x5, 0x9, 0x4, 0x2, 0xe, 0x6, 0xffff, 0x8, 0x1, 0x685a, 0x400, 0xffffffff, 0x8000, 0x9, 0x100, 0x3, 0x2, 0x3, 0x6, 0x6, 0x2, 0x2, 0x7, 0x81, 0x7, 0x10000, 0x0, 0x7fff, 0x5, 0x51, 0x2, 0x10000, 0xffffffff, 0x400, 0x8, 0x8, 0xfffffffe, 0xd4, 0x2, 0x4, 0x0, 0x7, 0x3, 0x84b7, 0x2, 0xf557, 0x3, 0x6, 0xffffff00, 0xb, 0x5, 0x2de9, 0x8000, 0x0, 0x7, 0x1ff, 0x7fff, 0x5, 0x7fffffff, 0x3, 0x70a, 0xffffffff, 0x2, 0x7, 0x6, 0x7, 0x9, 0xffff3f7f, 0x0, 0xfffffffc, 0x7, 0xfff, 0x0, 0x800, 0x1ff, 0x8e12, 0x31f9, 0x5, 0x3, 0x800, 0x0, 0x6, 0xd32, 0x0, 0x5, 0x6, 0x5, 0x250d80c9, 0x670, 0xffffed25, 0x8, 0x0, 0x4, 0x8, 0x5, 0x20, 0x2c1, 0xb, 0xa936, 0x2, 0x80000000, 0x5, 0x3, 0x400, 0x9, 0x2, 0x5, 0x7, 0x2, 0x9, 0x8b3, 0x8, 0xe09, 0x400, 0xffff, 0x3e56, 0xfffffff8, 0x100, 0x200, 0x7, 0x5, 0x6, 0x732]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x7, 0x6, 0x2, 0xff, 0xa}}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x1e54aa73ad2566db, 0xffe0}, 0x9, 0x6}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xb}}}]}, 0x500}, 0x1, 0x0, 0x0, 0x10000010}, 0x8c80) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) setfsuid(0xee01) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x800, 0x0}, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)=ANY=[@ANYBLOB="646f733178666c6f7070792c73686f72746e836d653d77696e6e742c726f6469722c757365667265652c756e695f786c6174653d312c756e695f786c6074653d302c7379735f696d6d757461626c652c757466383d302c64656275672c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d77696e6e742c00"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="150000000f060300020000089af152056a0cea31fb548545512541e97dae965b659b81ff01c10986271dacc7b8678a805fbdc3006939dcc010d4a0da2b6f57fe4a9eecd6a0ba98cbde6d6dbc4c741085e9e0e35cb45f71903ada1b19ced3d93fd1"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r11, 0x4) 403.925371ms ago: executing program 5 (id=2125): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0x1}, 0x10e468, 0x1224, 0xfffffffb, 0x7, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0x1}, 0x10e468, 0x1224, 0xfffffffb, 0x7, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000700)='*#-\x00', 0x4) (async) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000700)='*#-\x00', 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01fd25bd70001ddcdf250700000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x412fa6e879b1e1cf}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000ac0)={&(0x7f0000000800)=0x80000000, 0xe1fe, &(0x7f0000000840)=[{}, {}, {}], &(0x7f0000000a80)}) sendmsg$TIPC_NL_BEARER_ENABLE(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r8}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r7, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r10 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000b00)={0x0, @tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x2}}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x86, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x3, 0x0, 0x0, 0x0, 0xd1, &(0x7f0000000100)='virt_wifi0\x00', 0x3, 0x100000001}) setsockopt$sock_attach_bpf(r10, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}, 0x4}}, 0x80, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") 403.612131ms ago: executing program 6 (id=2126): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) close(r0) 401.393901ms ago: executing program 2 (id=2127): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000780)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@dax_always}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}], [{@hash}, {@obj_type={'obj_type', 0x3d, '\x05\x00\x00\x00\xf8\x88F\t\x893Y\xd1\x9d\xd5\x89636\xe0\x06r\xfa \t0\xfe\xef\xd24:\xa3\xdb\xd2\x83\xf3z\xa5\xb2_FJ\xbf\x11Wus\x01\x9c\xac\x95\x85\x03\x19\x16\xc6'}}, {@hash}, {@subj_type}, {@fsname={'fsname', 0x3d, '1f\xe4\x9c\xf5B\xbdy\x0f}\x94v\f3\xe6;/\xdf\xb7IAL\xe1uk\xdb\xfa\x92\x96\xbe/]\x8f\x04u\xbd\xb1\x8c\xbe\"\xa6\x80\xf4\x875\x84\x1fo`\xcc\x03\x8e'}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '-,^\'#{'}}, {@subj_role={'subj_role', 0x3d, '1f\xe4\x9c\xf5B\xbdy\x0f}\x94v\f3\xe6;/\xdf\xb7IAL\xe1uk\xdb\xfa\x92\x96\xbe/]\x8f\x04u\xbd\xb1\x8c\xbe\"\xa6\x80\xf4\x875\x84\x1fo`\xcc\x03\x8e'}}, {@uid_eq}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42642, 0x1ea) fallocate(r0, 0x10, 0x800, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xb41bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0xffffffffffff8000, 0x6, 0xafed, 0x0, 0x80, 0x0, 0x2100000200b}, 0x0, 0xb, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mkdir(0x0, 0x190) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x7fff) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'dummy0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001e00010029bd7000fbdbdf25fe8000000000000000000000000000bb000004d602006c00ff0100000000000000000000000000010010000004350000240009000010000000000000020000000000000001000000000000000100000000000000db3967cd43f7771d14dfe79b5a13171c74dbbe052b3a9bf562baa272e9a9114fb65aa9c47362355b919a83b7da40b1f2111cfd62a3b3e66ca018d54174ccefc0f70401db3efc508bb3f7015b02022dec69cb0df44a0a70d4e8f5e86ee575fa273eac344cd3"], 0x64}, 0x1, 0x0, 0x0, 0xc5}, 0x24000004) 350.099042ms ago: executing program 4 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x200, 0xd}, 0xf00, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000002c0)=0x5, 0x38) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000906010200000000000000030000000900020073797a31000000000500010007000000280007800c00018020000140ffffffbb4f23d983f8887c40040000000c0002800800014064010101218d344c926fb591cd4698e9fc16996ad6948b2618783832fef711ba5b898d65953fd58a36e02ec2a14a78ad1427e84b4e3a774d7b46325cf91b96be7b73b5c60ee1afd4495383bb97d1f851965b16e9289474741199d827864dd53514965be341afb6"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="900000001800010029bd7000fdcbdf251d0104000c000b00010000a0030000801500040001000040000200005f8fd14ca5127c0b0600000008000500fd06020d15000100030000a008000000bc1d118ca1d0d62512ded0950c000b00030000e0000000801500020003000080080000001dff23ea435cf1d60400000008000e"], 0x90}}, 0x4c0c8) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000740)={0x14, r6, 0xf1aad47e89fb43b5, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0xc0440c0}, 0x8040) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1dc, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)={0x3c, r7, 0x211, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004014}, 0x8000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f0000000780)=0xffffffff, 0x4) 349.797442ms ago: executing program 6 (id=2129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000000a40)) shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x800, 0x1, 0x2, 0x9, 0x4}, 0x20) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 323.660273ms ago: executing program 5 (id=2130): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080), 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) write$binfmt_format(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x10, 0xfffffffffffffff8}, 0x110200, 0xd, 0x9, 0x8, 0x9, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x80a02100, 0x0, 0x23, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppoe(0x18, 0x1, 0x0) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000700000000040014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000700000000040014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_clone(0x3004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x3004000, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x6, &(0x7f0000000080)={0x5, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) (async) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) (async) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) 309.071733ms ago: executing program 4 (id=2131): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010004ff0000000a09400000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 308.752563ms ago: executing program 6 (id=2132): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)="f3b82fd3f070762ae88d1fc6c0cd64bd46ba553823c33f67cb7ba9ad777fb9353c48e16d6b6c384f87b4713a672349e2a6781ac7e80be2269080d67dc0aaa9d9b305d241a890d96d00a94fc4fd58d50d0ba359d5ef9b04df366dca4ea0e23475d8fdc586b422f10a96170a65ff4e3c88415564e15521c86e551d07f66ef8ce1d9a8f464abd6858ad63d71bc686b74a59e12a82a9bdad7fcbedccaff6d9d4b6b6b0e2ce0073514d9dcc1eeb77eec04615f0fe6745fc46be7e234eca6467be25975e34133c", 0xc4}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x20000000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r5, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)={'veth1_macvtap\x00'}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) recvmsg$unix(r6, &(0x7f0000001d00)={&(0x7f0000001b80), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001c00)=""/136, 0x88}, {&(0x7f0000001d40)=""/161, 0xa1}, {&(0x7f0000001e00)=""/152, 0x98}, {&(0x7f0000002080)=""/83, 0x53}, {&(0x7f0000002100)=""/66, 0x42}, {&(0x7f0000001f00)=""/248, 0xf8}], 0x6}, 0x61) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000280)={0x0, 0x200, 0x8}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000740)={r8, 0x3, 0x8000000000000, 0x1}) 266.523554ms ago: executing program 2 (id=2133): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100), 0x4) sendfile(r3, r2, 0x0, 0x3ffff) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r4, &(0x7f0000000540)="eb07", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0xde76], 0x0, 0x0, 0x2, 0x1}}, 0x40) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f0000000000)=[{0x4, 0x2}], 0x1) semop(r6, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) write(r1, &(0x7f0000000200)="c7", 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x50022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendfile(r1, r0, 0x0, 0x7ffff000) 266.090034ms ago: executing program 4 (id=2134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_config_ext={0x8, 0x4}, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[], 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) 241.432515ms ago: executing program 6 (id=2135): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000036f6eae52bb558c1d473854ae38811e2f034f9eb0444261d6619ab18b0eada23798232d17725cb43627959f568b3294fa3389b007d737be50955f345c8cca6db45d278fc7757e4a3908a9b443368445a6acfbb3e795f49aa417de726d7cbff0700000000000099b3432720af05008ad4fc8f45da48560bda082a61b32bbe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="1820009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8001}, 0x11c613, 0xac5d, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd08d308098ee6888808", 0x0, 0x200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf25070000003000018008000700", @ANYRES64, @ANYBLOB="14000400fc0000000000000000000001060005004e220000060001000a00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@i_version}, {@usrquota}, {@errors_remount}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0xb, 0x101882) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 233.786544ms ago: executing program 1 (id=2136): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) socket(0x15, 0x801, 0x0) 102.310358ms ago: executing program 4 (id=2137): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"]}, 0x296) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) (async) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x800, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r10 = getgid() (async, rerun: 64) r11 = getegid() (rerun: 64) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x2}, [{0x2, 0x1, r4}, {0x2, 0x2, r5}, {0x2, 0x0, r6}], {}, [{0x8, 0x3, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0xd, r10}, {0x8, 0x4, r11}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x5, r12}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x1) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0x6}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 85.605148ms ago: executing program 5 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x548, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) capset(0x0, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r6, &(0x7f0000001000)={0x10, 0x0, 0x25dfdbfe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x6306, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 4 (id=2139): perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x2000, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x8) fchdir(0xffffffffffffffff) eventfd2(0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ea07000081001000080046b4002c00174fa810225192bf906001bdf1000000a3069031ac1414bbac1414aa070309004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090784000"], 0x0) kernel console output (not intermixed with test programs): ack. [ 187.910753][ T7794] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.122106][ T7805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.136576][ T7805] EXT4-fs (loop1): 1 truncate cleaned up [ 188.143862][ T7805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.218496][ T4686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.360371][ T7814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.788799][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.798694][ T4686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.286798][ T7844] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 190.020760][ T7853] set_capacity_and_notify: 3 callbacks suppressed [ 190.020954][ T7853] loop2: detected capacity change from 0 to 512 [ 190.156974][ T7853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1086: corrupted inode contents [ 190.169687][ T7853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.178652][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 190.194252][ C1] EXT4-fs (loop2): initial error at time 2000000005: ext4_do_update_inode:5742: inode 16 [ 190.204134][ C1] EXT4-fs (loop2): last error at time 2000000005: ext4_do_update_inode:5742: inode 16 [ 190.251444][ T7853] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.1086: mark_inode_dirty error [ 190.263423][ T7853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.264712][ T7853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1086: corrupted inode contents [ 190.286442][ T7853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.289114][ T7853] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1086: mark_inode_dirty error [ 190.310414][ T7853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.311956][ T7853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1086: corrupted inode contents [ 190.336355][ T7853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.337148][ T7853] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 190.355308][ T7853] loop2: lost filesystem error report for type 5 error -117 [ 190.356253][ T7853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1086: corrupted inode contents [ 190.376063][ T7853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.377345][ T7853] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.1086: mark_inode_dirty error [ 190.399655][ T7853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 190.402439][ T7853] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 190.421851][ T7853] loop2: lost filesystem error report for type 5 error -117 [ 190.432081][ T7853] EXT4-fs (loop2): 1 truncate cleaned up [ 190.449944][ T5432] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 1 [ 190.451184][ T7853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.475526][ T7853] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.571070][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.679704][ T7873] loop2: detected capacity change from 0 to 1024 [ 191.729192][ T7879] __nla_validate_parse: 3 callbacks suppressed [ 191.729224][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 191.746385][ T7873] EXT4-fs: Ignoring removed orlov option [ 191.784380][ T7873] EXT4-fs: Invalid want_extra_isize 4224 [ 191.833448][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 191.833467][ T28] audit: type=1400 audit(2000000006.700:2019): avc: denied { write } for pid=7869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.868017][ T7883] netlink: 196260 bytes leftover after parsing attributes in process `syz.1.1091'. [ 191.949806][ T7883] net_ratelimit: 6 callbacks suppressed [ 191.949821][ T7883] netlink: zone id is out of range [ 191.963806][ T28] audit: type=1400 audit(2000000006.830:2020): avc: denied { write } for pid=7886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.055534][ T7883] netlink: zone id is out of range [ 192.112412][ T7883] netlink: zone id is out of range [ 192.147103][ T7883] netlink: zone id is out of range [ 192.184344][ T7860] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 193.450094][ T7914] loop5: detected capacity change from 0 to 256 [ 193.754715][ T7925] 9p: Bad value for 'wfdno' [ 193.809739][ T28] audit: type=1400 audit(2000000008.620:2021): avc: denied { mounton } for pid=7911 comm="syz.5.1097" path="/149/file0/file0" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 193.864297][ T7927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1100'. [ 193.979837][ T7931] tmpfs: Bad value for 'mpol' [ 193.992637][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1101'. [ 194.088573][ T28] audit: type=1107 audit(2000000008.950:2022): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 194.127568][ T28] audit: type=1400 audit(2000000008.990:2023): avc: denied { accept } for pid=7939 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.187591][ T7948] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 194.216796][ T7948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.226837][ T7935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7935 comm=syz.2.1103 [ 194.277036][ T7954] bond2: option resend_igmp: invalid value (1243329439) [ 194.284117][ T7954] bond2: option resend_igmp: allowed values 0 - 255 [ 194.293742][ T7954] bond2 (unregistering): Released all slaves [ 194.294778][ T7953] loop1: detected capacity change from 0 to 1024 [ 194.328902][ T7953] EXT4-fs: Ignoring removed nobh option [ 194.583116][ T7947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7947 comm=syz.5.1108 [ 194.674417][ T7953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.053581][ T7970] loop5: detected capacity change from 0 to 1024 [ 195.091955][ T7970] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 195.106834][ T7974] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.1110: reserved inode found cleared - inode=2 [ 195.122988][ T28] audit: type=1400 audit(2000000009.970:2024): avc: denied { write } for pid=7974 comm="syz.1.1110" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.161015][ T7970] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 195.180257][ T7974] EXT4-fs (loop1): Remounting filesystem read-only [ 195.189857][ T7970] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1114: Failed to acquire dquot type 0 [ 195.211326][ T28] audit: type=1400 audit(2000000010.080:2025): avc: denied { write } for pid=7952 comm="syz.1.1110" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.252571][ T7970] loop5: lost filesystem error report for type 5 error -5 [ 195.253144][ T7970] EXT4-fs (loop5): 1 truncate cleaned up [ 195.260419][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 195.260440][ C1] EXT4-fs (loop5): initial error at time 2000000010: ext4_acquire_dquot:7041 [ 195.260468][ C1] EXT4-fs (loop5): last error at time 2000000010: ext4_acquire_dquot:7041 [ 195.333416][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.364183][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.375386][ T7983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1119'. [ 195.385319][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.427630][ T7970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.456129][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 195.476709][ T7988] xt_CT: No such helper "pptp" [ 195.629993][ T7970] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 195.642748][ T7994] netlink: 196260 bytes leftover after parsing attributes in process `syz.1.1120'. [ 195.657252][ T7970] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1114: Failed to acquire dquot type 0 [ 195.669573][ T7994] netlink: zone id is out of range [ 195.675479][ T7994] netlink: zone id is out of range [ 195.685678][ T7994] netlink: zone id is out of range [ 195.698885][ T7994] netlink: zone id is out of range [ 195.759219][ T4686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.059608][ T8007] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 196.077657][ T8008] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1125'. [ 196.086768][ T8008] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1125'. [ 196.132660][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'. [ 196.172190][ T8009] vti0: entered allmulticast mode [ 196.255214][ T8018] FAULT_INJECTION: forcing a failure. [ 196.255214][ T8018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.270772][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.5.1129 Not tainted syzkaller #0 PREEMPT(lazy) [ 196.270806][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.270845][ T8018] Call Trace: [ 196.270853][ T8018] [ 196.270864][ T8018] __dump_stack+0x1d/0x30 [ 196.270896][ T8018] dump_stack_lvl+0x95/0xd0 [ 196.270924][ T8018] dump_stack+0x15/0x1b [ 196.270991][ T8018] should_fail_ex+0x25e/0x270 [ 196.271021][ T8018] should_fail+0xb/0x20 [ 196.271052][ T8018] should_fail_usercopy+0x1a/0x20 [ 196.271082][ T8018] _copy_from_user+0x1c/0xb0 [ 196.271108][ T8018] ___sys_sendmsg+0xc1/0x1e0 [ 196.271152][ T8018] __x64_sys_sendmsg+0xd4/0x160 [ 196.271193][ T8018] x64_sys_call+0x194c/0x3020 [ 196.271253][ T8018] do_syscall_64+0x136/0x3c0 [ 196.271287][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.271315][ T8018] RIP: 0033:0x7f1aa11fde59 [ 196.271336][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.271376][ T8018] RSP: 002b:00007f1a9fc57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.271396][ T8018] RAX: ffffffffffffffda RBX: 00007f1aa1485fa0 RCX: 00007f1aa11fde59 [ 196.271410][ T8018] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 196.271423][ T8018] RBP: 00007f1a9fc57090 R08: 0000000000000000 R09: 0000000000000000 [ 196.271436][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.271450][ T8018] R13: 00007f1aa1486038 R14: 00007f1aa1485fa0 R15: 00007ffd49a32798 [ 196.271517][ T8018] [ 196.733897][ T8034] netlink: zone id is out of range [ 196.886362][ T8034] netlink: zone id is out of range [ 198.967400][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 198.967418][ T28] audit: type=1326 audit(2000000013.830:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.821827][ T28] audit: type=1326 audit(2000000014.610:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.839387][ T8052] loop2: detected capacity change from 0 to 512 [ 199.847382][ T28] audit: type=1326 audit(2000000014.610:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.847424][ T28] audit: type=1326 audit(2000000014.610:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.847494][ T28] audit: type=1326 audit(2000000014.610:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.847532][ T28] audit: type=1326 audit(2000000014.610:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.847592][ T28] audit: type=1326 audit(2000000014.610:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.847624][ T28] audit: type=1326 audit(2000000014.610:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 199.880877][ T8052] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.029313][ T28] audit: type=1326 audit(2000000014.620:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 200.064060][ T28] audit: type=1326 audit(2000000014.690:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7c1a7cde59 code=0x7ffc0000 [ 200.112755][ T8052] EXT4-fs (loop2): orphan cleanup on readonly fs [ 200.121904][ T8052] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 200.137215][ T8052] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 200.144565][ T8052] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1138: bad orphan inode 768 [ 200.157204][ T8052] loop2: lost filesystem error report for type 5 error -117 [ 200.176469][ T8052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.377375][ T8085] loop1: detected capacity change from 0 to 1024 [ 200.378040][ T8085] EXT4-fs: Ignoring removed bh option [ 200.396372][ T8090] net_ratelimit: 2 callbacks suppressed [ 200.396466][ T8090] sock: sock_set_timeout: `syz.4.1147' (pid 8090) tries to set negative timeout [ 200.546962][ T8085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.868196][ T8100] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.987924][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.152824][ T8122] __nla_validate_parse: 4 callbacks suppressed [ 201.152840][ T8122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1151'. [ 201.330780][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.411315][ T8128] tmpfs: Unknown parameter 'mpolºlocal:' [ 201.578783][ T8144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8144 comm=syz.5.1156 [ 201.648697][ T8148] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 201.705572][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1156'. [ 201.904578][ T8130] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 202.010694][ T8130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.046745][ T8172] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 202.086711][ T8183] macvlan0: entered promiscuous mode [ 202.110958][ T8183] macvlan0: entered allmulticast mode [ 202.134960][ T8183] bond4: entered promiscuous mode [ 202.166602][ T8183] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 202.202303][ T8183] bond4: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 202.282778][ T8183] bond4: left promiscuous mode [ 202.474567][ T8195] netlink: 'syz.1.1165': attribute type 17 has an invalid length. [ 202.631206][ T8201] loop5: detected capacity change from 0 to 512 [ 202.663246][ T8198] ip6erspan1: entered allmulticast mode [ 202.683080][ T8201] EXT4-fs (loop5): 1 truncate cleaned up [ 202.690516][ T8201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.703849][ T8201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.933120][ T8218] loop2: detected capacity change from 0 to 1764 [ 203.360469][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1176'. [ 203.425794][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1176'. [ 203.986698][ T8260] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1185'. [ 204.076057][ T8265] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 204.085500][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 204.085562][ T28] audit: type=1400 audit(2000000018.940:2133): avc: denied { mac_admin } for pid=8264 comm="syz.5.1186" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.134749][ T28] audit: type=1400 audit(2000000018.980:2134): avc: denied { relabelto } for pid=8264 comm="syz.5.1186" name="174" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 204.168904][ T28] audit: type=1400 audit(2000000018.980:2135): avc: denied { associate } for pid=8264 comm="syz.5.1186" name="174" dev="tmpfs" ino=945 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 204.272687][ T8265] loop5: detected capacity change from 0 to 8192 [ 204.402258][ T28] audit: type=1400 audit(2000000019.250:2136): avc: denied { write } for pid=8264 comm="syz.5.1186" path="socket:[20672]" dev="sockfs" ino=20672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 204.508560][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 205.400558][ T28] audit: type=1400 audit(2000000020.080:2137): avc: denied { shutdown } for pid=8276 comm="syz.2.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.413454][ T8265] loop5: p1 < > p3 < > [ 205.534893][ T2981] loop5: p1 < > p3 < > [ 205.585612][ T8285] sg_write: data in/out 413148/136 bytes for SCSI command 0x0-- guessing data in; [ 205.585612][ T8285] program syz.2.1191 not setting count and/or reply_len properly [ 205.617110][ T28] audit: type=1400 audit(2000000020.480:2138): avc: denied { write } for pid=4686 comm="syz-executor" name="174" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 205.642975][ T28] audit: type=1400 audit(2000000020.480:2139): avc: denied { remove_name } for pid=4686 comm="syz-executor" name="binderfs" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 205.731671][ T8285] sctp: [Deprecated]: syz.2.1191 (pid 8285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.731671][ T8285] Use struct sctp_sack_info instead [ 205.874468][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 205.885266][ T3740] udevd[3740]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 205.962473][ T8285] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1191'. [ 205.996297][ T28] audit: type=1400 audit(2000000020.480:2140): avc: denied { write } for pid=4686 comm="syz-executor" name="174" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 206.022180][ T28] audit: type=1400 audit(2000000020.480:2141): avc: denied { write } for pid=4686 comm="syz-executor" name="174" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 206.064786][ T28] audit: type=1400 audit(2000000020.480:2142): avc: denied { write } for pid=4686 comm="syz-executor" name="174" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 206.233049][ T3740] udevd[3740]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 206.244337][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 206.428679][ T8305] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 206.658260][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 206.844962][ T8330] loop5: detected capacity change from 0 to 256 [ 206.898448][ T8330] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.943117][ T8330] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 206.970050][ T8330] FAT-fs (loop5): Filesystem has been set read-only [ 206.991604][ T8330] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 208.576252][ T8346] netlink: 'syz.6.1206': attribute type 4 has an invalid length. [ 208.617451][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.640817][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.656236][ T8352] netlink: 'syz.6.1206': attribute type 4 has an invalid length. [ 208.674551][ T3370] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 209.228998][ T8360] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 209.311368][ T8363] netlink: 'syz.2.1209': attribute type 12 has an invalid length. [ 209.700610][ T8352] xt_CT: No such helper "syz0" [ 209.838150][ T8370] netlink: 'syz.6.1211': attribute type 21 has an invalid length. [ 209.873141][ T8370] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1211'. [ 209.914025][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 209.986359][ T8375] netlink: 196260 bytes leftover after parsing attributes in process `syz.4.1213'. [ 210.038738][ T8375] netlink: zone id is out of range [ 210.045813][ T8375] netlink: zone id is out of range [ 210.056218][ T8375] netlink: zone id is out of range [ 210.071719][ T8375] netlink: zone id is out of range [ 210.264616][ T8382] loop1: detected capacity change from 0 to 128 [ 210.366913][ T8390] tmpfs: Bad value for 'mpol' [ 210.425521][ T8396] netlink: 'syz.5.1223': attribute type 13 has an invalid length. [ 210.442867][ T8394] xt_hashlimit: size too large, truncated to 1048576 [ 210.605139][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 210.605154][ T28] audit: type=1326 audit(2000000025.470:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ec10fde59 code=0x0 [ 211.213694][ T8396] bridge0: port 3(gretap0) entered disabled state [ 211.234810][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 211.270892][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.278152][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.293145][ T8396] batman_adv: batadv0: Interface deactivated: dummy0 [ 211.319671][ T8428] netlink: 196260 bytes leftover after parsing attributes in process `syz.4.1229'. [ 211.331042][ T8428] netlink: zone id is out of range [ 211.350155][ T8428] netlink: zone id is out of range [ 211.361610][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.369358][ T8428] netlink: zone id is out of range [ 211.374529][ T8428] netlink: zone id is out of range [ 211.384386][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.412842][ T8433] loop2: detected capacity change from 0 to 128 [ 211.421756][ T8433] vfat: Unknown parameter '©ü/kAɨ7Vxõ‡hæ\'h?È°Œv¤ÉØàŽZtJT…c‰a&¾ÐÂ2Ì¥é-Å\1ß(Ž^äï½h¯"yÔ†ÏT.õtÓþ@¦ÚŠ+§>'C2”ö¹j [ 211.421756][ T8433] Farçàm0ܬ£¿») [ 211.421756][ T8433] fѦ' [ 211.503113][ T8417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1228'. [ 211.524688][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.545484][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.547096][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1233'. [ 211.563771][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.576270][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.740456][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1237'. [ 211.860842][ T8453] xt_hashlimit: max too large, truncated to 1048576 [ 212.495532][ T8456] loop5: detected capacity change from 0 to 1764 [ 212.654730][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.663343][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.735372][ T8460] bridge0: port 3(gretap0) entered blocking state [ 212.741917][ T8460] bridge0: port 3(gretap0) entered forwarding state [ 212.750024][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.758086][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.766462][ T8460] batman_adv: batadv0: Interface activated: dummy0 [ 212.774472][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.788680][ T8461] loop5: detected capacity change from 0 to 764 [ 212.795316][ T8461] iso9660: Unknown parameter 'Ð&7&s>¾{S#rqæçÃ%e‡úã?t;0Ÿ­y2á\ñ— ©0x0000000000000000' [ 212.843040][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.851418][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.861525][ T8460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.871898][ T8460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.883853][ T8460] veth1_vlan: left promiscuous mode [ 212.889650][ T8460] veth0_vlan: left promiscuous mode [ 212.896420][ T8460] veth0_vlan: entered promiscuous mode [ 212.902951][ T8460] veth1_vlan: entered promiscuous mode [ 212.910550][ T8460] veth1_macvtap: left promiscuous mode [ 212.916478][ T8460] veth0_macvtap: left promiscuous mode [ 212.922708][ T8460] veth0_macvtap: entered promiscuous mode [ 212.928990][ T8460] veth1_macvtap: entered promiscuous mode [ 212.937329][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.945607][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.954097][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.962617][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.987672][ T8460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.048510][ T327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.075868][ T5430] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.082997][ T5430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.095853][ T5430] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.102976][ T5430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.137093][ T5431] ip6_tunnel: ) xmit: Local address not yet configured! [ 213.144566][ T327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.173230][ T327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.231172][ T327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.962459][ T8494] Set syz1 is full, maxelem 65536 reached [ 213.984841][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 214.087552][ T8497] netlink: 196260 bytes leftover after parsing attributes in process `syz.6.1249'. [ 214.097088][ T8497] netlink: zone id is out of range [ 214.493886][ T8511] netlink: 'syz.2.1256': attribute type 1 has an invalid length. [ 214.531133][ T8511] bond3: entered promiscuous mode [ 214.536500][ T8511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.566947][ T8511] ipvlan2: entered allmulticast mode [ 214.582100][ T8511] bond3: entered allmulticast mode [ 214.631053][ T8518] loop2: detected capacity change from 0 to 512 [ 214.635895][ T8513] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.648870][ T8518] EXT4-fs: inline encryption not supported [ 214.680469][ T8518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.706614][ T8518] EXT4-fs (loop2): 1 truncate cleaned up [ 214.740532][ T8518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.757330][ T28] audit: type=1400 audit(2000000029.620:2151): avc: denied { write } for pid=8510 comm="syz.2.1256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.765258][ T8511] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.1256: bad extra_isize 62 (inode size 256) [ 214.837836][ T8511] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.1256: bad extra_isize 62 (inode size 256) [ 214.864270][ T8518] EXT4-fs (loop2): shut down requested (1) [ 214.870360][ T8511] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.1256: bad extra_isize 62 (inode size 256) [ 214.958773][ T8513] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.007369][ T8518] bond3: (slave bridge0): making interface the new active one [ 215.015179][ T8518] bridge0: entered promiscuous mode [ 215.020761][ T8518] bridge0: entered allmulticast mode [ 215.032162][ T8518] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 215.115683][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.156344][ T8513] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.254266][ T28] audit: type=1400 audit(2000000030.120:2152): avc: denied { create } for pid=8523 comm="syz.2.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.309197][ T28] audit: type=1400 audit(2000000030.140:2153): avc: denied { getopt } for pid=8523 comm="syz.2.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.445935][ T8513] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.542355][ T8531] loop2: detected capacity change from 0 to 1024 [ 215.550785][ T49] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.565500][ T8531] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 215.579314][ T8531] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 215.597625][ T3419] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.614657][ T8531] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1261: Failed to acquire dquot type 0 [ 215.646582][ T30] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.654903][ T8531] loop2: lost filesystem error report for type 5 error -117 [ 215.656533][ T8531] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, [ 215.663889][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 215.663916][ C0] EXT4-fs (loop2): initial error at time 2000000030: ext4_acquire_dquot:7041 [ 215.663945][ C0] EXT4-fs (loop2): last error at time 2000000030: ext4_acquire_dquot:7041 [ 215.695355][ T8531] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 215.707766][ T8531] EXT4-fs (loop2): 1 truncate cleaned up [ 215.719605][ T8531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.734692][ T30] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.821008][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.886748][ T8547] syzkaller0: entered promiscuous mode [ 215.899121][ T8547] syzkaller0: entered allmulticast mode [ 216.044324][ T28] audit: type=1400 audit(2000000030.910:2154): avc: denied { create } for pid=8553 comm="syz.6.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 216.111300][ T8556] syzkaller0: entered promiscuous mode [ 216.130171][ T8556] syzkaller0: entered allmulticast mode [ 216.375215][ T8565] loop1: detected capacity change from 0 to 164 [ 216.390216][ T8565] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 216.403187][ T8567] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1273'. [ 216.508211][ T8567] loop5: detected capacity change from 0 to 8192 [ 216.529496][ T8567] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.543924][ T8565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1272'. [ 216.565797][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 216.572024][ T8563] loop2: detected capacity change from 0 to 1024 [ 216.586040][ T8565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1272'. [ 216.680459][ T8563] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.750229][ T8563] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.1271: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 216.771247][ T8563] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 216.779292][ T8563] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1271: couldn't read orphan inode 11 (err -117) [ 216.788913][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 216.789054][ C1] EXT4-fs (loop2): initial error at time 2000000031: ext4_ext_check_inode:521: inode 11 [ 216.789313][ C1] EXT4-fs (loop2): last error at time 2000000031: ext4_ext_check_inode:521: inode 11 [ 216.838914][ T8563] loop2: lost filesystem error report for type 5 error -117 [ 216.852212][ T8563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.905814][ T28] audit: type=1400 audit(2000000031.770:2155): avc: denied { read append } for pid=8588 comm="syz.1.1279" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.958260][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.095843][ T28] audit: type=1400 audit(2000000031.960:2156): avc: denied { ioctl } for pid=8588 comm="syz.1.1279" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 217.128846][ C0] ip6_tunnel: ) xmit: Local address not yet configured! [ 217.254376][ T8609] netlink: 456 bytes leftover after parsing attributes in process `syz.2.1284'. [ 217.268028][ T8609] netlink: 456 bytes leftover after parsing attributes in process `syz.2.1284'. [ 217.386231][ T28] audit: type=1400 audit(2000000032.250:2157): avc: denied { bind } for pid=8614 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.434075][ T8612] tmpfs: Bad value for 'mpol' [ 217.554348][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1289'. [ 217.728298][ T28] audit: type=1400 audit(2000000032.590:2158): avc: denied { connect } for pid=8627 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 217.742899][ T8634] gtp0: entered allmulticast mode [ 217.924723][ T8623] loop5: detected capacity change from 0 to 2048 [ 217.962066][ T8623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.962204][ T8623] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.006814][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1289'. [ 218.097551][ T8634] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.1291'. [ 218.181852][ T4686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.703297][ T8668] loop5: detected capacity change from 0 to 1024 [ 218.745828][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 218.766022][ T8668] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 218.789268][ T8668] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 218.806375][ T8668] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1297: Failed to acquire dquot type 0 [ 218.818174][ T8668] loop5: lost filesystem error report for type 5 error -117 [ 218.818614][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 218.823637][ T8676] loop2: detected capacity change from 0 to 128 [ 218.825970][ C1] EXT4-fs (loop5): initial error at time 2000000033: ext4_acquire_dquot:7041 [ 218.834723][ T8668] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, [ 218.838735][ C1] [ 218.838765][ C1] EXT4-fs (loop5): last error at time 2000000033: ext4_acquire_dquot:7041 [ 218.847622][ T8668] inode 13: [ 218.855173][ C1] [ 218.866957][ T8676] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.869397][ T8668] block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 218.902309][ T8668] EXT4-fs (loop5): 1 truncate cleaned up [ 218.908553][ T8668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.938845][ T8676] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.960143][ T8668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.006692][ T5431] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.079385][ T8685] loop2: detected capacity change from 0 to 512 [ 219.117966][ T8685] EXT4-fs (loop2): 1 truncate cleaned up [ 219.153491][ T8685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.271273][ T8685] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.397709][ T28] audit: type=1400 audit(2000000034.260:2159): avc: denied { setopt } for pid=8704 comm="syz.5.1308" lport=38727 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 219.429788][ T8708] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1309'. [ 219.439080][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1309'. [ 219.501227][ T8712] loop2: detected capacity change from 0 to 1024 [ 219.508938][ T8708] 9p: Could not find request transport: rem [ 219.528086][ T8712] EXT4-fs: inline encryption not supported [ 219.551923][ T8712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.591197][ T28] audit: type=1400 audit(2000000034.460:2160): avc: denied { write } for pid=8711 comm="syz.2.1311" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.617473][ T8712] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.2.1311: path /273/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 219.684446][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.932902][ T8738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1313'. [ 220.492720][ T8739] loop5: detected capacity change from 0 to 512 [ 220.519473][ T8739] EXT4-fs: Ignoring removed orlov option [ 220.549055][ T8739] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.574222][ T8739] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1310: invalid indirect mapped block 32768 (level 2) [ 220.588964][ T8739] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 220.589444][ T8739] EXT4-fs (loop5): 1 orphan inode deleted [ 220.598669][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 220.598692][ C0] EXT4-fs (loop5): initial error at time 2000000035: ext4_free_branches:1023: inode 16 [ 220.598741][ C0] EXT4-fs (loop5): last error at time 2000000035: ext4_free_branches:1023: inode 16 [ 220.630301][ T8739] EXT4-fs (loop5): 1 truncate cleaned up [ 220.636444][ T8739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.656736][ T8739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.809075][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1324'. [ 220.900768][ T8768] net_ratelimit: 3 callbacks suppressed [ 220.900788][ T8768] netlink: zone id is out of range [ 220.954013][ T8768] netlink: zone id is out of range [ 220.982570][ T8768] netlink: zone id is out of range [ 221.017993][ T8768] netlink: zone id is out of range [ 221.463620][ T8780] tmpfs: Bad value for 'size' [ 221.678461][ T28] audit: type=1400 audit(2000000036.540:2161): avc: denied { append } for pid=8786 comm="syz.1.1332" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 222.020631][ T8805] netlink: zone id is out of range [ 222.036721][ T8805] netlink: zone id is out of range [ 222.048152][ T28] audit: type=1400 audit(2000000036.910:2162): avc: denied { create } for pid=8806 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.090102][ T8805] netlink: zone id is out of range [ 222.095313][ T8805] netlink: zone id is out of range [ 222.101692][ T28] audit: type=1400 audit(2000000036.940:2163): avc: denied { setopt } for pid=8806 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.144595][ T28] audit: type=1400 audit(2000000036.940:2164): avc: denied { write } for pid=8806 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.208735][ T28] audit: type=1400 audit(2000000037.070:2165): avc: denied { setattr } for pid=8819 comm="syz.1.1341" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 222.232669][ T8820] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.267642][ T28] audit: type=1400 audit(2000000037.100:2166): avc: denied { write } for pid=8819 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.223473][ T8865] __nla_validate_parse: 3 callbacks suppressed [ 224.223520][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'. [ 224.403535][ T8865] netlink: 196260 bytes leftover after parsing attributes in process `syz.2.1354'. [ 224.417611][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1353'. [ 224.465652][ T28] audit: type=1400 audit(2000000039.330:2167): avc: denied { write } for pid=8873 comm="syz.4.1356" path="socket:[22898]" dev="sockfs" ino=22898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.523737][ T8865] netlink: zone id is out of range [ 224.559047][ T8865] netlink: zone id is out of range [ 224.752714][ T28] audit: type=1400 audit(2000000039.620:2168): avc: denied { setattr } for pid=8896 comm="syz.4.1362" name="CAN_J1939" dev="sockfs" ino=22231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.914973][ T8905] tmpfs: Bad value for 'mpol' [ 224.950690][ T28] audit: type=1400 audit(2000000039.810:2169): avc: denied { ioctl } for pid=8906 comm="syz.6.1366" path="socket:[22943]" dev="sockfs" ino=22943 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.128675][ C0] ip6_tunnel: ) xmit: Local address not yet configured! [ 225.196527][ T8922] loop5: detected capacity change from 0 to 256 [ 225.236226][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1370'. [ 225.328870][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1371'. [ 225.340115][ T8927] netlink: 196260 bytes leftover after parsing attributes in process `syz.6.1370'. [ 225.399957][ T8934] x_tables: duplicate underflow at hook 2 [ 225.450890][ T8936] loop5: detected capacity change from 0 to 512 [ 225.508183][ T8936] EXT4-fs (loop5): 1 truncate cleaned up [ 225.521217][ T8936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.553428][ T8936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.719040][ T8950] tmpfs: Bad value for 'mpol' [ 225.973371][ T8968] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1383'. [ 226.348504][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 226.435428][ T8991] netlink: 196260 bytes leftover after parsing attributes in process `syz.1.1388'. [ 226.470359][ T8991] net_ratelimit: 6 callbacks suppressed [ 226.470378][ T8991] netlink: zone id is out of range [ 226.533397][ T8991] netlink: zone id is out of range [ 226.556587][ T8991] netlink: zone id is out of range [ 226.577175][ T8991] netlink: zone id is out of range [ 226.614838][ T8994] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.668117][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1392'. [ 226.724879][ T8994] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.745920][ T8996] pim6reg: entered allmulticast mode [ 226.796418][ T8994] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.818275][ T9003] syzkaller0: entered promiscuous mode [ 226.824101][ T9003] syzkaller0: entered allmulticast mode [ 226.841153][ T28] audit: type=1400 audit(2000000041.710:2170): avc: denied { connect } for pid=9001 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.884834][ T8994] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.005752][ T327] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.033586][ T327] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.046788][ T327] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.070426][ T327] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.132392][ T9020] macsec1: entered promiscuous mode [ 227.140633][ T9020] bridge0: entered promiscuous mode [ 227.169222][ T9019] macsec2: entered promiscuous mode [ 227.762489][ T9036] netlink: zone id is out of range [ 227.768922][ T9036] netlink: zone id is out of range [ 227.784492][ T9036] netlink: zone id is out of range [ 227.799676][ T9036] netlink: zone id is out of range [ 227.827278][ T9042] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 227.895203][ T9042] bond5 (unregistering): Released all slaves [ 227.931579][ T9045] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 227.945029][ T9045] bond5 (unregistering): Released all slaves [ 227.958514][ T28] audit: type=1400 audit(2000000042.820:2171): avc: denied { read } for pid=9049 comm="syz.2.1408" name="/" dev="configfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.038316][ T28] audit: type=1400 audit(2000000042.820:2172): avc: denied { read open } for pid=9049 comm="syz.2.1408" path="/" dev="configfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.651298][ T28] audit: type=1400 audit(2000000043.520:2173): avc: denied { setopt } for pid=9068 comm="syz.1.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.731989][ T28] audit: type=1400 audit(2000000043.600:2174): avc: denied { ioctl } for pid=9068 comm="syz.1.1416" path="socket:[23204]" dev="sockfs" ino=23204 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.003945][ T28] audit: type=1400 audit(2000000043.700:2175): avc: denied { bind } for pid=9068 comm="syz.1.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.316805][ T28] audit: type=1326 audit(2000000044.180:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.2.1419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec10fde59 code=0x7ffc0000 [ 229.331415][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 229.351357][ T9079] __nla_validate_parse: 3 callbacks suppressed [ 229.351371][ T9079] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1418'. [ 229.363289][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 229.374550][ T28] audit: type=1326 audit(2000000044.180:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.2.1419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8ec10fde59 code=0x7ffc0000 [ 229.388896][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.400368][ T28] audit: type=1326 audit(2000000044.180:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.2.1419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec10fde59 code=0x7ffc0000 [ 229.445703][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.479993][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.490810][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.515363][ T28] audit: type=1326 audit(2000000044.180:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.2.1419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ec10fde59 code=0x7ffc0000 [ 229.544721][ T9088] tmpfs: Bad value for 'nr_blocks' [ 229.571855][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.585711][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1422'. [ 229.590133][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.621999][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.642566][ T855] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 229.658919][ T855] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 229.708987][ T9101] fido_id[9101]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.737052][ T9102] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=281 sclass=netlink_xfrm_socket pid=9102 comm=syz.6.1422 [ 229.762522][ T9096] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1423'. [ 229.777731][ T9096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.039244][ T9116] bond4: entered allmulticast mode [ 230.813777][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 230.862430][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'. [ 230.912578][ T9148] 9p: Bad value for 'wfdno' [ 230.920512][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'. [ 230.998399][ T9167] SELinux: policydb table sizes (230,6) do not match mine (8,7) [ 231.013728][ T9167] SELinux: failed to load policy [ 231.530587][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1452'. [ 231.593030][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.627900][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.679413][ T9185] bridge0: port 3(gretap0) entered disabled state [ 231.700204][ T9185] gretap0: left allmulticast mode [ 231.716797][ T9185] gretap0: left promiscuous mode [ 231.746256][ T9185] bridge0: port 3(gretap0) entered disabled state [ 231.829471][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.836711][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.873490][ T9185] batman_adv: batadv0: Interface deactivated: dummy0 [ 231.958245][ T9185] batman_adv: batadv0: Removing interface: dummy0 [ 231.997670][ T9185] bridge_slave_0: left allmulticast mode [ 232.003763][ T9185] bridge_slave_0: left promiscuous mode [ 232.009765][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.030368][ T9185] bridge_slave_1: left allmulticast mode [ 232.038214][ T9185] bridge_slave_1: left promiscuous mode [ 232.046775][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'. [ 232.056072][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.067825][ T9185] bond0: (slave bond_slave_0): Releasing backup interface [ 232.077872][ T9185] bond0: (slave bond_slave_1): Releasing backup interface [ 232.089209][ T9185] team0: Port device team_slave_1 removed [ 232.096177][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.105558][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.115125][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.124048][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.135458][ T9185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.182304][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 232.182319][ T28] audit: type=1400 audit(2000000047.050:2193): avc: denied { connect } for pid=9200 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.770089][ T9221] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1463'. [ 233.116471][ T9236] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 233.130362][ T9236] xt_hashlimit: max too large, truncated to 1048576 [ 234.061364][ T9233] infiniband syz0: set down [ 234.387359][ T9238] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1469'. [ 234.399283][ T9233] infiniband syz0: added veth0_vlan [ 234.417507][ T9233] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 234.419046][ T9233] infiniband syz0: Couldn't open port 1 [ 234.453869][ T9238] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1469'. [ 234.557083][ T9233] RDS/IB: syz0: added [ 234.576487][ T9233] smc: adding ib device syz0 with port count 1 [ 234.598522][ T9233] smc: ib device syz0 port 1 has no pnetid [ 234.829910][ T9255] sg_write: data in/out 988/14 bytes for SCSI command 0x0-- guessing data in; [ 234.829910][ T9255] program syz.5.1475 not setting count and/or reply_len properly [ 234.912515][ T3370] hid_parser_main: 6 callbacks suppressed [ 234.912538][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.928288][ T9255] pim6reg1: entered promiscuous mode [ 234.937865][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.946852][ T9255] pim6reg1: entered allmulticast mode [ 234.953863][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.975115][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.993225][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 235.001481][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 235.009673][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 235.017556][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 235.041964][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 235.056391][ T3370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 235.072712][ T3370] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 235.113246][ T9269] fido_id[9269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.255944][ T9279] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1483'. [ 235.274069][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 235.291260][ T9279] bond0: (slave dummy0): Releasing backup interface [ 236.843359][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'. [ 236.937741][ T9318] netlink: 196260 bytes leftover after parsing attributes in process `syz.2.1492'. [ 237.013714][ T9318] netlink: zone id is out of range [ 237.041042][ T9318] netlink: zone id is out of range [ 237.066654][ T9318] netlink: zone id is out of range [ 237.119813][ T9318] netlink: zone id is out of range [ 237.155419][ T9297] Set syz1 is full, maxelem 65536 reached [ 237.278532][ T28] audit: type=1400 audit(2000000052.140:2194): avc: denied { getopt } for pid=9316 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.776950][ T9343] batman_adv: batadv0: Adding interface: dummy0 [ 237.785150][ T9343] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.811631][ T9343] batman_adv: batadv0: Interface activated: dummy0 [ 237.826779][ T9345] batadv0: mtu less than device minimum [ 237.833437][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.844468][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.855604][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.866524][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.877359][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.888448][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.899537][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.910567][ T9345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.346500][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1506'. [ 238.429538][ T28] audit: type=1400 audit(2000000053.270:2195): avc: denied { mount } for pid=9358 comm="syz.1.1505" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 238.464670][ T9364] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 238.726041][ T9364] bond1 (unregistering): Released all slaves [ 239.502390][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 239.520344][ T9383] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.527467][ T9383] bridge0: port 2(bridge_slave_1) entered listening state [ 239.534744][ T9383] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.541848][ T9383] bridge0: port 1(bridge_slave_0) entered listening state [ 239.606657][ T9383] veth0_to_team: entered promiscuous mode [ 239.674827][ T4590] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 239.682702][ T28] audit: type=1400 audit(2000000054.370:2196): avc: denied { create } for pid=9375 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 240.488761][ C0] ip6_tunnel: ) xmit: Local address not yet configured! [ 241.541720][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1519'. [ 242.633434][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1522'. [ 242.672132][ T9433] bond0: (slave bond_slave_0): Releasing backup interface [ 242.744659][ T9433] bond_slave_0: entered promiscuous mode [ 242.751212][ T9433] bond_slave_0: entered allmulticast mode [ 242.773728][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1526'. [ 243.014011][ T9457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 243.107329][ T9457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 243.197496][ T28] audit: type=1400 audit(2000000058.060:2197): avc: denied { write } for pid=9455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.293424][ T28] audit: type=1400 audit(2000000058.160:2198): avc: denied { write } for pid=9471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.688770][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 243.963962][ T28] audit: type=1400 audit(2000000058.830:2199): avc: denied { getopt } for pid=9483 comm="syz.5.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.130696][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 244.175075][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 244.175110][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.175138][ T3302] Call Trace: [ 244.175147][ T3302] [ 244.175157][ T3302] __dump_stack+0x1d/0x30 [ 244.175189][ T3302] dump_stack_lvl+0x95/0xd0 [ 244.175271][ T3302] dump_stack+0x15/0x1b [ 244.175340][ T3302] dump_header+0x80/0x240 [ 244.175366][ T3302] oom_kill_process+0x295/0x350 [ 244.175411][ T3302] out_of_memory+0x981/0xbc0 [ 244.175490][ T3302] try_charge_memcg+0x621/0xa00 [ 244.175548][ T3302] charge_memcg+0x6d/0x120 [ 244.175652][ T3302] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 244.175777][ T3302] swap_cache_alloc_folio+0x47b/0x5e0 [ 244.175824][ T3302] swap_cluster_readahead+0x2b1/0x460 [ 244.175891][ T3302] swapin_readahead+0xd8/0x8a0 [ 244.175943][ T3302] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 244.175973][ T3302] ? hrtimer_start_range_ns+0x108/0x120 [ 244.176008][ T3302] ? __rcu_read_unlock+0x4e/0x70 [ 244.176043][ T3302] ? swap_cache_get_folio+0x1f7/0x200 [ 244.176133][ T3302] do_swap_page+0x2a2/0x1ec0 [ 244.176161][ T3302] ? __schedule+0x799/0xd10 [ 244.176366][ T3302] ? __rcu_read_lock+0x36/0x50 [ 244.176396][ T3302] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 244.176433][ T3302] handle_mm_fault+0xb3c/0x2da0 [ 244.176561][ T3302] do_user_addr_fault+0x634/0x1060 [ 244.176624][ T3302] ? trace_page_fault_user+0x1f/0xa0 [ 244.176663][ T3302] exc_page_fault+0x62/0xa0 [ 244.176698][ T3302] asm_exc_page_fault+0x26/0x30 [ 244.176722][ T3302] RIP: 0033:0x7f4a34958fd7 [ 244.176743][ T3302] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 244.176811][ T3302] RSP: 002b:00007fffe6265080 EFLAGS: 00010202 [ 244.176841][ T3302] RAX: 0000000000000000 RBX: 0000555589b72500 RCX: 00007f4a34958fd7 [ 244.176860][ T3302] RDX: 00007fffe62650c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.176878][ T3302] RBP: 00007fffe626512c R08: 0000000000000000 R09: 0000000000000000 [ 244.176936][ T3302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 244.176951][ T3302] R13: 00000000000927c0 R14: 000000000003b874 R15: 00007fffe6265180 [ 244.176975][ T3302] [ 244.401693][ T3302] memory: usage 307200kB, limit 307200kB, failcnt 264 [ 244.408492][ T3302] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 244.418089][ T3302] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 244.427366][ T3302] Memory cgroup stats for /syz1: [ 244.427565][ T3302] cache 0 [ 244.435750][ T3302] rss 0 [ 244.440358][ T3302] shmem 0 [ 244.443337][ T3302] mapped_file 0 [ 244.446842][ T3302] dirty 0 [ 244.450004][ T3302] writeback 0 [ 244.453424][ T3302] workingset_refault_anon 34 [ 244.458034][ T3302] workingset_refault_file 577 [ 244.478633][ T3302] swap 204800 [ 244.482021][ T3302] swapcached 364544 [ 244.485853][ T3302] pgpgin 214616 [ 244.508648][ T3302] pgpgout 214612 [ 244.513671][ T3302] pgfault 237175 [ 244.530046][ T3302] pgmajfault 21 [ 244.535104][ T3302] inactive_anon 16384 [ 244.558742][ T3302] active_anon 0 [ 244.562297][ T3302] inactive_file 0 [ 244.570565][ T3302] active_file 0 [ 244.583735][ T3302] unevictable 0 [ 244.594793][ T3302] hierarchical_memory_limit 314572800 [ 244.613417][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 244.640051][ T3302] total_cache 0 [ 244.646553][ T3302] total_rss 0 [ 244.650754][ T3302] total_shmem 0 [ 244.654624][ T3302] total_mapped_file 0 [ 244.660964][ T3302] total_dirty 0 [ 244.664503][ T3302] total_writeback 0 [ 244.668359][ T3302] total_workingset_refault_anon 34 [ 244.673839][ T3302] total_workingset_refault_file 577 [ 244.679176][ T3302] total_swap 204800 [ 244.683113][ T3302] total_swapcached 364544 [ 244.687510][ T3302] total_pgpgin 214616 [ 244.691759][ T3302] total_pgpgout 214612 [ 244.695902][ T3302] total_pgfault 237175 [ 244.700140][ T3302] total_pgmajfault 21 [ 244.704258][ T3302] total_inactive_anon 16384 [ 244.710677][ T3302] total_active_anon 0 [ 244.714713][ T3302] total_inactive_file 0 [ 244.719079][ T3302] total_active_file 0 [ 244.723206][ T3302] total_unevictable 0 [ 244.727238][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1529,pid=9450,uid=0 [ 244.742359][ T3302] Memory cgroup out of memory: Killed process 9450 (syz.1.1529) total-vm:94312kB, anon-rss:1240kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 244.913759][ T9502] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1537'. [ 244.969225][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1539'. [ 245.003544][ T9504] geneve0: entered promiscuous mode [ 245.092315][ T9527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=9527 comm=syz.6.1544 [ 245.185352][ T9536] infiniband !yz!: RDMA CMA: cma_listen_on_dev, error -98 [ 245.269393][ T9539] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1547'. [ 246.134901][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 246.152951][ T9548] netlink: 'syz.4.1548': attribute type 12 has an invalid length. [ 246.177467][ T9548] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1548'. [ 246.213147][ T9553] netlink: 'syz.2.1550': attribute type 2 has an invalid length. [ 248.332946][ T9589] 9p: Bad value for 'rfdno' [ 249.729231][ T28] audit: type=1400 audit(2000000063.830:2200): avc: denied { setattr } for pid=9590 comm="syz.4.1561" name="NETLINK" dev="sockfs" ino=25042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.513096][ T28] audit: type=1400 audit(2000000065.370:2201): avc: denied { remount } for pid=9590 comm="syz.4.1561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 250.854466][ T9625] tipc: Started in network mode [ 250.859440][ T9625] tipc: Node identity 2007ff, cluster identity 4711 [ 250.866083][ T9625] tipc: Node number set to 2099199 [ 250.874588][ T5430] tipc: Subscription rejected, illegal request [ 250.983840][ T28] audit: type=1400 audit(2000000065.850:2202): avc: denied { append } for pid=9633 comm="syz.5.1573" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.153321][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 251.252699][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 251.342632][ T9648] pim6reg9: entered allmulticast mode [ 252.008684][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 252.303460][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1583'. [ 252.311649][ T9672] netlink: 'syz.6.1582': attribute type 21 has an invalid length. [ 252.334685][ T9672] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1582'. [ 252.353778][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 252.412960][ T9681] C: renamed from veth1_to_team [ 252.445956][ T9681] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1583'. [ 252.467070][ T9683] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1587'. [ 252.628516][ T9687] tipc: Enabling of bearer rejected, failed to enable media [ 252.638680][ T9691] batman_adv: batadv0: Adding interface: dummy0 [ 252.645220][ T9691] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.673026][ T9691] batman_adv: batadv0: Interface activated: dummy0 [ 252.710611][ T9698] net_ratelimit: 11 callbacks suppressed [ 252.710636][ T9698] batadv0: mtu less than device minimum [ 252.732266][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.743489][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.754539][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.765526][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.776448][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.787476][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.798536][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.809515][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.820488][ T9698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.895024][ T9699] syzkaller0: entered promiscuous mode [ 252.900766][ T9699] syzkaller0: entered allmulticast mode [ 253.577268][ T28] audit: type=1400 audit(2000000068.420:2203): avc: denied { lock } for pid=9708 comm="syz.1.1593" path="socket:[25219]" dev="sockfs" ino=25219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 254.003385][ T28] audit: type=1400 audit(2000000068.870:2204): avc: denied { getopt } for pid=9719 comm="syz.6.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.710177][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1597'. [ 256.072025][ T9735] bond2: entered promiscuous mode [ 256.078862][ T9735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.388132][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 256.420992][ T9745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1600'. [ 256.504763][ T9761] netlink: 196260 bytes leftover after parsing attributes in process `syz.4.1602'. [ 256.548280][ T28] audit: type=1400 audit(2000000071.410:2205): avc: denied { write } for pid=9746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.746022][ T28] audit: type=1400 audit(2000000071.610:2206): avc: denied { write } for pid=9775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.796909][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1608'. [ 257.967899][ T28] audit: type=1400 audit(2000000072.830:2207): avc: denied { write } for pid=9794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.996253][ T9816] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1615'. [ 258.059558][ T28] audit: type=1400 audit(2000000072.930:2208): avc: denied { write } for pid=9821 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.135372][ T28] audit: type=1400 audit(2000000072.990:2209): avc: denied { name_bind } for pid=9825 comm="syz.2.1617" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 258.292604][ T28] audit: type=1400 audit(2000000073.150:2210): avc: denied { connect } for pid=9819 comm="syz.6.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 258.300983][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1616'. [ 258.522819][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.538927][ T28] audit: type=1400 audit(2000000073.400:2211): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 258.585135][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.238236][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 260.281780][ T9869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1627'. [ 260.326711][ T9872] netlink: 196260 bytes leftover after parsing attributes in process `syz.1.1628'. [ 260.363305][ T9872] net_ratelimit: 14 callbacks suppressed [ 260.363324][ T9872] netlink: zone id is out of range [ 260.387202][ T9872] netlink: zone id is out of range [ 260.399017][ T9872] netlink: zone id is out of range [ 260.410801][ T9872] netlink: zone id is out of range [ 260.513504][ T9879] tipc: MTU too low for tipc bearer [ 260.927921][ T9892] netlink: 'syz.1.1634': attribute type 20 has an invalid length. [ 261.975984][ T28] audit: type=1400 audit(2000000076.840:2212): avc: denied { accept } for pid=9899 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 262.196621][ T9901] netdevsim netdevsim5 ì: renamed from netdevsim0 (while UP) [ 262.312953][ T9910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1641'. [ 262.436433][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1644'. [ 262.527859][ T9921] netlink: 196260 bytes leftover after parsing attributes in process `syz.6.1644'. [ 262.581980][ T9923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1647'. [ 262.596298][ T9921] netlink: zone id is out of range [ 262.622485][ T9921] netlink: zone id is out of range [ 262.642723][ T9921] netlink: zone id is out of range [ 262.664723][ T9921] netlink: zone id is out of range [ 262.704481][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 262.853313][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 262.975223][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 263.001367][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 263.034152][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 263.381207][ T9948] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 263.394247][ T9948] xt_hashlimit: max too large, truncated to 1048576 [ 265.664684][ T9959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1656'. [ 266.327632][ T9981] netlink: zone id is out of range [ 266.357987][ T9981] netlink: zone id is out of range [ 266.363465][ T9981] netlink: zone id is out of range [ 266.368698][ T9981] netlink: zone id is out of range [ 266.589403][T10000] netlink: 'syz.4.1671': attribute type 4 has an invalid length. [ 267.275378][T10027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.409781][T10038] __nla_validate_parse: 3 callbacks suppressed [ 267.409821][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 267.434398][T10038] netlink: 'syz.4.1683': attribute type 30 has an invalid length. [ 267.452524][T10038] vxlan0: entered promiscuous mode [ 267.457817][T10038] vxlan0: entered allmulticast mode [ 267.465765][ T5432] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.466351][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 267.474836][ T5432] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.474879][ T5432] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.474922][ T5432] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.530051][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 267.551479][T10038] netlink: 'syz.4.1683': attribute type 30 has an invalid length. [ 267.553616][T10027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.571559][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1683'. [ 267.608224][T10042] netlink: 196260 bytes leftover after parsing attributes in process `syz.2.1684'. [ 267.619365][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 267.647865][T10042] netlink: zone id is out of range [ 267.670341][T10042] netlink: zone id is out of range [ 267.681802][T10042] netlink: zone id is out of range [ 267.691393][T10042] netlink: zone id is out of range [ 267.765292][T10027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.008775][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 268.065702][T10027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.170364][ T4590] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.188987][ T4590] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.233996][T10078] vlan2: entered promiscuous mode [ 268.241386][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1697'. [ 268.258975][ T4590] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.275636][ T4590] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.816739][ T28] audit: type=1400 audit(2000000083.680:2213): avc: denied { listen } for pid=10104 comm="syz.4.1704" path=2F3335362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 268.853628][ T28] audit: type=1400 audit(2000000083.710:2214): avc: denied { accept } for pid=10104 comm="syz.4.1704" path=2F3335362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 268.865894][T10105] block device autoloading is deprecated and will be removed. [ 269.174352][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 269.218449][T10121] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 06:1f:81:45:00:00 [ 269.325605][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 269.335844][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 269.385716][T10121] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 06:1f:81:45:00:00 [ 269.928799][ C0] ip6_tunnel: ) xmit: Local address not yet configured! [ 269.935825][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 269.942968][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 270.140940][ T28] audit: type=1400 audit(2000000085.000:2215): avc: denied { ioctl } for pid=10124 comm="syz.6.1710" path="socket:[27719]" dev="sockfs" ino=27719 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 270.255687][T10130] tipc: Enabled bearer , priority 0 [ 270.283002][T10130] syzkaller0: entered promiscuous mode [ 270.309914][T10130] syzkaller0: entered allmulticast mode [ 270.441205][T10135] tipc: Resetting bearer [ 270.461633][T10129] tipc: Resetting bearer [ 270.469622][T10129] tipc: Disabling bearer [ 271.465787][T10149] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 271.682425][ T28] audit: type=1400 audit(2000000086.550:2216): avc: denied { listen } for pid=10157 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 271.824995][T10165] xt_hashlimit: max too large, truncated to 1048576 [ 272.735942][ T3411] hid_parser_main: 73 callbacks suppressed [ 272.736037][ T3411] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 272.754847][ T3411] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.380026][T10171] __nla_validate_parse: 3 callbacks suppressed [ 273.380051][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 273.513261][T10146] veth3: entered promiscuous mode [ 273.525233][T10146] veth3: entered allmulticast mode [ 274.024074][ T28] audit: type=1400 audit(2000000088.880:2217): avc: denied { accept } for pid=10192 comm="syz.6.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.462792][ T7296] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 274.513696][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 274.548718][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 274.548803][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.548820][ T7296] Call Trace: [ 274.548828][ T7296] [ 274.548837][ T7296] __dump_stack+0x1d/0x30 [ 274.548869][ T7296] dump_stack_lvl+0x95/0xd0 [ 274.548975][ T7296] dump_stack+0x15/0x1b [ 274.548994][ T7296] dump_header+0x80/0x240 [ 274.549054][ T7296] oom_kill_process+0x295/0x350 [ 274.549091][ T7296] out_of_memory+0x981/0xbc0 [ 274.549228][ T7296] try_charge_memcg+0x621/0xa00 [ 274.549285][ T7296] charge_memcg+0x6d/0x120 [ 274.549325][ T7296] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 274.549381][ T7296] swap_cache_alloc_folio+0x47b/0x5e0 [ 274.549455][ T7296] swap_cluster_readahead+0x2b1/0x460 [ 274.549493][ T7296] swapin_readahead+0xd8/0x8a0 [ 274.549566][ T7296] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 274.549645][ T7296] ? hrtimer_start_range_ns+0x108/0x120 [ 274.549697][ T7296] ? __rcu_read_unlock+0x4e/0x70 [ 274.549754][ T7296] ? swap_cache_get_folio+0x1f7/0x200 [ 274.549835][ T7296] do_swap_page+0x2a2/0x1ec0 [ 274.549870][ T7296] ? __schedule+0x799/0xd10 [ 274.549896][ T7296] ? __rcu_read_lock+0x36/0x50 [ 274.549929][ T7296] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 274.550002][ T7296] handle_mm_fault+0xb3c/0x2da0 [ 274.550047][ T7296] do_user_addr_fault+0x634/0x1060 [ 274.550152][ T7296] ? trace_page_fault_user+0x1f/0xa0 [ 274.550182][ T7296] exc_page_fault+0x62/0xa0 [ 274.550236][ T7296] asm_exc_page_fault+0x26/0x30 [ 274.550262][ T7296] RIP: 0033:0x7f7c1a788fd7 [ 274.550284][ T7296] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 274.550340][ T7296] RSP: 002b:00007ffc32d77de0 EFLAGS: 00010202 [ 274.550356][ T7296] RAX: 0000000000000000 RBX: 000055558a311500 RCX: 00007f7c1a788fd7 [ 274.550370][ T7296] RDX: 00007ffc32d77e20 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.550419][ T7296] RBP: 00007ffc32d77e8c R08: 0000000000000000 R09: 0000000000000000 [ 274.550433][ T7296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 274.550446][ T7296] R13: 00000000000927c0 R14: 0000000000042e5e R15: 00007ffc32d77ee0 [ 274.550466][ T7296] [ 274.550569][ T7296] memory: usage 307200kB, limit 307200kB, failcnt 135 [ 274.850189][ T7296] memory+swap: usage 319184kB, limit 9007199254740988kB, failcnt 0 [ 274.860068][T10225] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1738'. [ 274.883560][ T7296] kmem: usage 254780kB, limit 9007199254740988kB, failcnt 0 [ 274.903241][ T7296] Memory cgroup stats for /syz6: [ 274.903509][ T7296] cache 0 [ 274.927857][ T7296] rss 0 [ 274.937830][ T7296] shmem 0 [ 274.950892][ T7296] mapped_file 0 [ 274.961753][ T7296] dirty 0 [ 274.980977][ T7296] writeback 0 [ 274.991262][ T7296] workingset_refault_anon 49 [ 275.007012][ T7296] workingset_refault_file 0 [ 275.059009][ T7296] swap 12271616 [ 275.066955][ T7296] swapcached 18305024 [ 275.079923][ T7296] pgpgin 124954 [ 275.095633][ T7296] pgpgout 124954 [ 275.109464][ T7296] pgfault 120340 [ 275.124744][ T7296] pgmajfault 19 [ 275.128474][ T7296] inactive_anon 0 [ 275.132298][ T7296] active_anon 0 [ 275.135829][ T7296] inactive_file 0 [ 275.139522][ T7296] active_file 0 [ 275.143386][ T7296] unevictable 0 [ 275.146886][ T7296] hierarchical_memory_limit 314572800 [ 275.152353][ T7296] hierarchical_memsw_limit 9223372036854771712 [ 275.158894][ T7296] total_cache 0 [ 275.164235][ T7296] total_rss 0 [ 275.167565][ T7296] total_shmem 0 [ 275.171217][ T7296] total_mapped_file 0 [ 275.175287][ T7296] total_dirty 0 [ 275.178805][ T7296] total_writeback 0 [ 275.182670][ T7296] total_workingset_refault_anon 49 [ 275.187815][ T7296] total_workingset_refault_file 0 [ 275.192896][ T7296] total_swap 12271616 [ 275.198813][ T7296] total_swapcached 18305024 [ 275.203416][ T7296] total_pgpgin 124954 [ 275.207431][ T7296] total_pgpgout 124954 [ 275.344119][ T7296] total_pgfault 120340 [ 275.358090][ T7296] total_pgmajfault 19 [ 275.373242][ T7296] total_inactive_anon 0 [ 275.490568][ T7296] total_active_anon 0 [ 275.527193][ T7296] total_inactive_file 0 [ 275.563701][ T7296] total_active_file 0 [ 275.597258][ T7296] total_unevictable 0 [ 275.629326][ T7296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1729,pid=10192,uid=0 [ 275.753452][ T7296] Memory cgroup out of memory: Killed process 10192 (syz.6.1729) total-vm:96228kB, anon-rss:1240kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 276.126617][T10260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=10260 comm=syz.1.1749 [ 276.194997][T10261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1749'. [ 276.227524][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 276.236822][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1749'. [ 276.512598][ T28] audit: type=1400 audit(2000000091.380:2218): avc: denied { setopt } for pid=10269 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 276.623869][ T28] audit: type=1400 audit(2000000091.490:2219): avc: denied { connect } for pid=10275 comm="syz.2.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 276.753169][ T28] audit: type=1400 audit(2000000091.620:2220): avc: denied { listen } for pid=10278 comm="syz.4.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 276.861746][ T28] audit: type=1400 audit(2000000091.730:2221): avc: denied { write } for pid=10275 comm="syz.2.1754" path="socket:[28040]" dev="sockfs" ino=28040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.435131][T10309] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 277.591777][T10322] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 277.616835][T10322] xt_hashlimit: max too large, truncated to 1048576 [ 278.488490][ T28] audit: type=1326 audit(2000000093.350:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10324 comm="syz.6.1769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c1a7cde59 code=0x0 [ 278.780442][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1769'. [ 279.304242][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'. [ 279.314218][T10335] netlink: 'syz.5.1771': attribute type 1 has an invalid length. [ 279.341587][T10339] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 279.356651][T10339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.371206][T10339] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 279.590255][T10350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10350 comm=syz.5.1772 [ 279.774101][T10363] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 279.908525][T10372] netlink: 'syz.4.1784': attribute type 21 has an invalid length. [ 279.916757][T10372] netlink: 'syz.4.1784': attribute type 6 has an invalid length. [ 279.928065][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1784'. [ 279.939264][T10372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10372 comm=syz.4.1784 [ 279.979999][T10377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5654 sclass=netlink_route_socket pid=10377 comm=syz.2.1782 [ 280.018685][ T28] audit: type=1404 audit(2000000094.880:2223): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 280.043498][ T28] audit: type=1400 audit(2000000094.900:2224): avc: denied { create } for pid=10379 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 280.064760][ T28] audit: type=1400 audit(2000000094.900:2225): avc: denied { execmem } for pid=10374 comm="syz.2.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 280.090641][ T28] audit: type=1400 audit(2000000094.910:2226): avc: denied { create } for pid=10379 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 280.122372][T10383] xt_hashlimit: max too large, truncated to 1048576 [ 280.370141][ T28] audit: type=1400 audit(2000000094.920:2227): avc: denied { create } for pid=10379 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 280.489496][ T28] audit: type=1400 audit(2000000094.920:2228): avc: denied { prog_load } for pid=10379 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.660202][ T28] audit: type=1400 audit(2000000094.960:2229): avc: denied { open } for pid=10379 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 280.761462][ T28] audit: type=1400 audit(2000000094.980:2230): avc: denied { prog_load } for pid=10366 comm="syz.6.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.826000][ T28] audit: type=1400 audit(2000000094.980:2231): avc: denied { prog_load } for pid=10366 comm="syz.6.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.865574][T10394] bond5: option lacp_active: invalid value (5) [ 280.896998][ T28] audit: type=1400 audit(2000000094.980:2232): avc: denied { open } for pid=10366 comm="syz.6.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 280.921562][T10394] bond5 (unregistering): Released all slaves [ 280.971793][T10405] TCP: TCP_TX_DELAY enabled [ 281.017350][T10404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10404 comm=syz.1.1792 [ 281.662173][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 282.517918][T10491] 8021q: adding VLAN 0 to HW filter on device eth0 [ 282.565860][T10491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 282.627368][T10491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 282.672685][T10491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 282.728455][T10497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1824'. [ 282.744900][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1824'. [ 283.818742][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 284.632392][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 284.677025][T10570] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 284.699064][T10570] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 284.737809][T10570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.764821][T10570] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1853'. [ 285.044667][ T28] kauditd_printk_skb: 462 callbacks suppressed [ 285.044682][ T28] audit: type=1400 audit(2000000099.910:2695): avc: denied { relabelfrom } for pid=10588 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 285.100729][ T28] audit: type=1400 audit(2000000099.960:2696): avc: denied { prog_load } for pid=10590 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.142665][ T28] audit: type=1400 audit(2000000099.960:2697): avc: denied { prog_load } for pid=10590 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.213869][ T28] audit: type=1400 audit(2000000099.960:2698): avc: denied { open } for pid=10590 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 285.273091][ T28] audit: type=1400 audit(2000000099.990:2699): avc: denied { create } for pid=10590 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 285.339384][ T28] audit: type=1400 audit(2000000099.990:2700): avc: denied { prog_load } for pid=10590 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.395331][ T28] audit: type=1400 audit(2000000099.990:2701): avc: denied { prog_load } for pid=10590 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.447842][ T28] audit: type=1400 audit(2000000099.990:2702): avc: denied { create } for pid=10590 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 285.499312][ T28] audit: type=1400 audit(2000000100.040:2703): avc: denied { create } for pid=10592 comm="syz.6.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 285.546556][ T28] audit: type=1400 audit(2000000100.040:2704): avc: denied { create } for pid=10592 comm="syz.6.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 286.321925][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 286.358521][T10685] gre1: entered promiscuous mode [ 286.364601][T10685] gre1: entered allmulticast mode [ 286.410473][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1898'. [ 286.461135][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1901'. [ 286.471545][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1901'. [ 286.481187][T10698] netlink: 'syz.6.1901': attribute type 14 has an invalid length. [ 286.593844][T10719] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1908'. [ 286.618093][T10719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=10719 comm=syz.6.1908 [ 286.725772][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1912'. [ 286.736240][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 286.749197][T10727] vlan2: entered promiscuous mode [ 286.754504][T10727] gretap0: entered promiscuous mode [ 287.527770][T10814] netlink: 'syz.5.1945': attribute type 1 has an invalid length. [ 287.570203][T10814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.624498][T10817] bond4: (slave veth5): Enslaving as an active interface with a down link [ 287.656212][T10814] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 287.671245][T10814] bond4: (slave batadv1): making interface the new active one [ 287.680159][T10814] batadv1: entered promiscuous mode [ 287.685760][T10814] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 288.560819][T10861] macvtap0: entered promiscuous mode [ 288.966536][T10863] syzkaller0: entered promiscuous mode [ 288.979555][T10863] syzkaller0: entered allmulticast mode [ 290.084380][ T28] kauditd_printk_skb: 1021 callbacks suppressed [ 290.084458][ T28] audit: type=1400 audit(2000000104.950:3726): avc: denied { open } for pid=10914 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 290.128077][ T28] audit: type=1400 audit(2000000104.980:3727): avc: denied { create } for pid=10914 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 290.170279][ T28] audit: type=1400 audit(2000000104.980:3728): avc: denied { open } for pid=10914 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 290.210252][ T28] audit: type=1400 audit(2000000104.980:3729): avc: denied { create } for pid=10914 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 290.250939][ T28] audit: type=1400 audit(2000000104.980:3730): avc: denied { create } for pid=10914 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 290.273280][ T28] audit: type=1400 audit(2000000105.020:3731): avc: denied { create } for pid=10916 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 290.294708][ T28] audit: type=1400 audit(2000000105.020:3732): avc: denied { open } for pid=10916 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 290.360644][ T28] audit: type=1400 audit(2000000105.020:3733): avc: denied { create } for pid=10916 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 290.404448][ T28] audit: type=1400 audit(2000000105.030:3734): avc: denied { create } for pid=10916 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 290.448153][ T28] audit: type=1400 audit(2000000105.030:3735): avc: denied { create } for pid=10916 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 290.483063][T10927] __nla_validate_parse: 1 callbacks suppressed [ 290.483085][T10927] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1983'. [ 290.636269][T10940] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.558096][T10999] xt_hashlimit: max too large, truncated to 1048576 [ 292.655095][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2009'. [ 292.730311][T11005] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2010'. [ 293.840139][T11045] xt_hashlimit: max too large, truncated to 1048576 [ 294.899369][T11103] netlink: 'syz.1.2043': attribute type 1 has an invalid length. [ 294.939870][T11109] netlink: 'syz.2.2042': attribute type 3 has an invalid length. [ 294.955664][T11105] netlink: 'syz.5.2044': attribute type 49 has an invalid length. [ 294.964261][T11103] bond1: entered promiscuous mode [ 294.988053][T11103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.003858][T11107] batman_adv: batadv0: Interface deactivated: dummy0 [ 295.010867][T11107] batman_adv: batadv0: Removing interface: dummy0 [ 295.046451][T11111] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.070399][T11111] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 295.080875][T11111] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 295.106025][T11103] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.134821][T11103] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 295.145864][ T28] kauditd_printk_skb: 373 callbacks suppressed [ 295.145884][ T28] audit: type=1400 audit(2000000110.000:4109): avc: denied { create } for pid=11114 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 295.180863][ T28] audit: type=1400 audit(2000000110.040:4110): avc: denied { prog_load } for pid=11114 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 295.201841][ T28] audit: type=1400 audit(2000000110.040:4111): avc: denied { open } for pid=11114 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 295.251781][ T28] audit: type=1400 audit(2000000110.040:4112): avc: denied { open } for pid=11114 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 295.309443][ T28] audit: type=1400 audit(2000000110.040:4113): avc: denied { read } for pid=11114 comm="syz.5.2047" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 295.346542][ T28] audit: type=1400 audit(2000000110.050:4114): avc: denied { create } for pid=11114 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 295.400090][ T28] audit: type=1400 audit(2000000110.050:4115): avc: denied { open } for pid=11114 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 295.439328][ T28] audit: type=1400 audit(2000000110.050:4116): avc: denied { read } for pid=11114 comm="syz.5.2047" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 295.462077][ T28] audit: type=1400 audit(2000000110.050:4117): avc: denied { open } for pid=11114 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 295.483627][ T28] audit: type=1400 audit(2000000110.050:4118): avc: denied { execute } for pid=11114 comm="syz.5.2047" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 295.716271][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 295.726599][T11164] netlink: 'syz.4.2066': attribute type 13 has an invalid length. [ 295.743304][T11164] netlink: 'syz.4.2066': attribute type 17 has an invalid length. [ 295.760289][T11164] lo: left promiscuous mode [ 295.771062][T11164] lo: left allmulticast mode [ 295.783021][T11164] tunl0: left promiscuous mode [ 295.795430][T11164] tunl0: left allmulticast mode [ 295.805225][T11164] gre0: left promiscuous mode [ 295.810203][T11164] gre0: left allmulticast mode [ 295.816612][T11164] gretap0: left promiscuous mode [ 295.821855][T11164] gretap0: left allmulticast mode [ 295.830581][T11164] erspan0: left promiscuous mode [ 295.835730][T11164] erspan0: left allmulticast mode [ 295.844386][T11164] ip_vti0: left promiscuous mode [ 295.849676][T11164] ip_vti0: left allmulticast mode [ 295.857196][T11164] sit0: left promiscuous mode [ 295.876368][T11164] bridge0: left allmulticast mode [ 295.884080][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.893132][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.903031][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.954355][T11164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.967501][T11164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.984283][T11164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.997177][T11164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.012842][T11164] veth1_macvtap: left promiscuous mode [ 296.019402][T11164] veth0_macvtap: left promiscuous mode [ 296.026064][T11164] veth0_macvtap: entered promiscuous mode [ 296.039639][T11164] veth1_macvtap: entered promiscuous mode [ 296.051960][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.067118][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.084957][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.096682][T11164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.110805][T11164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.125793][T11164] ip6erspan0: left allmulticast mode [ 296.135884][T11164] bond2: left promiscuous mode [ 296.141129][T11164] bond2: left allmulticast mode [ 296.146476][T11164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.156720][T11164] bond3: left promiscuous mode [ 296.162318][T11164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.195837][T11164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.204783][T11164] vxlan0: left promiscuous mode [ 296.209842][T11164] vxlan0: left allmulticast mode [ 296.229555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.236692][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.246443][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.253647][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.313848][ T5432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.324186][ T5432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.358846][ T49] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 296.368933][ T5432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.395589][ T5432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.423714][ T4590] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.476340][T11193] netlink: 'syz.5.2075': attribute type 4 has an invalid length. [ 296.488960][ T4590] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 296.504846][ T4590] bond4: (slave veth0_to_bond): making interface the new active one [ 296.525563][ T4590] bond4: active interface up! [ 296.530444][T11195] netlink: 'syz.5.2075': attribute type 4 has an invalid length. [ 296.976688][T11217] batman_adv: batadv0: Interface deactivated: dummy0 [ 296.988650][T11217] batman_adv: batadv0: Removing interface: dummy0 [ 297.376696][T11210] syz.2.2080 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 297.441200][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.2.2080 Not tainted syzkaller #0 PREEMPT(lazy) [ 297.441235][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.441253][T11210] Call Trace: [ 297.441262][T11210] [ 297.441272][T11210] __dump_stack+0x1d/0x30 [ 297.441336][T11210] dump_stack_lvl+0x95/0xd0 [ 297.441402][T11210] dump_stack+0x15/0x1b [ 297.441427][T11210] dump_header+0x80/0x240 [ 297.441472][T11210] oom_kill_process+0x295/0x350 [ 297.441600][T11210] out_of_memory+0x981/0xbc0 [ 297.441704][T11210] try_charge_memcg+0x621/0xa00 [ 297.441808][T11210] __memcg_kmem_charge_page+0x199/0x3a0 [ 297.441859][T11210] __alloc_frozen_pages_noprof+0x18a/0x350 [ 297.441892][T11210] alloc_pages_mpol+0xa9/0x1d0 [ 297.441932][T11210] alloc_pages_noprof+0x8f/0x140 [ 297.442004][T11210] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 297.442045][T11210] __kvmalloc_node_noprof+0x3a0/0x590 [ 297.442082][T11210] ? futex_hash_allocate+0x192/0x920 [ 297.442132][T11210] ? futex_hash_allocate+0x192/0x920 [ 297.442173][T11210] ? futex_hash_allocate+0x192/0x920 [ 297.442246][T11210] futex_hash_allocate+0x192/0x920 [ 297.442269][T11210] ? cap_task_prctl+0x13f/0x6b0 [ 297.442303][T11210] futex_hash_prctl+0xd8/0xf0 [ 297.442329][T11210] __se_sys_prctl+0x4f4/0x13b0 [ 297.442417][T11210] __x64_sys_prctl+0x67/0x80 [ 297.442506][T11210] x64_sys_call+0x2533/0x3020 [ 297.442539][T11210] do_syscall_64+0x136/0x3c0 [ 297.442583][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.442613][T11210] RIP: 0033:0x7f8ec10fde59 [ 297.442674][T11210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.442698][T11210] RSP: 002b:00007f8ebfb57028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 297.442740][T11210] RAX: ffffffffffffffda RBX: 00007f8ec1385fa0 RCX: 00007f8ec10fde59 [ 297.442754][T11210] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 297.442767][T11210] RBP: 00007f8ec1193e6f R08: 0000000000000000 R09: 0000000000000000 [ 297.442780][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.442792][T11210] R13: 00007f8ec1386038 R14: 00007f8ec1385fa0 R15: 00007ffd4eac2378 [ 297.442818][T11210] [ 297.447571][T11210] memory: usage 285168kB, limit 307200kB, failcnt 221 [ 297.690678][T11210] memory+swap: usage 179312kB, limit 9007199254740988kB, failcnt 0 [ 297.746803][T11210] kmem: usage 137012kB, limit 9007199254740988kB, failcnt 0 [ 297.780782][T11210] Memory cgroup stats for /syz2: [ 297.781260][T11210] cache 860160 [ 297.816292][T11210] rss 114688 [ 297.830281][T11210] shmem 0 [ 297.836820][T11210] mapped_file 94208 [ 297.847708][T11210] dirty 32768 [ 297.860774][T11210] writeback 0 [ 297.873815][T11210] workingset_refault_anon 76 [ 297.893994][T11210] workingset_refault_file 504 [ 297.921920][T11210] swap 749568 [ 297.929767][T11210] swapcached 1118208 [ 297.938253][T11210] pgpgin 269264 [ 297.946318][T11210] pgpgout 269021 [ 297.952920][T11210] pgfault 285160 [ 297.963682][T11210] pgmajfault 49 [ 297.972963][T11210] inactive_anon 57344 [ 297.987473][T11210] active_anon 77824 [ 297.998510][T11210] inactive_file 811008 [ 298.009818][T11210] active_file 49152 [ 298.019454][T11210] unevictable 0 [ 298.033969][T11210] hierarchical_memory_limit 314572800 [ 298.058649][T11210] hierarchical_memsw_limit 9223372036854771712 [ 298.070495][T11210] total_cache 860160 [ 298.075977][T11210] total_rss 114688 [ 298.083438][T11210] total_shmem 0 [ 298.092896][T11210] total_mapped_file 94208 [ 298.107517][T11210] total_dirty 32768 [ 298.117484][T11210] total_writeback 0 [ 298.121800][T11270] FAULT_INJECTION: forcing a failure. [ 298.121800][T11270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.128680][T11210] total_workingset_refault_anon 76 [ 298.147430][T11270] CPU: 0 UID: 0 PID: 11270 Comm: syz.5.2099 Not tainted syzkaller #0 PREEMPT(lazy) [ 298.147491][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.147533][T11270] Call Trace: [ 298.147539][T11270] [ 298.147553][T11270] __dump_stack+0x1d/0x30 [ 298.147578][T11270] dump_stack_lvl+0x95/0xd0 [ 298.147598][T11270] dump_stack+0x15/0x1b [ 298.147618][T11270] should_fail_ex+0x25e/0x270 [ 298.147673][T11270] should_fail+0xb/0x20 [ 298.147701][T11270] should_fail_usercopy+0x1a/0x20 [ 298.147760][T11270] _copy_to_user+0x20/0xa0 [ 298.147785][T11270] simple_read_from_buffer+0xb5/0x130 [ 298.147818][T11270] proc_fail_nth_read+0x10e/0x150 [ 298.147894][T11270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.147922][T11270] vfs_read+0x18e/0x7c0 [ 298.147945][T11270] ? __rcu_read_unlock+0x4e/0x70 [ 298.147975][T11270] ? __fget_files+0x184/0x1c0 [ 298.148002][T11270] ? mutex_lock+0x57/0x90 [ 298.148064][T11270] ksys_read+0xdc/0x1a0 [ 298.148090][T11270] __x64_sys_read+0x40/0x50 [ 298.148137][T11270] x64_sys_call+0x2886/0x3020 [ 298.148168][T11270] do_syscall_64+0x136/0x3c0 [ 298.148263][T11270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.148293][T11270] RIP: 0033:0x7f1aa11be68e [ 298.148313][T11270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.148337][T11270] RSP: 002b:00007f1a9fc56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.148360][T11270] RAX: ffffffffffffffda RBX: 00007f1a9fc576c0 RCX: 00007f1aa11be68e [ 298.148418][T11270] RDX: 000000000000000f RSI: 00007f1a9fc570a0 RDI: 0000000000000003 [ 298.148509][T11270] RBP: 00007f1a9fc57090 R08: 0000000000000000 R09: 0000000000000000 [ 298.148522][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.148588][T11270] R13: 00007f1aa1486038 R14: 00007f1aa1485fa0 R15: 00007ffd49a32798 [ 298.148614][T11270] [ 298.188764][T11210] total_workingset_refault_file 504 [ 298.349360][T11210] total_swap 749568 [ 298.353216][T11210] total_swapcached 1118208 [ 298.357823][T11210] total_pgpgin 269264 [ 298.361994][T11210] total_pgpgout 269021 [ 298.366094][T11210] total_pgfault 285160 [ 298.370218][T11210] total_pgmajfault 49 [ 298.374286][T11210] total_inactive_anon 57344 [ 298.378975][T11210] total_active_anon 77824 [ 298.383436][T11210] total_inactive_file 811008 [ 298.388325][T11210] total_active_file 49152 [ 298.392809][T11210] total_unevictable 0 [ 298.397081][T11210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2080,pid=11209,uid=0 [ 298.439682][T11210] Memory cgroup out of memory: Killed process 11210 (syz.2.2080) total-vm:94048kB, anon-rss:1348kB, file-rss:21608kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 298.565123][T11294] bridge_slave_1: entered allmulticast mode [ 298.861063][ T49] batadv1: left promiscuous mode [ 299.307741][ T4686] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 299.344682][ T4686] CPU: 1 UID: 0 PID: 4686 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 299.344719][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.344792][ T4686] Call Trace: [ 299.344799][ T4686] [ 299.344809][ T4686] __dump_stack+0x1d/0x30 [ 299.344838][ T4686] dump_stack_lvl+0x95/0xd0 [ 299.344869][ T4686] dump_stack+0x15/0x1b [ 299.344955][ T4686] dump_header+0x80/0x240 [ 299.344984][ T4686] oom_kill_process+0x295/0x350 [ 299.345024][ T4686] out_of_memory+0x981/0xbc0 [ 299.345067][ T4686] try_charge_memcg+0x621/0xa00 [ 299.345187][ T4686] charge_memcg+0x6d/0x120 [ 299.345220][ T4686] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 299.345274][ T4686] swap_cache_alloc_folio+0x47b/0x5e0 [ 299.345315][ T4686] swap_cluster_readahead+0x2b1/0x460 [ 299.345453][ T4686] swapin_readahead+0xd8/0x8a0 [ 299.345555][ T4686] ? tick_program_event+0x79/0xc0 [ 299.345589][ T4686] ? _raw_spin_unlock+0x9/0x30 [ 299.345611][ T4686] ? __rcu_read_unlock+0x4e/0x70 [ 299.345645][ T4686] ? swap_cache_get_folio+0x1f7/0x200 [ 299.345762][ T4686] do_swap_page+0x2a2/0x1ec0 [ 299.345793][ T4686] ? __schedule+0x799/0xd10 [ 299.345873][ T4686] ? __rcu_read_lock+0x36/0x50 [ 299.345899][ T4686] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 299.345928][ T4686] handle_mm_fault+0xb3c/0x2da0 [ 299.345986][ T4686] do_user_addr_fault+0x634/0x1060 [ 299.346060][ T4686] ? trace_page_fault_user+0x1f/0xa0 [ 299.346101][ T4686] exc_page_fault+0x62/0xa0 [ 299.346154][ T4686] asm_exc_page_fault+0x26/0x30 [ 299.346176][ T4686] RIP: 0033:0x7f1aa11b8fd7 [ 299.346192][ T4686] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 299.346214][ T4686] RSP: 002b:00007ffd49a32a90 EFLAGS: 00010202 [ 299.346297][ T4686] RAX: 0000000000000000 RBX: 0000555567238500 RCX: 00007f1aa11b8fd7 [ 299.346403][ T4686] RDX: 00007ffd49a32ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.346416][ T4686] RBP: 00007ffd49a32b3c R08: 0000000000000000 R09: 0000000000000000 [ 299.346439][ T4686] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 299.346452][ T4686] R13: 00000000000927c0 R14: 0000000000048f3b R15: 00007ffd49a32b90 [ 299.346532][ T4686] [ 299.358870][ T4686] memory: usage 307200kB, limit 307200kB, failcnt 119 [ 299.598632][ T4686] memory+swap: usage 231740kB, limit 9007199254740988kB, failcnt 0 [ 299.608321][ T4686] kmem: usage 224964kB, limit 9007199254740988kB, failcnt 0 [ 299.620736][ T4686] Memory cgroup stats for /syz5: [ 299.621210][ T4686] cache 12288 [ 299.638871][ T4686] rss 0 [ 299.641729][ T4686] shmem 12288 [ 299.645191][ T4686] mapped_file 0 [ 299.648768][ T4686] dirty 0 [ 299.651812][ T4686] writeback 0 [ 299.655165][ T4686] workingset_refault_anon 428 [ 299.660048][ T4686] workingset_refault_file 0 [ 299.664717][ T4686] swap 204800 [ 299.668130][ T4686] swapcached 1957888 [ 299.685203][ T4686] pgpgin 263697 [ 299.692482][ T4686] pgpgout 263694 [ 299.696142][ T4686] pgfault 240428 [ 299.708614][ T4686] pgmajfault 71 [ 299.712962][ T4686] inactive_anon 0 [ 299.716864][ T4686] active_anon 0 [ 299.721815][T11334] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 299.730085][ T4686] inactive_file 0 [ 299.734110][ T4686] active_file 0 [ 299.742294][ T4686] unevictable 12288 [ 299.747740][T11334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.754596][ T4686] hierarchical_memory_limit 314572800 [ 299.760307][ T4686] hierarchical_memsw_limit 9223372036854771712 [ 299.768721][ T4686] total_cache 12288 [ 299.772904][ T4686] total_rss 0 [ 299.776345][ T4686] total_shmem 12288 [ 299.780451][ T4686] total_mapped_file 0 [ 299.784719][ T4686] total_dirty 0 [ 299.793906][T11334] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 299.803243][ T4686] total_writeback 0 [ 299.807159][ T4686] total_workingset_refault_anon 428 [ 299.813088][ T4686] total_workingset_refault_file 0 [ 299.818167][ T4686] total_swap 204800 [ 299.822084][ T4686] total_swapcached 1957888 [ 299.826575][ T4686] total_pgpgin 263714 [ 299.830656][ T4686] total_pgpgout 263711 [ 299.834812][ T4686] total_pgfault 240447 [ 299.839023][ T4686] total_pgmajfault 71 [ 299.843081][ T4686] total_inactive_anon 0 [ 299.847287][ T4686] total_active_anon 0 [ 299.851467][ T4686] total_inactive_file 0 [ 299.855689][ T4686] total_active_file 0 [ 299.857547][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 299.859797][ T4686] total_unevictable 12288 [ 299.871364][T11334] bridge0: port 1(veth1_macvtap) entered blocking state [ 299.873140][ T4686] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2118,pid=11316,uid=0 [ 299.895209][ T4686] Memory cgroup out of memory: Killed process 11316 (syz.5.2118) total-vm:94048kB, anon-rss:1244kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 299.916777][T11334] bridge0: port 1(veth1_macvtap) entered disabled state [ 299.924161][T11334] veth1_macvtap: entered allmulticast mode [ 299.930653][T11334] veth1_macvtap: left allmulticast mode [ 300.008610][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.015900][ C0] bridge0: topology change detected, propagating [ 300.022361][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.029635][ C0] bridge0: topology change detected, propagating [ 300.035438][T11348] netlink: 'syz.6.2129': attribute type 9 has an invalid length. [ 300.044429][T11348] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2129'. [ 300.145017][T11366] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 300.157691][ T28] kauditd_printk_skb: 439 callbacks suppressed [ 300.157709][ T28] audit: type=1400 audit(2000000115.020:4558): avc: denied { open } for pid=11363 comm="syz.6.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 300.163081][T11366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.168271][ T28] audit: type=1400 audit(2000000115.030:4559): avc: denied { map_create } for pid=11363 comm="syz.6.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.260893][T11373] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2137'. [ 300.306362][ T28] audit: type=1400 audit(2000000115.080:4560): avc: denied { map_create } for pid=11363 comm="syz.6.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.326129][ T28] audit: type=1400 audit(2000000115.080:4561): avc: denied { prog_load } for pid=11363 comm="syz.6.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.345664][ T28] audit: type=1400 audit(2000000115.080:4562): avc: denied { create } for pid=11363 comm="syz.6.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 300.365667][ T28] audit: type=1400 audit(2000000115.080:4563): avc: denied { prog_load } for pid=11358 comm="syz.2.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.384904][ T28] audit: type=1400 audit(2000000115.080:4564): avc: denied { create } for pid=11364 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=0 [ 300.405618][ T28] audit: type=1400 audit(2000000115.080:4565): avc: denied { create } for pid=11364 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 300.437027][ T28] audit: type=1400 audit(2000000115.080:4566): avc: denied { map_create } for pid=11364 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 300.478784][T11369] ================================================================== [ 300.486972][T11369] BUG: KCSAN: data-race in touch_atime / touch_atime [ 300.493713][T11369] [ 300.496066][T11369] write to 0xffff8881049e2c70 of 4 bytes by task 11360 on cpu 1: [ 300.503816][T11369] touch_atime+0x1cb/0x300 [ 300.508281][T11369] shmem_file_splice_read+0x53c/0x590 [ 300.513707][T11369] splice_direct_to_actor+0x261/0x680 [ 300.519123][T11369] do_splice_direct+0x119/0x1a0 [ 300.524015][T11369] do_sendfile+0x37d/0x640 [ 300.528469][T11369] __x64_sys_sendfile64+0x105/0x150 [ 300.533694][T11369] x64_sys_call+0x2dc4/0x3020 [ 300.539076][T11369] do_syscall_64+0x136/0x3c0 [ 300.539153][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.544100][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.557513][T11369] [ 300.559861][T11369] read to 0xffff8881049e2c70 of 4 bytes by task 11369 on cpu 0: [ 300.567515][T11369] touch_atime+0x162/0x300 [ 300.571967][T11369] shmem_file_splice_read+0x53c/0x590 [ 300.577511][T11369] splice_direct_to_actor+0x261/0x680 [ 300.582964][T11369] do_splice_direct+0x119/0x1a0 [ 300.587850][T11369] do_sendfile+0x37d/0x640 [ 300.592299][T11369] __x64_sys_sendfile64+0x105/0x150 [ 300.597528][T11369] x64_sys_call+0x2dc4/0x3020 [ 300.602269][T11369] do_syscall_64+0x136/0x3c0 [ 300.606901][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.612838][T11369] [ 300.615179][T11369] value changed: 0x14440557 -> 0x14dc9bd7 [ 300.620914][T11369] [ 300.623258][T11369] Reported by Kernel Concurrency Sanitizer on: [ 300.629425][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.2.2133 Not tainted syzkaller #0 PREEMPT(lazy) [ 300.638910][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.648981][T11369] ================================================================== [ 300.662155][ T28] audit: type=1400 audit(2000000115.080:4567): avc: denied { execmem } for pid=11364 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 300.760815][T11365] syz.6.2135 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 300.806326][T11365] CPU: 1 UID: 0 PID: 11365 Comm: syz.6.2135 Not tainted syzkaller #0 PREEMPT(lazy) [ 300.806384][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.806402][T11365] Call Trace: [ 300.806412][T11365] [ 300.806425][T11365] __dump_stack+0x1d/0x30 [ 300.806458][T11365] dump_stack_lvl+0x95/0xd0 [ 300.806484][T11365] dump_stack+0x15/0x1b [ 300.806513][T11365] dump_header+0x80/0x240 [ 300.806615][T11365] oom_kill_process+0x295/0x350 [ 300.806676][T11365] out_of_memory+0x981/0xbc0 [ 300.806719][T11365] try_charge_memcg+0x621/0xa00 [ 300.806813][T11365] ? __rcu_read_unlock+0x4e/0x70 [ 300.806923][T11365] __memcg_kmem_charge_page+0x199/0x3a0 [ 300.806983][T11365] __alloc_frozen_pages_noprof+0x18a/0x350 [ 300.807094][T11365] alloc_pages_mpol+0xa9/0x1d0 [ 300.807136][T11365] alloc_pages_noprof+0x8f/0x140 [ 300.807175][T11365] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 300.807227][T11365] __kvmalloc_node_noprof+0x3a0/0x590 [ 300.807277][T11365] ? futex_hash_allocate+0x192/0x920 [ 300.807305][T11365] ? futex_hash_allocate+0x192/0x920 [ 300.807327][T11365] ? futex_hash_allocate+0x192/0x920 [ 300.807442][T11365] futex_hash_allocate+0x192/0x920 [ 300.807465][T11365] ? cap_task_prctl+0x13f/0x6b0 [ 300.807499][T11365] futex_hash_prctl+0xd8/0xf0 [ 300.807583][T11365] __se_sys_prctl+0x4f4/0x13b0 [ 300.807622][T11365] __x64_sys_prctl+0x67/0x80 [ 300.807653][T11365] x64_sys_call+0x2533/0x3020 [ 300.807737][T11365] do_syscall_64+0x136/0x3c0 [ 300.807774][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.807873][T11365] RIP: 0033:0x7f7c1a7cde59 [ 300.807891][T11365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.807913][T11365] RSP: 002b:00007f7c19227028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 300.807940][T11365] RAX: ffffffffffffffda RBX: 00007f7c1aa55fa0 RCX: 00007f7c1a7cde59 [ 300.807982][T11365] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 300.807999][T11365] RBP: 00007f7c1a863e6f R08: 0000000000000000 R09: 0000000000000000 [ 300.808013][T11365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.808097][T11365] R13: 00007f7c1aa56038 R14: 00007f7c1aa55fa0 R15: 00007ffc32d77ae8 [ 300.808119][T11365] [ 301.035185][T11365] memory: usage 307200kB, limit 307200kB, failcnt 259 [ 301.044175][T11365] memory+swap: usage 319276kB, limit 9007199254740988kB, failcnt 0 [ 301.066195][T11365] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 301.073705][T11365] Memory cgroup stats for /syz6: [ 301.074009][T11365] cache 0 [ 301.082022][T11365] rss 4096 [ 301.085153][T11365] shmem 0 [ 301.088116][T11365] mapped_file 0 [ 301.091730][T11365] dirty 0 [ 301.094834][T11365] writeback 0 [ 301.098149][T11365] workingset_refault_anon 217 [ 301.102883][T11365] workingset_refault_file 0 [ 301.107433][T11365] swap 12365824 [ 301.111199][T11365] swapcached 19230720 [ 301.115248][T11365] pgpgin 158589 [ 301.118853][T11365] pgpgout 158588 [ 301.122466][T11365] pgfault 169430 [ 301.126110][T11365] pgmajfault 66 [ 301.129909][T11365] inactive_anon 0 [ 301.133674][T11365] active_anon 4096 [ 301.137415][T11365] inactive_file 0 [ 301.141219][T11365] active_file 0 [ 301.158636][T11365] unevictable 0 [ 301.162194][T11365] hierarchical_memory_limit 314572800 [ 301.167600][T11365] hierarchical_memsw_limit 9223372036854771712 [ 301.173987][T11365] total_cache 0 [ 301.198606][T11365] total_rss 4096 [ 301.202220][T11365] total_shmem 0 [ 301.205708][T11365] total_mapped_file 0 [ 301.209863][T11365] total_dirty 0 [ 301.213381][T11365] total_writeback 0 [ 301.217289][T11365] total_workingset_refault_anon 217 [ 301.238599][T11365] total_workingset_refault_file 0 [ 301.243702][T11365] total_swap 12365824 [ 301.247734][T11365] total_swapcached 19230720 [ 301.252337][T11365] total_pgpgin 158589 [ 301.270047][T11365] total_pgpgout 158588 [ 301.280819][T11365] total_pgfault 169430 [ 301.285139][T11365] total_pgmajfault 66 [ 301.289332][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 301.299504][T11365] total_inactive_anon 0 [ 301.308277][T11365] total_active_anon 4096 [ 301.317262][T11365] total_inactive_file 0 [ 301.326034][T11365] total_active_file 0 [ 301.334891][T11365] total_unevictable 0 [ 301.340720][T11365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2135,pid=11363,uid=0 [ 301.361621][T11365] Memory cgroup out of memory: Killed process 11363 (syz.6.2135) total-vm:94048kB, anon-rss:1240kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 308.968904][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!