last executing test programs: 6.667354282s ago: executing program 4 (id=115): pipe2$9p(&(0x7f0000000240), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'w\x00'}, 0x8) unshare(0x400) fstatfs(0xffffffffffffffff, 0x0) 6.580008697s ago: executing program 4 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_clone3(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000001c0)="0d2e88aae7f2c2f376002794cbfae2094875a23ba1f91c142747351aaa2d3885e1", 0x21}], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="016fbfbd7000fedbdf250900000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdlo=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRES16=r1], 0x15) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000680)=@delchain={0x1abc, 0x65, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x0, 0xd}, {0x0, 0xc}}, [@f_rsvp6={{0xa}, {0x10d0, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_POLICE={0x1048, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0xd, 0x4, 0xfb, 0x5, 0xdc, 0x5, 0x2ca, 0x5, 0x3, 0x1, 0x3, 0xffffff80, 0x9, 0x7, 0x7, 0x9, 0x4, 0x0, 0x4, 0xaf1, 0x7, 0x9e1, 0x10000, 0xb1, 0xef1, 0x101, 0xc5, 0x6, 0x2, 0x5, 0x7, 0x3, 0x3, 0x8, 0x8000, 0x5, 0x8, 0x0, 0x6, 0x9, 0xc, 0x288, 0xae5, 0x7ff, 0x6, 0x81, 0x2, 0x6, 0x7, 0x1, 0xce8, 0x0, 0x0, 0x100, 0xfffff000, 0x0, 0x0, 0x59, 0x3ff, 0x7, 0x3, 0x3, 0x9, 0x2, 0x1, 0x1ff, 0x8, 0x80, 0x1, 0x86e, 0x27c, 0x7, 0x1, 0x0, 0x3, 0x7f, 0x1, 0x8, 0x3ff, 0x4, 0x4192, 0x6, 0x5, 0x6, 0x1ff, 0x0, 0x8, 0x2, 0xfffffff8, 0x3, 0xc, 0x5, 0x9, 0x4, 0x4, 0x3, 0x0, 0x10, 0x5, 0x6, 0x9, 0x80000000, 0x1, 0xff, 0x8, 0x4, 0x1, 0x7fffffff, 0x0, 0x7f, 0x3ff, 0x1, 0x5, 0x4, 0x5, 0xfff, 0x6, 0x3, 0x9, 0x6, 0x67, 0x2387f27f, 0x7, 0x4, 0xe, 0xffffffff, 0x2, 0x40, 0x2, 0x8000, 0xb, 0x4, 0x6, 0xfff, 0x2, 0xbe, 0x6, 0x0, 0x6, 0x97f7, 0x9, 0x0, 0x6, 0xff, 0x5, 0x80000000, 0xc, 0x9, 0x4cc, 0x2, 0x30df, 0x1000, 0xf, 0x6, 0x7, 0xb, 0x3, 0x2, 0x40, 0x10, 0x6, 0x81, 0x6, 0x68, 0x8, 0x4, 0x6, 0x91, 0x6, 0x8, 0xfffffffe, 0x4, 0x5, 0x2, 0x9, 0x4, 0x4b5a, 0xf, 0x800, 0xff8, 0xfffffffc, 0x7, 0x6, 0x4, 0xfff, 0xfffff53b, 0x1, 0x0, 0x3, 0x10, 0xbc1, 0x9, 0x5, 0xfff, 0x1, 0x3, 0xfffffffe, 0x8001, 0x3, 0x8001, 0x3, 0x0, 0x1, 0x72a9, 0x0, 0x4, 0xfffffdcb, 0x0, 0x8, 0x6, 0x7fff, 0x10, 0x40, 0x9f6d, 0x7ff, 0x4, 0x66, 0x800, 0xf237, 0xfffffff8, 0xffffffff, 0x2, 0x6, 0x6, 0x80000001, 0x84a5, 0xe77, 0x4, 0x9, 0x5, 0x5, 0x8, 0xffff, 0xfffffffc, 0x10, 0x9, 0x3, 0x7fffffff, 0x3, 0x9, 0x7, 0x764, 0xdb5, 0x8, 0x5b, 0x7, 0xd7ef, 0x10, 0x7, 0x3, 0xfffffffe, 0x5, 0x5, 0x3, 0x40]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x4, 0x7, 0x9, 0x1, 0x4, 0x2, 0x9, 0xfff, 0x7, 0x2, 0xfff, 0x7f21, 0xffff, 0x0, 0x10, 0x7, 0x6, 0x6, 0x200, 0x9, 0x7, 0x8, 0x9, 0xc, 0x7fff, 0xf, 0x2, 0x1, 0x470, 0x3, 0x8c3, 0xfff, 0x80, 0x1ff, 0x8, 0x4, 0x3ff, 0x800, 0x7, 0x8, 0x2, 0xffffff78, 0x3, 0xfffffffb, 0x83c, 0xfffffffb, 0xa490, 0x200, 0x5, 0x10, 0x9, 0x200, 0x6, 0x5, 0x100, 0x6, 0x4, 0x8, 0x1, 0x1, 0x5d7a, 0x7, 0x3e57, 0x4, 0x0, 0x7, 0x7, 0x7, 0x3, 0x0, 0x81, 0x1, 0x4, 0xe05, 0x3, 0x4, 0x6, 0xffffff7d, 0x7, 0x1, 0x8001, 0x7, 0xcee, 0x0, 0x4, 0xe, 0xc2, 0x9, 0x8, 0x5, 0x2, 0x5d4f7b5c, 0xe, 0xab, 0x40000000, 0xfffffff8, 0x7fff, 0x23af, 0x8a3, 0x8, 0x8, 0x9, 0x1, 0x30f, 0xffff0000, 0x3ff, 0xb805, 0x1308, 0x4, 0x6, 0x9, 0x3, 0xaff, 0xff, 0x80000001, 0x3, 0x80000000, 0x5, 0x0, 0x400, 0x7, 0x23, 0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0xac6, 0x10, 0x9, 0x5775135b, 0x2, 0x6, 0xb952, 0x18000000, 0x8, 0x1, 0xd4, 0x9, 0x5, 0x8, 0x2, 0x9, 0x4, 0x8, 0x3e06, 0xe, 0x81, 0x8, 0x4, 0x3c, 0xc, 0x3, 0x8000, 0x8002, 0x58, 0x5, 0x3, 0x4, 0x3, 0x6, 0x1000, 0x9, 0x3, 0x267, 0xc8, 0x4, 0x8, 0x4, 0x11bd, 0x7, 0x3, 0x6, 0x8, 0x9, 0x5, 0xc, 0x7, 0x9, 0xfff, 0xb8d7, 0xe, 0x2, 0x6, 0x5, 0x1, 0x5c, 0xd0, 0x500000, 0x9, 0x9, 0x200, 0xaaa, 0x7, 0x0, 0x1, 0x61c62c34, 0x5, 0x4, 0xfffffffa, 0x4, 0x5, 0x2, 0x8000, 0x3, 0xffff8c01, 0x323d, 0x9, 0x2, 0x4, 0x8, 0x4, 0x9e0, 0x10, 0x8e5e, 0x100, 0xfff, 0x9, 0x2, 0x7, 0xe8, 0x7, 0x5, 0x7, 0x3, 0x89, 0xaea4, 0x1, 0x1, 0xc, 0x369, 0x235, 0x9, 0x4, 0xd12, 0x0, 0x4, 0x8, 0x4, 0x89, 0x6, 0x9, 0x2, 0x4226, 0x976, 0x13, 0xd, 0x4, 0x3, 0x0, 0x10000, 0x9d, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x1ff, 0xf90, 0x1, 0x180f, 0x4, 0x83, 0x237971d2, 0x3, 0x5, 0x5, 0x5, 0x0, 0x5, 0x0, 0x8, 0x0, 0x8000, 0x200, 0xf0fd, 0xffff, 0x6, 0x4, 0x7f, 0x100, 0xffff, 0x422c, 0x5, 0x4, 0x3ff, 0x6, 0x0, 0xffff325e, 0x2, 0xd7, 0x1000, 0xfffffffa, 0x4578, 0x0, 0x0, 0x0, 0x30, 0x64e5db79, 0xa1c, 0x7f, 0xbc7e, 0x2, 0x7, 0x3, 0x1, 0x6, 0x6, 0x6b, 0x10001, 0xe9, 0x8001, 0x5, 0xfffff3cf, 0x9, 0x0, 0x6, 0x0, 0x2, 0x5, 0x9, 0x1000, 0x2c, 0x8000, 0xffffffff, 0x3, 0x8f9, 0x0, 0x2, 0x8, 0x3, 0x200, 0x1, 0xc, 0xfff, 0x9, 0x5, 0x79, 0x9, 0x5e68, 0x0, 0x7, 0x0, 0x9, 0xc7d, 0x4a, 0x7, 0x400, 0x2, 0x5, 0xf03, 0x0, 0x2, 0xfffffffe, 0x1, 0x3, 0x9, 0x3, 0x0, 0x4, 0x6, 0x101, 0x1, 0x4, 0x6, 0x9, 0x3, 0x6, 0x2000, 0xb3e3, 0x41, 0x8, 0x8, 0x7fffffff, 0xf2bb, 0x1ff, 0x3, 0xe, 0x0, 0x5, 0x8, 0xd, 0x7, 0x1, 0xb3b3, 0x1, 0x3, 0x8, 0x5, 0x81, 0x8, 0x9, 0x5, 0x4, 0x10, 0xc9b, 0x8, 0xddd, 0x5, 0x698, 0x3c, 0x8, 0x3, 0x7, 0x0, 0xbe2, 0x8, 0x92, 0x2, 0x7f, 0x80000001, 0x6, 0x1, 0x8, 0x3, 0x6fa3c56d, 0x0, 0x7, 0x8, 0xe, 0x0, 0x2, 0xb405, 0x6, 0x736a3529, 0x5a, 0xe9e5, 0x7, 0x3, 0xf1, 0x8, 0xeefb, 0x7, 0x7, 0x3, 0x0, 0xffff, 0x56d, 0xbc, 0x7f, 0xffffff80, 0x4, 0x8, 0x8, 0x7, 0xf3, 0x1, 0x8, 0xc17, 0x7, 0x761, 0x5, 0xffff8000, 0x4, 0x8, 0x1000, 0x5, 0xfffffffc, 0x7, 0xf, 0x101, 0x2, 0x4, 0x0, 0x4, 0x3, 0x0, 0x101, 0x7, 0x0, 0x9, 0x4, 0xc, 0x81, 0x1, 0x401, 0x2, 0x0, 0x0, 0x8, 0xffffffff, 0x6, 0x10001, 0x1, 0x8, 0x0, 0x3, 0x3ff, 0x7b, 0xe, 0x8, 0x2, 0x80000000, 0xd, 0x6, 0x8, 0xffffffff, 0x5, 0x401, 0x80000000, 0x2, 0x800, 0xd, 0x200, 0x10000, 0x3, 0x9, 0x4, 0x6, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x314, 0x8000000, 0xffffffff, 0xa, 0xfffffffb, 0x1, 0xfe3b68b2, 0xb, 0x0, 0x0, 0x1, 0x2, 0x6, 0x0, 0x8001, 0xe, 0xffff, 0x7ff, 0x404, 0xe5a, 0x100, 0x5, 0x6, 0x2, 0x1000, 0x1, 0x8, 0x6, 0x4, 0x8ff3, 0x3, 0xc6, 0xe304, 0x5, 0x3ff, 0x99, 0xfffffff9, 0x75, 0x3, 0xf, 0x76c, 0xb, 0xd, 0xd85d, 0xb99, 0xffff, 0x0, 0x80, 0xe, 0x8000, 0xba, 0x401, 0x9, 0x8, 0x1136, 0x7, 0x8, 0xb, 0x40000000, 0xff, 0x8, 0x7, 0x3, 0x4, 0x0, 0x10, 0x9, 0x3, 0x2, 0x8, 0x3, 0x7f, 0xfdb8, 0x9, 0xd, 0x0, 0x200, 0x24c0, 0xa8, 0x65, 0x779, 0x5c, 0x3, 0x2000, 0xfffffff8, 0x34, 0x6, 0x8, 0x728, 0x81, 0x8, 0x6, 0x4, 0x80000001, 0x8, 0x9, 0x4, 0x50, 0x5, 0x2, 0x7, 0x9, 0x3cc, 0x1, 0x2c9, 0x258, 0xff, 0x6, 0xe7, 0x3, 0x7, 0x8, 0xf1, 0xe, 0x10000, 0x0, 0x8, 0x1, 0x6, 0x6, 0x3, 0x8, 0xf, 0xfffffffe, 0x8001, 0xfff, 0xfff, 0x36a7, 0x8, 0x7, 0x5, 0x400, 0x0, 0x6, 0xf8f, 0xfca785c3, 0x2, 0x8, 0x8, 0x4, 0x6, 0xb, 0x342, 0x9, 0x10001, 0x6, 0x4, 0x6, 0x5, 0x6, 0x3, 0x7fff, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x4, 0xe, 0x3, 0x2, 0x4, 0x8, 0x25, 0x2, 0x7, 0xaa08, 0x1, 0x2, 0x5, 0x7, 0x4, 0xd8, 0x2, 0xfffffffb, 0x7, 0x3, 0x0, 0x5, 0x4, 0x6, 0x2, 0x6, 0x7f, 0x7, 0x80000001, 0x9, 0x3, 0x2, 0x6, 0x0, 0xa2, 0x5, 0x42d, 0x6e1e, 0x2, 0xfffffff5, 0x8, 0x0, 0x9, 0xf, 0x2, 0x2, 0x7897, 0x1, 0x4, 0x8, 0x0, 0x9, 0x5cca, 0x7, 0x0, 0x8, 0xca76, 0x8, 0x7fff, 0x81, 0x1, 0x6, 0x7, 0x9, 0x4, 0x1af4, 0x6, 0x6, 0x4, 0x9, 0x2, 0x4, 0x80000000, 0xc1, 0xfffffffd, 0x0, 0x5364, 0xff, 0x4, 0x8, 0x7fffffff, 0x9, 0xe, 0x2, 0xea, 0x3, 0x5, 0x6, 0x8, 0xd, 0x8001, 0x9, 0x7e, 0x6, 0x6, 0x200, 0x1ff, 0xa]}]}, @TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x3}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0xe509, 0x7}, {0xdd3, 0x4, 0x9}, 0x6c, 0x6, 0x3}}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_ACT={0x4}]}}, @f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x30, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xb5d5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xf}}]}}, @f_rsvp6={{0xa}, {0x58, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_POLICE={0x2c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x876}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}, @f_rsvp6={{0xa}, {0x48, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xf}}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xe}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @f_rsvp6={{0xa}, {0x8a8, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_POLICE={0x890, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x691, 0x6, 0x1, 0x2, 0x2, 0x0, 0x80, 0x7, 0x6, 0x2, 0x2, 0x10, 0xff, 0x6, 0x400, 0x3, 0x7, 0x6, 0x4, 0x3, 0x3, 0x86, 0xb, 0x2, 0x800, 0x5, 0xb, 0x4, 0x4, 0x4f50, 0x2, 0x1, 0xff, 0x1db1, 0x6, 0x7, 0xb, 0x4, 0x8, 0xa253a248, 0x10001, 0x6, 0x3, 0x3, 0x0, 0x6, 0x1, 0x8, 0xffff266a, 0x3, 0x2, 0x9, 0x7, 0xd272, 0x5, 0x5, 0x0, 0x80000001, 0x10000, 0xe30, 0x5, 0xa, 0x7cdd, 0x7, 0x9, 0x3, 0x9, 0xb2e, 0x2, 0x5, 0x2, 0x3e4, 0x1, 0x1, 0xbeef, 0xfffffff9, 0x8, 0x8, 0x1000, 0xf9, 0x6, 0x7f, 0x6, 0x7fffffff, 0x0, 0x1ed3, 0x6, 0xb428, 0x6, 0x1, 0x7a, 0x2, 0x9, 0x4, 0xf, 0x31, 0xa, 0x82, 0x441, 0x4a, 0x4, 0x9, 0xe, 0x71, 0xfffffff9, 0x6, 0x6f1, 0x8000, 0x6, 0x2, 0x4, 0xbb7, 0xce99, 0xf, 0xb0af, 0x0, 0x7, 0x7, 0xc7c, 0x9af, 0xfffffffe, 0x5, 0x2, 0x75e2, 0x1000, 0xfffffeff, 0xfffffffc, 0x1, 0x5, 0x84c, 0x9, 0x9, 0x5, 0x4, 0x1, 0x9, 0x7, 0x705, 0x7, 0x5, 0xdbd, 0x10001, 0x9, 0x8, 0x1, 0x2, 0x5c, 0x8001, 0x0, 0x3, 0x1, 0xfffffff9, 0x1, 0x3, 0x0, 0x400, 0x10, 0x5b4a, 0x1ff, 0x0, 0x3, 0xb6546694, 0x1, 0x0, 0xb1, 0x355, 0x400, 0x7, 0x4, 0xfa, 0x9, 0xbd8, 0x7, 0x1, 0x0, 0x10, 0x0, 0x40, 0x408, 0x7, 0xc7c0, 0x5, 0xfff, 0xf, 0xb11, 0x8, 0x1, 0x7fffffff, 0x858, 0x7, 0x0, 0x1, 0x7, 0xb11b, 0x80000001, 0x2, 0x4, 0x1000, 0x9, 0x7, 0x245, 0x2, 0x0, 0x6, 0xa15, 0x0, 0x1, 0x4, 0x100, 0x7, 0xffffffff, 0x1, 0x5, 0xfffffff9, 0x401, 0x13b9, 0x1, 0x0, 0x5654, 0x1, 0x3, 0x5, 0x2a6, 0x2707, 0x2, 0xeb, 0x0, 0x5, 0x7fff, 0x2, 0x1, 0x2, 0x7, 0xe, 0x9, 0x7, 0x309f, 0x8000, 0x56, 0x9, 0x4, 0xd, 0xe, 0x8, 0x8, 0x9, 0x0, 0x8, 0x9, 0x9, 0x401, 0x3aa67907, 0x8, 0x80000000, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE={0x404, 0x2, [0x100007, 0x5, 0x6, 0x8, 0x4, 0x8, 0xfffffff9, 0x10, 0xe25, 0x7, 0x7f, 0x3, 0x4, 0xffff8000, 0xd, 0x7, 0x4, 0x4, 0xc, 0x5, 0x7, 0x81, 0x7fff, 0x5, 0x3, 0xfffffff7, 0x8, 0x100, 0xe5, 0xffff, 0xfffff93d, 0xa, 0x9, 0x4, 0xeb74, 0x7, 0x2, 0x4, 0x6, 0xffffffff, 0xff, 0x1, 0x40000000, 0x8, 0x9, 0x8, 0x1, 0xf8000000, 0x5, 0xfffffa24, 0x2, 0x9, 0x0, 0x388f, 0x3, 0xc, 0x80000001, 0x7f, 0x4c8, 0x9, 0x10001, 0xffff, 0x2, 0x4, 0x7c1d001, 0x1000, 0x1, 0x0, 0xab, 0x9, 0x9, 0x7, 0x3, 0x5, 0xffff0000, 0xb0d, 0x5, 0x6bf0, 0xd8d1, 0x5, 0x5, 0x6, 0x2, 0x13e, 0xb7c1, 0x0, 0x9, 0x6, 0xfffffff7, 0x101, 0x9, 0x1ff, 0x994, 0x0, 0x9, 0x4, 0x3eab, 0x0, 0x6, 0x800, 0x9, 0xb8, 0x9, 0x4, 0x2, 0x6, 0x6, 0x5b72, 0x49e47d64, 0x7, 0x2, 0xffff, 0x0, 0x8001, 0x1ff, 0x4, 0x9, 0x5, 0x3, 0x5, 0x7, 0x2, 0xe, 0x200, 0x63, 0x6, 0x2, 0x1, 0x20000000, 0x7, 0x64, 0xfa25, 0x5e52, 0xfff00000, 0x1ff, 0x1, 0xdfdb, 0x3f, 0xffffffff, 0xfffffcd1, 0x8, 0xfffffff9, 0x792, 0x0, 0x4, 0xffffffff, 0x101, 0xf, 0x4, 0xec5, 0x5, 0x7fffffff, 0x80, 0x1, 0x4, 0x80000001, 0x6, 0x7, 0x6, 0x7, 0x7fffffff, 0x7fffffff, 0xe, 0x57, 0xa5, 0x7, 0x0, 0x3, 0x2, 0xfff, 0x7ff, 0x5, 0x4000000, 0xe1, 0x5, 0x5, 0xb2f, 0x1f93, 0x9, 0x0, 0xaa, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x5, 0x5, 0x8, 0x4, 0x9, 0x10, 0x8001, 0x4, 0x7, 0x9, 0x2, 0x201, 0x1, 0x0, 0xb, 0x22, 0xf30, 0x4, 0x0, 0x5d40, 0xff, 0x5, 0xfffffff8, 0x2, 0x6119, 0x9, 0x3, 0x5, 0x58d, 0x1, 0x4, 0x3, 0x2, 0x5, 0x306, 0x10000, 0x1ff, 0x7, 0xfffffffc, 0x0, 0x8000, 0x4, 0x38000, 0x5, 0x401, 0x5, 0x400, 0x7, 0x6, 0x3, 0x6, 0xd1, 0xfffffff8, 0x8, 0x63a2, 0x4, 0x80000000, 0x4, 0x5, 0x1, 0x44, 0x8, 0x1, 0x14000, 0x9, 0xad, 0x80000000, 0x2, 0x5, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fe00}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x875}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0xd, 0x89, 0xf79, {0x9, 0x1, 0x4, 0x1ff, 0xfff8, 0x4}, {0x7, 0x1, 0x2, 0x9, 0x3, 0x6}, 0x0, 0x46, 0x40}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe765}, @TCA_POLICE_RATE64={0xc, 0x8, 0xccb6}]}]}}]}, 0x1abc}, 0x1, 0x0, 0x0, 0x24008001}, 0x1) 6.393925417s ago: executing program 4 (id=114): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f00000008c0)="$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") syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0xee00]) read$msr(r0, &(0x7f0000000d40)=""/27, 0x1b) 6.256830425s ago: executing program 4 (id=117): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c000000000000000000000084001300000001000000000000000000000000000000080000000000000c080000000000000f0f00000007000000020000000000000009000000000000000000000000000000000000000000000000000000000000000f000000000000000200000000000000080000000100"/148], 0xa0}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x6, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12015002203dcc08b6219e7f3049010203010902240001020e000209041a2402ef040103e9040c08000408fd020905800c1000a90f03"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80a}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000ffffff0f7a377fff0f00000700000040", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) 5.623956422s ago: executing program 1 (id=132): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000340)={0xa6, 0x29, 0x1, {0x2, [{{0x0, 0x4}, 0x8, 0x20, 0x7, './file0'}, {{0x80, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x8000, 0x6, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x8e, 0x4, 0x7, './file0'}, {{0x4, 0x3, 0x4}, 0x10, 0x4, 0x7, './file0'}]}}, 0xa6) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 3.377966323s ago: executing program 1 (id=143): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="10000000130001907e27f8ca6876a016ac2de01f1ca0b41dfcdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030500000000488277a0576816f1f06c2bd5accc00000000000000000108000100010000002d6b25f83bec02d910c32f4178113d8db9d8e71610a9a22c0cc134e6b708171f2f1b273214f4df7a96dc3b79f1fb5f5b06beb02cca5424cf5a50aab21300f6619e3fae148fb9603ab785b4b48c49b9413021e3c94f2f766b228dbbca2207cff8a37b2ef34a929cb0b1605dc45d49e660a4e3a2d0b7f65b022517fde441a90f43ff43601cb00977c7f1c32130332764cac0f054565ee274a02d23c66ac863922a"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x36e2, &(0x7f0000000400)={0x0, 0x89dd, 0x100, 0x0, 0x3c9, 0x0, r2}) syz_clone3(&(0x7f0000002980)={0x108006300, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f0000000480)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) 3.280397139s ago: executing program 2 (id=144): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcff, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 3.181927085s ago: executing program 3 (id=146): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3.148680506s ago: executing program 0 (id=147): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcff, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 3.110599879s ago: executing program 0 (id=148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) 3.096961449s ago: executing program 2 (id=149): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0xfffffffffffffd2c, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x4c) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = timerfd_create(0x3, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x15d74000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) gettid() r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x220, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.035351473s ago: executing program 1 (id=150): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x1, r2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r4 = open(&(0x7f00000000c0)='.\x00', 0x200000, 0x120) mq_timedreceive(r4, 0x0, 0x0, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x5, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) clock_gettime(0x0, &(0x7f0000000180)) rt_sigtimedwait(&(0x7f0000000140)={[0x8]}, &(0x7f0000000380), &(0x7f00000004c0)={0x0, 0x989680}, 0x8) 2.971341017s ago: executing program 0 (id=151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000080)=0x80) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) close_range(r0, 0xffffffffffffffff, 0x0) 2.772481579s ago: executing program 0 (id=152): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a3000000000090001"], 0x110}}, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0xa9a2, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') preadv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) lseek(r4, 0x80000000, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="190b2abd7000fbdbc916040000004876365a087b17d69819831d905b70623d909443e2a36c3b706c4b90bf92cadeab30b9f59e7a700770fc7e7a94da87d4b4379221824bf423acb37797ffa950f9805ae846ec99047874603c2cbd37abfa3dc06528cbfb1bd60863491de3014da80caec15e6006f55d348e4fb7a3f7d9cf6dbe6547bdbc53c8587c74dbde897fabf5ec6633a2c6cf8e1745ce35380128e78d1f99ad84d25f92"], 0x14}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20008080) getdents64(r6, &(0x7f0000000180)=""/53, 0x35) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmmsg(r5, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/117, 0x75}], 0x6, &(0x7f00000008c0)=""/4096, 0x1000}, 0x71}, {{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x4}, 0x7c73}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/96, 0x60}], 0x2}, 0x2}], 0x4, 0x140, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.768040909s ago: executing program 4 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)="3dbc77b7b3ff", 0x6}], 0x1}}], 0x1, 0x10014) close_range(r0, 0xffffffffffffffff, 0x0) 2.475743395s ago: executing program 0 (id=154): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r9, &(0x7f0000000340)={0xa6, 0x29, 0x1, {0x2, [{{0x0, 0x4}, 0x8, 0x20, 0x7, './file0'}, {{0x80, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x8000, 0x6, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x8e, 0x4, 0x7, './file0'}, {{0x4, 0x3, 0x4}, 0x10, 0x4, 0x7, './file0'}]}}, 0xa6) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 2.458209267s ago: executing program 2 (id=155): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x1, r2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r4 = open(&(0x7f00000000c0)='.\x00', 0x200000, 0x120) mq_timedreceive(r4, 0x0, 0x0, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x5, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) clock_gettime(0x0, &(0x7f0000000180)) rt_sigtimedwait(&(0x7f0000000140)={[0x8]}, &(0x7f0000000380), &(0x7f00000004c0)={0x0, 0x989680}, 0x8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) 2.334384994s ago: executing program 4 (id=156): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r8, &(0x7f0000000340)={0xa6, 0x29, 0x1, {0x2, [{{0x0, 0x4}, 0x8, 0x20, 0x7, './file0'}, {{0x80, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x8000, 0x6, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x8e, 0x4, 0x7, './file0'}, {{0x4, 0x3, 0x4}, 0x10, 0x4, 0x7, './file0'}]}}, 0xa6) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 2.272727008s ago: executing program 3 (id=157): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab72502000000000000001e000000080017004e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffff7, 0xc, 0x2, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x5, 0x0, 0xffffffffffffffff, 0x1}) io_submit(0x0, 0x0, 0x0) capset(0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1.796456605s ago: executing program 3 (id=158): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280), 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.70069161s ago: executing program 3 (id=159): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x4c) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.576473828s ago: executing program 3 (id=160): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r8, &(0x7f0000000340)={0xa6, 0x29, 0x1, {0x2, [{{0x0, 0x4}, 0x8, 0x20, 0x7, './file0'}, {{0x80, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x8000, 0x6, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x8e, 0x4, 0x7, './file0'}, {{0x4, 0x3, 0x4}, 0x10, 0x4, 0x7, './file0'}]}}, 0xa6) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 1.556145899s ago: executing program 1 (id=161): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="10000000130001907e27f8ca6876a016ac2de01f1ca0b41dfcdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030500000000488277a0576816f1f06c2bd5accc00000000000000000108000100010000002d6b25f83bec02d910c32f4178113d8db9d8e71610a9a22c0cc134e6b708171f2f1b273214f4df7a96dc3b79f1fb5f5b06beb02cca5424cf5a50aab21300f6619e3fae148fb9603ab785b4b48c49b9413021e3c94f2f766b228dbbca2207cff8a37b2ef34a929cb0b1605dc45d49e660a4e3a2d0b7f65b022517fde441a90f43ff43601cb00977c7f1c32130332764cac0f054565ee274a02d23c66ac863922a"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x36e2, &(0x7f0000000400)={0x0, 0x89dd, 0x100, 0x0, 0x3c9, 0x0, r2}) syz_clone3(&(0x7f0000002980)={0x108006300, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f0000000480)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) 1.004797451s ago: executing program 2 (id=162): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x4c) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) 828.460962ms ago: executing program 1 (id=163): pipe2$9p(&(0x7f0000000240), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'w\x00'}, 0x8) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0, 0x60, 0x0, {0x1}}) io_uring_enter(r4, 0x69ae, 0x2000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") unshare(0x400) fstatfs(0xffffffffffffffff, 0x0) 688.233139ms ago: executing program 2 (id=164): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a3000000000090001"], 0x110}}, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0xa9a2, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') preadv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) lseek(r4, 0x80000000, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="190b2abd7000fbdbc916040000004876365a087b17d69819831d905b70623d909443e2a36c3b706c4b90bf92cadeab30b9f59e7a700770fc7e7a94da87d4b4379221824bf423acb37797ffa950f9805ae846ec99047874603c2cbd37abfa3dc06528cbfb1bd60863491de3014da80caec15e6006f55d348e4fb7a3f7d9cf6dbe6547bdbc53c8587c74dbde897fabf5ec6633a2c6cf8e1745ce35380128e78d1f99ad84d25f92"], 0x14}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20008080) getdents64(r6, &(0x7f0000000180)=""/53, 0x35) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmmsg(r5, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/117, 0x75}], 0x6, &(0x7f00000008c0)=""/4096, 0x1000}, 0x71}, {{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x4}, 0x7c73}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/96, 0x60}], 0x2}, 0x2}], 0x4, 0x140, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 360.764659ms ago: executing program 2 (id=165): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x46, 0x3b00, 0x0, 0xfffffffffffffdfd) 195.775878ms ago: executing program 0 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@noblock_validity}, {@nodioread_nolock}, {@nolazytime}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) listen(0xffffffffffffffff, 0xda90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 0s ago: executing program 1 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)="3dbc77b7b3ff", 0x6}], 0x1}}], 0x1, 0x10014) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 32.738124][ T28] audit: type=1400 audit(1770876683.231:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.761335][ T28] audit: type=1400 audit(1770876683.251:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.763483][ T3296] cgroup: Unknown subsys name 'net' [ 32.789171][ T28] audit: type=1400 audit(1770876683.281:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.922359][ T3296] cgroup: Unknown subsys name 'cpuset' [ 32.928559][ T3296] cgroup: Unknown subsys name 'rlimit' [ 33.020170][ T28] audit: type=1400 audit(1770876683.511:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.053154][ T28] audit: type=1400 audit(1770876683.521:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.073792][ T28] audit: type=1400 audit(1770876683.521:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.093012][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.094857][ T28] audit: type=1400 audit(1770876683.521:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.123208][ T28] audit: type=1400 audit(1770876683.531:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.148128][ T28] audit: type=1400 audit(1770876683.531:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.171444][ T28] audit: type=1400 audit(1770876683.541:71): avc: denied { read } for pid=3036 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.202596][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.083782][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.105893][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.125126][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.143868][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.174287][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.272965][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.280518][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.287803][ T3315] bridge_slave_0: entered allmulticast mode [ 35.294313][ T3315] bridge_slave_0: entered promiscuous mode [ 35.313520][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.320607][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.327913][ T3309] bridge_slave_0: entered allmulticast mode [ 35.334463][ T3309] bridge_slave_0: entered promiscuous mode [ 35.340888][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.347968][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.355184][ T3311] bridge_slave_0: entered allmulticast mode [ 35.361597][ T3311] bridge_slave_0: entered promiscuous mode [ 35.368252][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.375517][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.382671][ T3315] bridge_slave_1: entered allmulticast mode [ 35.389072][ T3315] bridge_slave_1: entered promiscuous mode [ 35.395420][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.402510][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.409670][ T3308] bridge_slave_0: entered allmulticast mode [ 35.416303][ T3308] bridge_slave_0: entered promiscuous mode [ 35.427505][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.434730][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.441876][ T3308] bridge_slave_1: entered allmulticast mode [ 35.448321][ T3308] bridge_slave_1: entered promiscuous mode [ 35.454661][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.461794][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.469037][ T3309] bridge_slave_1: entered allmulticast mode [ 35.475466][ T3309] bridge_slave_1: entered promiscuous mode [ 35.481682][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.488779][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.495919][ T3311] bridge_slave_1: entered allmulticast mode [ 35.502495][ T3311] bridge_slave_1: entered promiscuous mode [ 35.518214][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.525358][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.532728][ T3313] bridge_slave_0: entered allmulticast mode [ 35.539153][ T3313] bridge_slave_0: entered promiscuous mode [ 35.550341][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.557496][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.564664][ T3313] bridge_slave_1: entered allmulticast mode [ 35.571222][ T3313] bridge_slave_1: entered promiscuous mode [ 35.587746][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.607824][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.628025][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.646812][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.656934][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.667304][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.682146][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.692091][ T3309] team0: Port device team_slave_0 added [ 35.698697][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.713712][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.723575][ T3309] team0: Port device team_slave_1 added [ 35.730323][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.775761][ T3308] team0: Port device team_slave_0 added [ 35.782112][ T3311] team0: Port device team_slave_0 added [ 35.788675][ T3308] team0: Port device team_slave_1 added [ 35.799484][ T3315] team0: Port device team_slave_0 added [ 35.806264][ T3313] team0: Port device team_slave_0 added [ 35.812546][ T3311] team0: Port device team_slave_1 added [ 35.818768][ T3313] team0: Port device team_slave_1 added [ 35.833731][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.840769][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.866984][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.878635][ T3315] team0: Port device team_slave_1 added [ 35.898221][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.905302][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.931479][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.942539][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.949498][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.975473][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.996114][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.003130][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.029190][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.040292][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.047412][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.073405][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.084511][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.091454][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.117725][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.136295][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.143412][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.169458][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.203407][ T3313] hsr_slave_0: entered promiscuous mode [ 36.209675][ T3313] hsr_slave_1: entered promiscuous mode [ 36.218364][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.225514][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.251563][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.263218][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.270165][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.296110][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.307064][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.314214][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.340227][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.387493][ T3308] hsr_slave_0: entered promiscuous mode [ 36.393778][ T3308] hsr_slave_1: entered promiscuous mode [ 36.399752][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 36.405784][ T3308] Cannot create hsr debugfs directory [ 36.418322][ T3309] hsr_slave_0: entered promiscuous mode [ 36.424666][ T3309] hsr_slave_1: entered promiscuous mode [ 36.430603][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.436394][ T3309] Cannot create hsr debugfs directory [ 36.453161][ T3311] hsr_slave_0: entered promiscuous mode [ 36.459251][ T3311] hsr_slave_1: entered promiscuous mode [ 36.465183][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.470901][ T3311] Cannot create hsr debugfs directory [ 36.494126][ T3315] hsr_slave_0: entered promiscuous mode [ 36.500142][ T3315] hsr_slave_1: entered promiscuous mode [ 36.506018][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.511820][ T3315] Cannot create hsr debugfs directory [ 36.691241][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.705185][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.718176][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.729804][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.751469][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.760445][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.769217][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.778577][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.812274][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.823264][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.832111][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.840664][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.880970][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.893107][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.900097][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.909177][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.918181][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.946183][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.967680][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.977740][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.984961][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.994052][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.001218][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.013420][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.022240][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.031123][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.065641][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.084997][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.113148][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.130191][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.150553][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.157653][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.171424][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.178581][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.190297][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.207384][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.215263][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.222338][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.243116][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.250186][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.265893][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.283285][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.295665][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.306760][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.322652][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.334764][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.341973][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.352027][ T1899] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.359078][ T1899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.384844][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.429990][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.437112][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.461518][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.477042][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.484154][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.511350][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.542445][ T3313] veth0_vlan: entered promiscuous mode [ 37.579554][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.592135][ T3313] veth1_vlan: entered promiscuous mode [ 37.603237][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.619942][ T3313] veth0_macvtap: entered promiscuous mode [ 37.642622][ T3313] veth1_macvtap: entered promiscuous mode [ 37.655275][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.679057][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.712759][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.752437][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.779623][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.797599][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.805630][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.826994][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 37.827011][ T28] audit: type=1400 audit(1770876688.321:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.pRzRqh/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.860202][ T28] audit: type=1400 audit(1770876688.321:86): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.882014][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.894503][ T28] audit: type=1400 audit(1770876688.321:87): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.pRzRqh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.923740][ T3315] veth0_vlan: entered promiscuous mode [ 37.933119][ T28] audit: type=1400 audit(1770876688.321:88): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.954287][ T3308] veth0_vlan: entered promiscuous mode [ 37.960466][ T28] audit: type=1400 audit(1770876688.321:89): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.pRzRqh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.991050][ T28] audit: type=1400 audit(1770876688.331:90): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.pRzRqh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.016500][ T3308] veth1_vlan: entered promiscuous mode [ 38.027240][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.040666][ T28] audit: type=1400 audit(1770876688.331:91): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.065992][ T28] audit: type=1400 audit(1770876688.361:92): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.100249][ T28] audit: type=1400 audit(1770876688.361:93): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.102132][ T3315] veth1_vlan: entered promiscuous mode [ 38.128053][ T28] audit: type=1400 audit(1770876688.561:94): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.142714][ T3311] veth0_vlan: entered promiscuous mode [ 38.189976][ T3311] veth1_vlan: entered promiscuous mode [ 38.255384][ T3480] loop2: detected capacity change from 0 to 1764 [ 38.298538][ T3308] veth0_macvtap: entered promiscuous mode [ 38.305404][ T3480] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 38.316276][ T3309] veth0_vlan: entered promiscuous mode [ 38.330275][ T3315] veth0_macvtap: entered promiscuous mode [ 38.344588][ T3308] veth1_macvtap: entered promiscuous mode [ 38.355937][ T3311] veth0_macvtap: entered promiscuous mode [ 38.368901][ T3311] veth1_macvtap: entered promiscuous mode [ 38.388888][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.396962][ T3315] veth1_macvtap: entered promiscuous mode [ 38.405322][ T3309] veth1_vlan: entered promiscuous mode [ 38.423965][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.450592][ T1659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.466824][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.474689][ T1659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.483961][ T1659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.493846][ T1659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.547894][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.560029][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.580711][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.634806][ T3309] veth0_macvtap: entered promiscuous mode [ 38.649524][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.672271][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.710098][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.729964][ T3309] veth1_macvtap: entered promiscuous mode [ 38.741939][ T1659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.759807][ T1659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.811594][ T3494] cgroup: No subsys list or none specified [ 39.258033][ T1659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.267074][ T1659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.286469][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.303527][ T1659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.343613][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.363369][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.380548][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.404942][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.497180][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.597384][ T3515] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12'. [ 39.607031][ T3514] loop3: detected capacity change from 0 to 1764 [ 39.631109][ T3514] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 39.858608][ T3515] loop4: detected capacity change from 0 to 8192 [ 39.902344][ T3515] ======================================================= [ 39.902344][ T3515] WARNING: The mand mount option has been deprecated and [ 39.902344][ T3515] and is ignored by this kernel. Remove the mand [ 39.902344][ T3515] option from the mount to silence this warning. [ 39.902344][ T3515] ======================================================= [ 40.019296][ T3526] loop1: detected capacity change from 0 to 1764 [ 40.038987][ T3526] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 40.086645][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 40.291472][ T3538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 40.523516][ T3546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 40.562330][ T3546] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 40.601108][ T3552] Zero length message leads to an empty skb [ 40.657655][ T3546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3546 comm=syz.1.19 [ 40.850200][ T3577] netlink: 'syz.0.27': attribute type 13 has an invalid length. [ 40.875163][ C0] hrtimer: interrupt took 77669 ns [ 40.903653][ T3590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 40.943388][ T3590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27'. [ 40.958208][ T3586] netlink: 'syz.1.28': attribute type 13 has an invalid length. [ 41.008816][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 41.035548][ T3591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28'. [ 41.448038][ T3608] loop4: detected capacity change from 0 to 128 [ 41.529569][ T3608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.542434][ T3608] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.935522][ T3616] loop2: detected capacity change from 0 to 128 [ 42.013908][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.032442][ T3616] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.188350][ T3616] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.587068][ T3655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.54'. [ 42.614749][ T3657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.53'. [ 42.628549][ T3658] cgroup: No subsys list or none specified [ 42.670387][ T3660] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 42.878647][ T3666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3666 comm=syz.4.53 [ 43.069605][ T3658] loop1: detected capacity change from 0 to 128 [ 43.071862][ T3659] loop3: detected capacity change from 0 to 8192 [ 43.083581][ T3658] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.096285][ T3658] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.355830][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.395649][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 43.395691][ T28] audit: type=1400 audit(1770876693.891:176): avc: denied { setopt } for pid=3671 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.431750][ T3673] loop3: detected capacity change from 0 to 128 [ 43.462264][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.472320][ T3673] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.485165][ T3673] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.764571][ T3684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.799172][ T28] audit: type=1400 audit(1770876694.091:177): avc: denied { getopt } for pid=3671 comm="syz.0.58" laddr=127.0.0.1 lport=42165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.843450][ T3685] process 'syz.2.59' launched '/dev/fd/3' with NULL argv: empty string added [ 43.882529][ T3684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.893325][ T28] audit: type=1400 audit(1770876694.191:178): avc: denied { write } for pid=3676 comm="syz.1.57" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.930199][ T28] audit: type=1400 audit(1770876694.211:179): avc: denied { setopt } for pid=3676 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.950621][ T28] audit: type=1400 audit(1770876694.251:180): avc: denied { read write } for pid=3679 comm="syz.0.61" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.974714][ T28] audit: type=1400 audit(1770876694.251:181): avc: denied { open } for pid=3679 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.009380][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.010575][ T28] audit: type=1400 audit(1770876694.251:182): avc: denied { ioctl } for pid=3679 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.040991][ T28] audit: type=1400 audit(1770876694.341:183): avc: denied { execute } for pid=3683 comm="syz.2.59" dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.150550][ T28] audit: type=1400 audit(1770876694.411:184): avc: denied { create } for pid=3683 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.196464][ T3680] loop0: detected capacity change from 0 to 1024 [ 44.212259][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.217257][ T28] audit: type=1400 audit(1770876694.411:185): avc: denied { write } for pid=3683 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.278750][ T3708] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 44.287978][ T3680] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 44.308530][ T3680] System zones: 0-1, 3-36 [ 44.324914][ T3680] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.61: bad orphan inode 134217728 [ 44.341126][ T3680] loop0: lost filesystem error report for type 5 error -117 [ 44.351858][ T3708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3708 comm=syz.2.66 [ 44.391760][ T3680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.428379][ T3719] loop4: detected capacity change from 0 to 1024 [ 44.580529][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.981880][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.056550][ T3734] loop1: detected capacity change from 0 to 1024 [ 45.085341][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.126224][ T3739] random: crng reseeded on system resumption [ 45.161106][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.181809][ T3741] __nla_validate_parse: 1 callbacks suppressed [ 45.181823][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 45.199054][ T3741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.219084][ T3741] 9pnet_fd: Insufficient options for proto=fd [ 45.228024][ T3742] loop2: detected capacity change from 0 to 128 [ 45.242879][ T3742] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.272085][ T3742] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.501497][ T3745] 9p: Bad value for 'version' [ 45.873265][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.983862][ T3770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 46.003718][ T3770] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 46.042203][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.060098][ T3770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3770 comm=syz.2.85 [ 46.704601][ T3807] loop2: detected capacity change from 0 to 1024 [ 46.735703][ T3807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.860435][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.474580][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.628251][ T3818] random: crng reseeded on system resumption [ 47.863879][ T3792] syz.1.91 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 47.877910][ T3792] CPU: 0 UID: 0 PID: 3792 Comm: syz.1.91 Not tainted syzkaller #0 PREEMPT(full) [ 47.877990][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 47.878007][ T3792] Call Trace: [ 47.878016][ T3792] [ 47.878026][ T3792] __dump_stack+0x1d/0x30 [ 47.878075][ T3792] dump_stack_lvl+0x95/0xd0 [ 47.878108][ T3792] dump_stack+0x15/0x1b [ 47.878128][ T3792] dump_header+0x80/0x240 [ 47.878218][ T3792] oom_kill_process+0x295/0x350 [ 47.878247][ T3792] out_of_memory+0x97d/0xb80 [ 47.878367][ T3792] try_charge_memcg+0x62e/0xa10 [ 47.878400][ T3792] obj_cgroup_charge_pages+0x23/0xc0 [ 47.878425][ T3792] __memcg_kmem_charge_page+0x9e/0x170 [ 47.878452][ T3792] __alloc_frozen_pages_noprof+0x18a/0x350 [ 47.878480][ T3792] alloc_pages_mpol+0xb3/0x260 [ 47.878558][ T3792] alloc_pages_noprof+0x8f/0x130 [ 47.878581][ T3792] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 47.878637][ T3792] __kvmalloc_node_noprof+0x3c3/0x620 [ 47.878750][ T3792] ? ip_set_alloc+0x24/0x30 [ 47.878788][ T3792] ? ip_set_alloc+0x24/0x30 [ 47.878824][ T3792] ip_set_alloc+0x24/0x30 [ 47.878853][ T3792] hash_netiface_create+0x282/0x740 [ 47.878923][ T3792] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.878958][ T3792] ip_set_create+0x3cf/0x970 [ 47.878990][ T3792] ? __nla_parse+0x40/0x60 [ 47.879023][ T3792] nfnetlink_rcv_msg+0x509/0x5d0 [ 47.879140][ T3792] netlink_rcv_skb+0x123/0x220 [ 47.879158][ T3792] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.879202][ T3792] nfnetlink_rcv+0x167/0x1720 [ 47.879258][ T3792] ? __kfree_skb+0x109/0x150 [ 47.879321][ T3792] ? nlmon_xmit+0x4f/0x60 [ 47.879356][ T3792] ? consume_skb+0x49/0x140 [ 47.879391][ T3792] ? nlmon_xmit+0x4f/0x60 [ 47.879567][ T3792] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 47.879591][ T3792] ? __dev_queue_xmit+0x139a/0x1f20 [ 47.879612][ T3792] ? __dev_queue_xmit+0x148/0x1f20 [ 47.879685][ T3792] ? ref_tracker_free+0x37d/0x3e0 [ 47.879717][ T3792] ? __netlink_deliver_tap+0x4dc/0x500 [ 47.879747][ T3792] netlink_unicast+0x5c0/0x690 [ 47.879788][ T3792] netlink_sendmsg+0x5c8/0x6f0 [ 47.879855][ T3792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.879912][ T3792] ____sys_sendmsg+0x5af/0x600 [ 47.880010][ T3792] ___sys_sendmsg+0x195/0x1e0 [ 47.880047][ T3792] __x64_sys_sendmsg+0xd4/0x160 [ 47.880072][ T3792] x64_sys_call+0x194c/0x3020 [ 47.880103][ T3792] do_syscall_64+0x12c/0x370 [ 47.880276][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.880302][ T3792] RIP: 0033:0x7efcb495bf79 [ 47.880321][ T3792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.880342][ T3792] RSP: 002b:00007efcb3396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.880360][ T3792] RAX: ffffffffffffffda RBX: 00007efcb4bd6090 RCX: 00007efcb495bf79 [ 47.880373][ T3792] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 000000000000000a [ 47.880395][ T3792] RBP: 00007efcb49f27e0 R08: 0000000000000000 R09: 0000000000000000 [ 47.880406][ T3792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.880417][ T3792] R13: 00007efcb4bd6128 R14: 00007efcb4bd6090 R15: 00007ffcdb6a1a38 [ 47.880440][ T3792] [ 47.880447][ T3792] memory: usage 307200kB, limit 307200kB, failcnt 304 [ 48.177715][ T3824] netlink: 'syz.2.101': attribute type 13 has an invalid length. [ 48.182333][ T3792] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 48.215917][ T3792] kmem: usage 295840kB, limit 9007199254740988kB, failcnt 0 [ 48.223326][ T3792] Memory cgroup stats for /syz1: [ 48.223583][ T3792] cache 0 [ 48.229541][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 48.231477][ T3792] rss 11628544 [ 48.231487][ T3792] shmem 0 [ 48.231495][ T3792] mapped_file 0 [ 48.231553][ T3792] dirty 0 [ 48.231561][ T3792] writeback 0 [ 48.231569][ T3792] workingset_refault_anon 79 [ 48.231588][ T3792] workingset_refault_file 291 [ 48.231595][ T3792] swap 397312 [ 48.231602][ T3792] swapcached 0 [ 48.231644][ T3792] pgpgin 15963 [ 48.231660][ T3792] pgpgout 13123 [ 48.231668][ T3792] pgfault 16306 [ 48.231677][ T3792] pgmajfault 76 [ 48.231685][ T3792] inactive_anon 0 [ 48.231694][ T3792] active_anon 0 [ 48.231771][ T3792] inactive_file 11632640 [ 48.231781][ T3792] active_file 0 [ 48.231788][ T3792] unevictable 0 [ 48.231795][ T3792] hierarchical_memory_limit 314572800 [ 48.231802][ T3792] hierarchical_memsw_limit 9223372036854771712 [ 48.231812][ T3792] total_cache 0 [ 48.231820][ T3792] total_rss 11628544 [ 48.261298][ T3825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.101'. [ 48.266008][ T3792] total_shmem 0 [ 48.266020][ T3792] total_mapped_file 0 [ 48.266031][ T3792] total_dirty 0 [ 48.266039][ T3792] total_writeback 0 [ 48.266124][ T3792] total_workingset_refault_anon 79 [ 48.266137][ T3792] total_workingset_refault_file 291 [ 48.266148][ T3792] total_swap 397312 [ 48.266158][ T3792] total_swapcached 0 [ 48.266168][ T3792] total_pgpgin 15963 [ 48.266190][ T3792] total_pgpgout 13123 [ 48.266200][ T3792] total_pgfault 16306 [ 48.266210][ T3792] total_pgmajfault 76 [ 48.266220][ T3792] total_inactive_anon 0 [ 48.266230][ T3792] total_active_anon 0 [ 48.266239][ T3792] total_inactive_file 11632640 [ 48.266249][ T3792] total_active_file 0 [ 48.266324][ T3792] total_unevictable 0 [ 48.266335][ T3792] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.91,pid=3784,uid=0 [ 48.476329][ T3792] Memory cgroup out of memory: Killed process 3784 (syz.1.91) total-vm:96336kB, anon-rss:12488kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 48.477854][ T3800] syz.1.91 (3800) used greatest stack depth: 10120 bytes left [ 48.501049][ T3792] syz.1.91 (3792) used greatest stack depth: 7288 bytes left [ 48.761961][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 48.761979][ T28] audit: type=1400 audit(1770876699.261:209): avc: denied { mounton } for pid=3832 comm="syz.1.104" path="/proc/39/task" dev="proc" ino=6335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 48.813191][ T3837] netlink: 'syz.0.106': attribute type 1 has an invalid length. [ 48.863347][ T3837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3837 comm=syz.0.106 [ 48.868597][ T3847] random: crng reseeded on system resumption [ 48.879452][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 48.913183][ T3848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 48.944343][ T3852] 9pnet_fd: Insufficient options for proto=fd [ 49.034147][ T3860] loop4: detected capacity change from 0 to 256 [ 49.048616][ T28] audit: type=1400 audit(1770876699.541:210): avc: denied { accept } for pid=3850 comm="syz.3.111" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.103656][ T3860] loop4: detected capacity change from 0 to 256 [ 49.217472][ T3873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.230003][ T3873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.240831][ T3441] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.352299][ T3886] random: crng reseeded on system resumption [ 49.379674][ T3887] loop4: detected capacity change from 0 to 1024 [ 49.392294][ T3887] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 49.400448][ T3887] System zones: 0-1, 3-36 [ 49.422107][ T3887] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.117: bad orphan inode 134217728 [ 49.518980][ T3887] loop4: lost filesystem error report for type 5 error -117 [ 49.519522][ T3887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.595234][ T3899] loop1: detected capacity change from 0 to 256 [ 49.647412][ T3899] loop1: detected capacity change from 0 to 256 [ 49.732964][ T3907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 49.788083][ T3905] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 49.833519][ T3905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.854153][ T3907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=3907 comm=syz.0.129 [ 49.919698][ T3905] bond1: (slave gretap1): making interface the new active one [ 49.942299][ T3905] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 49.983012][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 50.018802][ T3905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3905 comm=syz.3.131 [ 50.167491][ T3927] loop2: detected capacity change from 0 to 1024 [ 50.208888][ T3927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 50.267489][ T3927] System zones: 0-1, 3-36 [ 50.290471][ T3932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.138'. [ 50.307377][ T3927] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.137: bad orphan inode 134217728 [ 50.347476][ T3927] loop2: lost filesystem error report for type 5 error -117 [ 50.349399][ T3927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.513561][ T3932] loop3: detected capacity change from 0 to 8192 [ 51.150489][ T3944] loop3: detected capacity change from 0 to 256 [ 51.566080][ T3908] syz.1.132 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 51.577024][ T3908] CPU: 0 UID: 0 PID: 3908 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT(full) [ 51.577047][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.577059][ T3908] Call Trace: [ 51.577066][ T3908] [ 51.577073][ T3908] __dump_stack+0x1d/0x30 [ 51.577154][ T3908] dump_stack_lvl+0x95/0xd0 [ 51.577175][ T3908] dump_stack+0x15/0x1b [ 51.577241][ T3908] dump_header+0x80/0x240 [ 51.577260][ T3908] oom_kill_process+0x295/0x350 [ 51.577290][ T3908] out_of_memory+0x97d/0xb80 [ 51.577324][ T3908] try_charge_memcg+0x62e/0xa10 [ 51.577398][ T3908] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 51.577423][ T3908] __read_swap_cache_async+0x17b/0x2d0 [ 51.577446][ T3908] swap_cluster_readahead+0x362/0x3c0 [ 51.577471][ T3908] swapin_readahead+0xde/0x840 [ 51.577541][ T3908] ? __rcu_read_unlock+0x33/0x70 [ 51.577571][ T3908] ? __rcu_read_unlock+0x4e/0x70 [ 51.577606][ T3908] ? swap_cache_get_folio+0x26f/0x280 [ 51.577697][ T3908] do_swap_page+0x59b/0x2a50 [ 51.577721][ T3908] ? __rcu_read_lock+0x36/0x50 [ 51.577750][ T3908] ? __pfx_default_wake_function+0x10/0x10 [ 51.577797][ T3908] handle_mm_fault+0xb40/0x3030 [ 51.577821][ T3908] ? vma_start_read+0x1c7/0x2c0 [ 51.577854][ T3908] do_user_addr_fault+0x62f/0x1050 [ 51.577883][ T3908] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 51.577947][ T3908] ? irqentry_exit+0x3c/0x520 [ 51.577972][ T3908] exc_page_fault+0x62/0xa0 [ 51.578011][ T3908] asm_exc_page_fault+0x26/0x30 [ 51.578029][ T3908] RIP: 0033:0x7efcb4813b09 [ 51.578114][ T3908] Code: 90 80 3d c2 42 3c 00 00 48 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 83 c6 02 48 8d 04 f0 89 57 04 48 39 c1 0f 92 c0 88 47 48 66 0f 1f 44 00 00 8b 10 8d 72 02 89 57 04 48 8d 04 b0 48 39 c1 [ 51.578130][ T3908] RSP: 002b:00007ffcdb6a1b88 EFLAGS: 00010206 [ 51.578145][ T3908] RAX: 00007efcb33b9000 RBX: 00007efcb4bd5f40 RCX: 00007efcb3bb9000 [ 51.578158][ T3908] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007efcb4bd5f40 [ 51.578169][ T3908] RBP: 00007efcb4bd7da0 R08: 0000000000000006 R09: 0000000000000000 [ 51.578180][ T3908] R10: 00007efcb4bd7cb0 R11: 0000000000000246 R12: 000000000000c5a5 [ 51.578251][ T3908] R13: 00007efcb4bd618c R14: 000000000000c409 R15: 00007efcb4bd6180 [ 51.578268][ T3908] [ 51.578274][ T3908] memory: usage 307200kB, limit 307200kB, failcnt 576 [ 51.802633][ T3908] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 51.810551][ T3908] kmem: usage 299244kB, limit 9007199254740988kB, failcnt 0 [ 51.817893][ T3908] Memory cgroup stats for /syz1: [ 51.818067][ T3908] cache 16384 [ 51.826334][ T3908] rss 8122368 [ 51.829625][ T3908] shmem 0 [ 51.832607][ T3908] mapped_file 16384 [ 51.836421][ T3908] dirty 8192 [ 51.839623][ T3908] writeback 12288 [ 51.843271][ T3908] workingset_refault_anon 194 [ 51.847951][ T3908] workingset_refault_file 418 [ 51.852648][ T3908] swap 393216 [ 51.855999][ T3908] swapcached 4096 [ 51.859673][ T3908] pgpgin 22556 [ 51.863068][ T3908] pgpgout 20567 [ 51.866524][ T3908] pgfault 23106 [ 51.869983][ T3908] pgmajfault 162 [ 51.873621][ T3908] inactive_anon 4096 [ 51.877530][ T3908] active_anon 0 [ 51.880988][ T3908] inactive_file 8142848 [ 51.885206][ T3908] active_file 0 [ 51.888701][ T3908] unevictable 0 [ 51.892192][ T3908] hierarchical_memory_limit 314572800 [ 51.897560][ T3908] hierarchical_memsw_limit 9223372036854771712 [ 51.903772][ T3908] total_cache 16384 [ 51.907630][ T3908] total_rss 8122368 [ 51.911493][ T3908] total_shmem 0 [ 51.915042][ T3908] total_mapped_file 16384 [ 51.919375][ T3908] total_dirty 8192 [ 51.923152][ T3908] total_writeback 12288 [ 51.927329][ T3908] total_workingset_refault_anon 194 [ 51.932540][ T3908] total_workingset_refault_file 418 [ 51.937750][ T3908] total_swap 393216 [ 51.941554][ T3908] total_swapcached 4096 [ 51.945734][ T3908] total_pgpgin 22556 [ 51.949630][ T3908] total_pgpgout 20567 [ 51.953625][ T3908] total_pgfault 23106 [ 51.957608][ T3908] total_pgmajfault 162 [ 51.961785][ T3908] total_inactive_anon 4096 [ 51.965740][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.966200][ T3908] total_active_anon 0 [ 51.966209][ T3908] total_inactive_file 8142848 [ 51.966217][ T3908] total_active_file 0 [ 51.966224][ T3908] total_unevictable 0 [ 51.966232][ T3908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.132,pid=3908,uid=0 [ 52.003597][ T3908] Memory cgroup out of memory: Killed process 3908 (syz.1.132) total-vm:94288kB, anon-rss:9156kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 52.073177][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 52.160327][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.240741][ T3954] random: crng reseeded on system resumption [ 52.267972][ T3956] loop3: detected capacity change from 0 to 1024 [ 52.286832][ T3958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'. [ 52.308887][ T3956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 52.334900][ T3956] System zones: 0-1, 3-36 [ 52.341248][ T3956] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.146: bad orphan inode 134217728 [ 52.352130][ T3956] loop3: lost filesystem error report for type 5 error -117 [ 52.353503][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 52.370515][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.568720][ T28] audit: type=1400 audit(1770876703.061:211): avc: denied { create } for pid=3963 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.653772][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.693345][ T3975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.152'. [ 52.855975][ T3975] loop0: detected capacity change from 0 to 8192 [ 53.172162][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.442268][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 53.673169][ T4002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.719494][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.323304][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 54.488915][ T4016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.161'. [ 54.740456][ T4022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.164'. [ 54.777804][ T4023] set_capacity_and_notify: 1 callbacks suppressed [ 54.777823][ T4023] loop1: detected capacity change from 0 to 512 [ 54.877686][ T4022] loop2: detected capacity change from 0 to 8192 [ 54.892156][ T4023] FAT-fs (loop1): Directory bread(block 199916) failed [ 54.909357][ T4023] FAT-fs (loop1): Directory bread(block 199917) failed [ 54.975009][ T4023] FAT-fs (loop1): Directory bread(block 199918) failed [ 54.981967][ T4023] FAT-fs (loop1): Directory bread(block 199919) failed [ 54.988849][ T4023] FAT-fs (loop1): Directory bread(block 199920) failed [ 54.995822][ T4023] FAT-fs (loop1): Directory bread(block 199921) failed [ 55.002714][ T4023] FAT-fs (loop1): Directory bread(block 199922) failed [ 55.009578][ T4023] FAT-fs (loop1): Directory bread(block 199923) failed [ 55.441772][ T3991] ================================================================== [ 55.449913][ T3991] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 55.459760][ T3991] [ 55.462106][ T3991] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 1: [ 55.470277][ T3991] tick_do_update_jiffies64+0x113/0x1c0 [ 55.475852][ T3991] tick_nohz_handler+0x8d/0x3d0 [ 55.480723][ T3991] __hrtimer_run_queues+0x207/0x4c0 [ 55.485941][ T3991] hrtimer_interrupt+0x269/0x810 [ 55.490897][ T3991] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 55.496832][ T3991] sysvec_apic_timer_interrupt+0x6f/0x80 [ 55.502505][ T3991] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.508505][ T3991] kcsan_setup_watchpoint+0x404/0x410 [ 55.513891][ T3991] link_path_walk+0xd06/0xe30 [ 55.518586][ T3991] path_lookupat+0x8c/0x500 [ 55.523107][ T3991] filename_lookup+0x190/0x390 [ 55.527881][ T3991] do_utimes+0xd2/0x210 [ 55.532041][ T3991] __x64_sys_utimensat+0xc4/0x190 [ 55.537075][ T3991] x64_sys_call+0x2bca/0x3020 [ 55.541773][ T3991] do_syscall_64+0x12c/0x370 [ 55.546388][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.552293][ T3991] [ 55.554619][ T3991] read to 0xffffffff86a09a00 of 8 bytes by task 3991 on cpu 0: [ 55.562165][ T3991] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 55.568431][ T3991] count_shadow_nodes+0x6a/0x230 [ 55.573409][ T3991] do_shrink_slab+0x63/0x670 [ 55.578036][ T3991] shrink_slab+0x538/0x880 [ 55.582469][ T3991] shrink_node+0x6cb/0x2000 [ 55.586999][ T3991] do_try_to_free_pages+0x404/0xcc0 [ 55.592240][ T3991] try_to_free_mem_cgroup_pages+0x222/0x470 [ 55.598160][ T3991] try_charge_memcg+0x37e/0xa10 [ 55.603042][ T3991] obj_cgroup_charge_pages+0x23/0xc0 [ 55.608337][ T3991] __memcg_kmem_charge_page+0x9e/0x170 [ 55.613813][ T3991] __alloc_frozen_pages_noprof+0x18a/0x350 [ 55.619804][ T3991] alloc_pages_mpol+0xb3/0x260 [ 55.624586][ T3991] alloc_pages_noprof+0x8f/0x130 [ 55.629559][ T3991] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 55.635482][ T3991] __kvmalloc_node_noprof+0x3c3/0x620 [ 55.640894][ T3991] ip_set_alloc+0x24/0x30 [ 55.645272][ T3991] hash_netiface_create+0x282/0x740 [ 55.650519][ T3991] ip_set_create+0x3cf/0x970 [ 55.655128][ T3991] nfnetlink_rcv_msg+0x509/0x5d0 [ 55.660091][ T3991] netlink_rcv_skb+0x123/0x220 [ 55.664869][ T3991] nfnetlink_rcv+0x167/0x1720 [ 55.669694][ T3991] netlink_unicast+0x5c0/0x690 [ 55.674502][ T3991] netlink_sendmsg+0x5c8/0x6f0 [ 55.679280][ T3991] ____sys_sendmsg+0x5af/0x600 [ 55.684057][ T3991] ___sys_sendmsg+0x195/0x1e0 [ 55.688768][ T3991] __x64_sys_sendmsg+0xd4/0x160 [ 55.693630][ T3991] x64_sys_call+0x194c/0x3020 [ 55.698358][ T3991] do_syscall_64+0x12c/0x370 [ 55.702976][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.709067][ T3991] [ 55.711397][ T3991] value changed: 0x00000000ffffa043 -> 0x00000000ffffa044 [ 55.718508][ T3991] [ 55.720838][ T3991] Reported by Kernel Concurrency Sanitizer on: [ 55.727000][ T3991] CPU: 0 UID: 0 PID: 3991 Comm: syz.4.156 Not tainted syzkaller #0 PREEMPT(full) [ 55.736214][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 55.746372][ T3991] ================================================================== [ 56.072565][ T4029] loop0: detected capacity change from 0 to 128 [ 56.145150][ T3991] syz.4.156 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 56.159369][ T3991] CPU: 0 UID: 0 PID: 3991 Comm: syz.4.156 Not tainted syzkaller #0 PREEMPT(full) [ 56.159403][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 56.159419][ T3991] Call Trace: [ 56.159429][ T3991] [ 56.159440][ T3991] __dump_stack+0x1d/0x30 [ 56.159533][ T3991] dump_stack_lvl+0x95/0xd0 [ 56.159561][ T3991] dump_stack+0x15/0x1b [ 56.159587][ T3991] dump_header+0x80/0x240 [ 56.159615][ T3991] oom_kill_process+0x295/0x350 [ 56.159791][ T3991] out_of_memory+0x97d/0xb80 [ 56.159831][ T3991] try_charge_memcg+0x62e/0xa10 [ 56.159870][ T3991] obj_cgroup_charge_pages+0x23/0xc0 [ 56.159945][ T3991] __memcg_kmem_charge_page+0x9e/0x170 [ 56.159973][ T3991] __alloc_frozen_pages_noprof+0x18a/0x350 [ 56.160004][ T3991] alloc_pages_mpol+0xb3/0x260 [ 56.160075][ T3991] alloc_pages_noprof+0x8f/0x130 [ 56.160103][ T3991] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 56.160167][ T3991] __kvmalloc_node_noprof+0x3c3/0x620 [ 56.160265][ T3991] ? ip_set_alloc+0x24/0x30 [ 56.160307][ T3991] ? ip_set_alloc+0x24/0x30 [ 56.160363][ T3991] ip_set_alloc+0x24/0x30 [ 56.160396][ T3991] hash_netiface_create+0x282/0x740 [ 56.160483][ T3991] ? __pfx_hash_netiface_create+0x10/0x10 [ 56.160550][ T3991] ip_set_create+0x3cf/0x970 [ 56.160584][ T3991] ? __mutex_lock_slowpath+0xa/0x10 [ 56.160642][ T3991] nfnetlink_rcv_msg+0x509/0x5d0 [ 56.160700][ T3991] netlink_rcv_skb+0x123/0x220 [ 56.160725][ T3991] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 56.160850][ T3991] nfnetlink_rcv+0x167/0x1720 [ 56.160880][ T3991] ? __kfree_skb+0x109/0x150 [ 56.160922][ T3991] ? nlmon_xmit+0x4f/0x60 [ 56.160961][ T3991] ? consume_skb+0x49/0x140 [ 56.161026][ T3991] ? nlmon_xmit+0x4f/0x60 [ 56.161059][ T3991] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 56.161087][ T3991] ? __dev_queue_xmit+0x139a/0x1f20 [ 56.161168][ T3991] ? __dev_queue_xmit+0x148/0x1f20 [ 56.161189][ T3991] ? ref_tracker_free+0x37d/0x3e0 [ 56.161241][ T3991] ? __netlink_deliver_tap+0x4dc/0x500 [ 56.161272][ T3991] netlink_unicast+0x5c0/0x690 [ 56.161436][ T3991] netlink_sendmsg+0x5c8/0x6f0 [ 56.161457][ T3991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.161476][ T3991] ____sys_sendmsg+0x5af/0x600 [ 56.161499][ T3991] ___sys_sendmsg+0x195/0x1e0 [ 56.161596][ T3991] __x64_sys_sendmsg+0xd4/0x160 [ 56.161648][ T3991] x64_sys_call+0x194c/0x3020 [ 56.161682][ T3991] do_syscall_64+0x12c/0x370 [ 56.161717][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.161794][ T3991] RIP: 0033:0x7f5536ebbf79 [ 56.161815][ T3991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.161838][ T3991] RSP: 002b:00007f55358ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.161864][ T3991] RAX: ffffffffffffffda RBX: 00007f5537136090 RCX: 00007f5536ebbf79 [ 56.161881][ T3991] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000009 [ 56.161955][ T3991] RBP: 00007f5536f527e0 R08: 0000000000000000 R09: 0000000000000000 [ 56.161971][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.161987][ T3991] R13: 00007f5537136128 R14: 00007f5537136090 R15: 00007ffcbedb9248 [ 56.162011][ T3991] [ 56.474632][ T3991] memory: usage 307200kB, limit 307200kB, failcnt 109 [ 56.481492][ T3991] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 56.489511][ T3991] kmem: usage 295344kB, limit 9007199254740988kB, failcnt 0 [ 56.496890][ T3991] Memory cgroup stats for /syz4: [ 56.497160][ T3991] cache 380928 [ 56.505507][ T3991] rss 11755520 [ 56.508955][ T3991] shmem 0 [ 56.511941][ T3991] mapped_file 0 [ 56.515411][ T3991] dirty 0 [ 56.518368][ T3991] writeback 0 [ 56.521960][ T3991] workingset_refault_anon 2 [ 56.526515][ T3991] workingset_refault_file 93 [ 56.531183][ T3991] swap 208896 [ 56.534511][ T3991] swapcached 0 [ 56.537887][ T3991] pgpgin 22640 [ 56.541300][ T3991] pgpgout 19676 [ 56.544841][ T3991] pgfault 25334 [ 56.548321][ T3991] pgmajfault 5 [ 56.551741][ T3991] inactive_anon 0 [ 56.555381][ T3991] active_anon 0 [ 56.558845][ T3991] inactive_file 11755520 [ 56.563166][ T3991] active_file 385024 [ 56.567084][ T3991] unevictable 0 [ 56.570570][ T3991] hierarchical_memory_limit 314572800 [ 56.575979][ T3991] hierarchical_memsw_limit 9223372036854771712 [ 56.582169][ T3991] total_cache 380928 [ 56.586090][ T3991] total_rss 11755520 [ 56.589988][ T3991] total_shmem 0 [ 56.593477][ T3991] total_mapped_file 0 [ 56.597527][ T3991] total_dirty 0 [ 56.600998][ T3991] total_writeback 0 [ 56.604845][ T3991] total_workingset_refault_anon 2 [ 56.609888][ T3991] total_workingset_refault_file 93 [ 56.615032][ T3991] total_swap 208896 [ 56.618854][ T3991] total_swapcached 0 [ 56.622776][ T3991] total_pgpgin 22640 [ 56.626757][ T3991] total_pgpgout 19676 [ 56.630758][ T3991] total_pgfault 25334 [ 56.634760][ T3991] total_pgmajfault 5 [ 56.638653][ T3991] total_inactive_anon 0 [ 56.642901][ T3991] total_active_anon 0 [ 56.646937][ T3991] total_inactive_file 11755520 [ 56.651733][ T3991] total_active_file 385024 [ 56.656152][ T3991] total_unevictable 0 [ 56.660152][ T3991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.156,pid=3984,uid=0 [ 56.674878][ T3991] Memory cgroup out of memory: Killed process 3984 (syz.4.156) total-vm:100572kB, anon-rss:12612kB, file-rss:26440kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 57.370552][ T4029] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.391836][ T4029] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.577654][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.