last executing test programs: 6m16.216013062s ago: executing program 32 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000006000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x2404c800) 5m50.012626546s ago: executing program 33 (id=386): r0 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xff8b, 0x2, @TCA_CBS_PARMS={0x5, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) write(r0, &(0x7f0000000240)="1c0000001e005f0214fffffffffffff8070000001d0000000000000008", 0x1d) 5m31.221739539s ago: executing program 34 (id=628): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)={0x0, 0x800, 0x0, 0x10, 0xfffffffe}) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47bd, 0x636d, 0x0, 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0xffffffffffffffff) 5m7.363268096s ago: executing program 35 (id=776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000160001000000000000000000ac1e0101000000000000000000000000ac1e00010000000000000000000800000000000000030000000080a001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000020000004da33000000fc020000000000400000000000000001e59dd920e10000000000000000000000000000000090a5876c453f9deff26400"/84], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x6002064) 4m38.24032853s ago: executing program 36 (id=1351): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4039, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}]}}}}}}}, 0x0) 4m31.672865851s ago: executing program 5 (id=1442): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4m31.617243655s ago: executing program 5 (id=1444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000cc0)=""/4088, 0xff8}], 0x2}, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x5, 0x3, 0x4, 0xfffffffffff7bbfe, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x1c7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340), 0x100000000000008c}, 0x40000022) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, 0x0, 0xffffffff, 0x0, 0x4, 0x3, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r6, 0x0) ppoll(&(0x7f00000000c0)=[{r6}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) readv(r2, &(0x7f0000000640)=[{&(0x7f00000042c0)=""/4107, 0x100b}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000440)=""/37, 0x25}, {&(0x7f00000005c0)=""/116, 0x74}], 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@deltaction={0x11c, 0x31, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ffc}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x104, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8564}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x3000c8d1}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000280)=""/108) socket$packet(0x11, 0x3, 0x300) 4m27.671651464s ago: executing program 5 (id=1505): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x300, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4m27.445788927s ago: executing program 5 (id=1506): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@abort}, {@noload}, {@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x49a, &(0x7f00000013c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0x3ce, &(0x7f00000004c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x101000, 0x151) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xe, {0x4, 0xfa, 0x7, 0xcb, "e794d75fff9d85328463c507b8409eda02cc0011cd30b361325eb435f465e8603cda9bc75f6c4a98bb5c6e8b2ba3c06da7b365997888b7d00c0cd47c649a175fd1de991cf7d969e7c2a540d8fe8c37bc9074f8f4286e1deb42e6b7d76f8af29ada84a2e429b4311fcaf68ac4f9cf78d9ade666b4e4ae9ae06b09d3362b6e41695718cccc2ca38fa4dc0765ad0a35ffdd4353de421b3d6f0292ec44e8632faca2936dfa13d1d12dc2010e5518788ff947cf815080ebf65eaa4979fe74132be178d57d19770f521beb2a9270"}}, 0xd7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r4, 0x15b4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) unshare(0x28000600) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43) wait4(0x0, 0x0, 0x80000000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) 4m27.012995702s ago: executing program 5 (id=1511): r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000104050000000000000000000700000006000640000200000500010002"], 0x34}}, 0x2000004) 4m26.628772005s ago: executing program 5 (id=1521): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000080ff00000000000000000000000900000000000000000000fbd94d023316ec5c0a3e4000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"/119], 0xb8}}, 0x10) 4m26.628486285s ago: executing program 37 (id=1521): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000080ff00000000000000000000000900000000000000000000fbd94d023316ec5c0a3e4000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"/119], 0xb8}}, 0x10) 4m13.195590906s ago: executing program 9 (id=1731): setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa041) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000640)={@empty}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300)=r1, 0x4) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) pipe2$9p(&(0x7f00000001c0), 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r8 = socket$kcm(0x21, 0x2, 0xa) splice(r1, 0x0, r8, 0x0, 0xfffd, 0xb) sync() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sync() dup(r9) 4m12.918999632s ago: executing program 9 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100001}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") 4m12.632936489s ago: executing program 9 (id=1740): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768"], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x3, 0xffff, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 4m12.353329265s ago: executing program 9 (id=1747): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x61, 0x0, &(0x7f0000000240)) r3 = gettid() fcntl$setown(r0, 0x8, r3) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffdfffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x152) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x2800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000080)=0x9, 0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") socket$kcm(0x10, 0x400000002, 0x0) io_setup(0x10000, 0x0) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) 4m12.103418159s ago: executing program 9 (id=1751): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2002c040) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x6358, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x3}, 0x5b28, 0xb5, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000180)) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2002c040) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x6358, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x3}, 0x5b28, 0xb5, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) (async) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000180)) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) 4m11.856737904s ago: executing program 9 (id=1753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1420, &(0x7f00000000c0)) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="016f0800030027020000270000004600802900000000008490783fffff8c764055fec1252b5d7104ffac1414ab6344d06663a6d4aa2f1dba6c903aa700000000d04e50bf410b395ce61ffb41730500000000000000f27cd3711e6c3dbd830e87da40350fb9fa3b434417efb907b933a8dcc14660d5fc135aad297b3b977ea4bca64d987ee445914e71", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) 4m11.832554615s ago: executing program 38 (id=1753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1420, &(0x7f00000000c0)) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="016f0800030027020000270000004600802900000000008490783fffff8c764055fec1252b5d7104ffac1414ab6344d06663a6d4aa2f1dba6c903aa700000000d04e50bf410b395ce61ffb41730500000000000000f27cd3711e6c3dbd830e87da40350fb9fa3b434417efb907b933a8dcc14660d5fc135aad297b3b977ea4bca64d987ee445914e71", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) 3m19.587924254s ago: executing program 1 (id=2041): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3m19.536288446s ago: executing program 1 (id=2043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001}, {{0x18, 0x1, 0x1, 0x12, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 3m19.47271474s ago: executing program 1 (id=2045): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000160001000000000000000000ac1e0101000000000000000000000000ac1e00010000000000000000000000000000000000030000000080a001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000020000000020000004da33000000fc020000000000400000000000000001e59dd920e10000000000000000000000000000000090a5876c453f9deff26400"/84], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x6002064) 3m19.388595625s ago: executing program 1 (id=2047): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3010040, &(0x7f0000000200)={[{@nomblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x59f, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a00570214f9f407000904001f000000fe0000ff0000000008000f00fd000000", 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r3, 0x1}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bd, &(0x7f0000000a00)="$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") r4 = socket(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010100, @loopback, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700e2ffffff00", 0x96bf, 0x2, 0x7e, 0x6b}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000140), 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x40, 0x4, 0x7fffffff, {{0x22, 0x4, 0x2, 0x1f, 0x88, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xc, [@empty, @local]}, @cipso={0x86, 0x57, 0x3, [{0x6, 0x12, "90934ba0794ff2f89b244d2b90ced7a7"}, {0x7, 0x12, "d0cef3d28637ebfeccd806f384eaf8ff"}, {0x2, 0x3, "a8"}, {0x2, 0x7, "07769a0357"}, {0x7, 0x11, "568d7c077ce58a703a237876c3b393"}, {0x1, 0x12, "f56c19c1d8fb45f1126039dae12026d2"}]}, @rr={0x7, 0xf, 0xdd, [@loopback, @multicast1, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r8, 0x2f, 0x6c, 0x2, 0x4, 0x4, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8, 0x5fa, 0x3}}) 3m18.756047062s ago: executing program 1 (id=2055): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x0, &(0x7f0000000640)=""/177, 0xb1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x4001000006) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bf5000000000000007000000ee0016055e030100000000002505ffffffb0000069163e0000000000bf0700000003000026050700c0ffffff6706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xfdef) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x8, 0xbf, 0x0, 0x20b, 0x2, "7f0900000000010000000000000100", 0x563, 0x5}) unshare(0x300) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x84000000) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 3m18.057316023s ago: executing program 1 (id=2073): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c00", @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x700, 0x0, 0x9, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @empty}}}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) 3m18.039001433s ago: executing program 39 (id=2073): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c00", @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x700, 0x0, 0x9, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @empty}}}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) 1m29.435495319s ago: executing program 6 (id=3959): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a0403070000002dbd7000fbdbdf2505001a00ac1414aa0000ffffffff00000000000000000000000000000000ffffe000000225001080"], 0x38}}, 0x4) 1m29.372367323s ago: executing program 6 (id=3961): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x200, 0x100}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(0x0, 0x80) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m28.517505383s ago: executing program 6 (id=3965): r0 = syz_io_uring_setup(0x4e4, &(0x7f00000000c0)={0x0, 0x59af, 0x20000, 0x8000, 0x400252}, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f00000002c0)={0x0}, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x2000000) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x53, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="65694d7b84d81c7675b5c1cbff79", 0x0, 0x6fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = syz_io_uring_setup(0x5347, &(0x7f00000004c0)={0x0, 0x5e99, 0x8000, 0x0, 0x192, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000200)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x10000002}) (async) epoll_pwait(r7, &(0x7f0000000240)=[{}], 0x1, 0x401, 0x0, 0x0) (async) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) (async, rerun: 32) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000280)={0x5, 0x7e, &(0x7f0000000380)="2d40b78047d5113d209c0b25f52e98f4f76e13b2d15d2d3a9b11c943d94fcd3e4a15c79c57cb66b37e8d7a34af4b002333c3bef728c397af58050188ecf3f98c7889b9ff8cd865ebf9cc0f844200e2d7f1d04befb493b41b3fb678bc0b0be884bda34395ecd33b0a9e504ca724c2d4c0611113039de642d67b766522eae5"}) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_mr_vif\x00') r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async) ppoll(&(0x7f00000001c0)=[{r6, 0x20}], 0x1, 0x0, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) splice(r11, 0x0, r11, 0x0, 0x2, 0xe) (async) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r10, 0x800455ca, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000080a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0x14b0}}, 0x0) 1m28.39270482s ago: executing program 6 (id=3971): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x37, 0x37, 0x62, 0x66, 0x63, 0x31, 0x30, 0x35, 0x32, 0x38, 0x38, 0x62, 0x37, 0x65, 0x63, 0x64]}, &(0x7f0000000080)={0x0, "9b02fca023714fa86cf992e3633590de91fa3959438efc9a144a7cc2aae8c36834a5558696eee3595f88764f0c16736f5eb384866a439f7faf3064ad48ee5942", 0x1f}, 0x48, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fallocate(r6, 0x0, 0x0, 0x1000f4) sendfile(r6, r6, 0x0, 0x800000a1e) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x0, 0x7b}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x84, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "6dabb9ecf2569fcdf4fab47538ba903c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "01ddb905c468c9a1c77e3a12bbada4cb"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3c456afb733a"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ced79abc0118"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x28}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x11}, @NL80211_ATTR_PMKID={0x14, 0x55, "1d60cb713a1b1bbb607c8762f142e7cf"}]}, 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x4000050) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x800, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x50}}], 0x1, 0x20040890) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r11, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r9}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) r12 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(r12, &(0x7f00000004c0)='auxv\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 1m28.162870953s ago: executing program 6 (id=3976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x3000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x7, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x23, 0x0}) 1m28.000304042s ago: executing program 6 (id=3979): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x200, 0x100}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(0x0, 0x80) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m27.985937094s ago: executing program 40 (id=3979): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x200, 0x100}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(0x0, 0x80) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 51.090699389s ago: executing program 4 (id=4592): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000022c0)=""/4096, 0x0, 0x1000, 0x1, 0xbc78}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x90, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x90}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078801809c40005020000ffbd000880000002d58838068b91000000"], 0x4e) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r6], 0x44}}, 0x0) r8 = inotify_init1(0x0) inotify_rm_watch(r8, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56551, 0x400004, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x13}, {0xffff, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x1002, 0x0, 0x2, 0x40000, 0xffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x107, 0x5, 0x0, 0x1ff}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20040005}, 0x20000001) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 50.690364952s ago: executing program 4 (id=4598): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 50.571004259s ago: executing program 4 (id=4599): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 50.467887985s ago: executing program 4 (id=4601): r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$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") r1 = socket(0x23, 0x6, 0xfffffffc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000680)={@dev, @remote, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$xdp(r1, &(0x7f0000000b40)={&(0x7f0000000740)={0x2c, 0xe, r3, 0xf}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000780)="0ed55e9afe8b51a86084582db06ea09b19c0d126214b77a3f1c686a34ac7b8d4d65f5fca524b4ae47e56169a7c2f9cd7db74d50f6427186f085bd4e10e327207a6c8614cb37a5195c0bef2c88cfe46ea4fdf28066306c6a82bdf7918664c5b8ecf2815b1e5eed167c9f90071c0f25a180bfdcc87d3e0058d28e44abb9499e1c975a484270cd818874af02083cce905ced4a44a38f6d93cbe924e5ec8d5881e37c689e8185650955eb4c62ffd240772cc", 0xb0}, {&(0x7f0000000840)="e66e5a4aac08e1abc65c59e0bb8cdea552bb4c08936acb3fa647d6b8fc7775e8fabe8d9b6763b3a5ebba393a1ef6a51b1605a438c82b962b5dcbab6b9d0bddb88b4d2d7e805a85e34135e6697b0370079c2f3212311a7cc948e53e88822991561a03fd76fa8c45ba3a107fee8cbb7afb7f6cc2a3714843e9b48303db4e3e5e0ae1c07bbf9548c1954f8b2770517f30e013c249612056cb4e01f8b87dcd5245241235fe184d2a1bd5ebd59677fb9f6de63a3edba1ea9cc373e8fbd859f5fc23c263", 0xc1}, {&(0x7f00000009c0)="a4ffbac84d74cbc55258608cf8c3e2be6cfeeea26858462d64829fc12d6ff4035872ad0ec5d660dcc9f1fb28fa25d104393b1824b9b386b9a23ee449c7fb10bed82bfb16ce154de3c1de207ffb77cde9a8204cc8d4b769a98ccd4dec8f8d26cb102c073ec5b7b1842f6680eca025ea1d2dc7d807a66fd06641a01b4310e528e279ff27c61096a81d8cb8da248e957c3d974904f249", 0x95}, {&(0x7f0000000a80)="2e5db602d69bbcaaf9200727a951bf41db00fe26ea63374d242102366fc249c288f421b95355b9a41f4a7ebbeff00ed33a6e5c8c4bc484b35cad76429ce75344c3a41417bd128fe0b557d28df8ff38698ca2b0e0229e86a778d282498659763191bb71930785b57f93b02367beb0b3ad30545cee14aede5414fa1654447c10a2a0c62d6ff01fdb52c7c7d3d0b09acb4dd42de4ec74a7c089c41664759ac41c4a2ba819028c01", 0xa6}], 0x4, 0x0, 0x0, 0x40001}, 0x10) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x8c) fchdir(r6) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xfff, 0x3}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x23155778fd062d83, 0x3, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000004c0)='./bus\x00', 0x14e) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000240)={0x80000011}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="9c", 0x1}], 0x1, 0x6) open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 50.20887101s ago: executing program 4 (id=4604): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="02060000000000000401"], 0x40) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008) 49.382961178s ago: executing program 4 (id=4621): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 48.912616326s ago: executing program 41 (id=4621): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 12.226197989s ago: executing program 8 (id=5355): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="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", 0x53f}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910170000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x3000000, &(0x7f0000000380)={[{@errors_remount}]}, 0x1, 0x521, &(0x7f0000000640)="$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") 9.772727852s ago: executing program 8 (id=5381): r0 = syz_io_uring_setup(0x19db, &(0x7f0000000040)={0x0, 0xe89a, 0x2, 0x3, 0x284}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d18, 0x80, 0xffffffff, 0x2b3, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) (async) io_uring_enter(r1, 0x446bc, 0x3, 0x60, 0x0, 0x0) 8.663879476s ago: executing program 8 (id=5396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000240)) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0x100}}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=@getsa={0x2c4, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {@in6=@remote, 0x4d5, 0x2, 0x2b}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x3, 0xa, 0x0, 0x0, 0x8}, {@in6=@private0, 0x4d3, 0x3c}, @in6=@mcast2, {0x7, 0x8, 0xffff, 0x10001, 0x3, 0x7f, 0x4}, {0x7, 0x8, 0x5, 0x7fffffff}, {0x101, 0x5, 0x10}, 0x70bd29, 0x3500, 0xa, 0x3, 0x10, 0x40}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2a, 0x70bd2b, 0x70bd2b, 0x70bd25, 0xfffffff7, [0x0, 0x1, 0x1, 0x4, 0x7f]}}, @sa={0xe4, 0x6, {{@in=@private=0xa010102, @in=@remote, 0x4e23, 0x6, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x33, 0x0, r5}, {@in=@private=0xa010102, 0x4d3, 0x49}, @in=@broadcast, {0x8, 0x1c6, 0x0, 0x95e, 0xaac, 0x66a, 0xfc31, 0x1}, {0x6, 0x200, 0x4, 0xfffffffffffffff0}, {0x7, 0x2, 0x80000001}, 0x70bd28, 0x3506, 0x4da168551d83259c, 0x0, 0x40, 0x1}}, @coaddr={0x14, 0xe, @in=@multicast1}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2c, 0x70bd25, 0x70bd28, 0x70bd25, 0x6e, [0x10001, 0x2, 0x10000, 0x5, 0x80000001, 0x0]}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@private1, @in=@empty, 0xa, 0x8, 0x9}}, @extra_flags={0x8, 0x18, 0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40}, 0xc040080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd70000000000002"], 0x28}}, 0x8000040) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) recvmmsg$unix(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, r6, &(0x7f00000001c0)='./file0\x00') set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x4, 0x10, 0x80000000}, @TCA_CT_ACTION={0xffffffffffffff86, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 7.174262343s ago: executing program 0 (id=5349): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 6.552918239s ago: executing program 8 (id=5419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)={0x40, r1, 0x1, 0x100, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}]}]}, 0x40}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000007c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0x1000, 0x501]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xff2f]}, {}, {0x8, 0x88be, 0x81000004}, {0x8, 0x22eb, 0xfffffffd, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(r3, 0x0, r4, 0x0, 0x408cd, 0x0) read$hiddev(r3, &(0x7f0000000280)=""/47, 0x2f) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 6.040253629s ago: executing program 0 (id=5349): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 4.792154972s ago: executing program 0 (id=5349): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 3.911964392s ago: executing program 8 (id=5443): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)={0x20, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x20}], 0x1}, 0x0) 3.495997427s ago: executing program 7 (id=5449): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x0, &(0x7f0000000640)=""/177, 0xb1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x4001000006) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bf5000000000000007000000ee0016055e030100000000002505ffffffb0000069163e0000000000bf0700000018000026050700c0ffffff6706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xfdef) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x8, 0xbf, 0x0, 0x20b, 0x2, "7f0900000000010000000000000100", 0x563, 0x5}) unshare(0x300) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x84000000) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 3.352972085s ago: executing program 8 (id=5451): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x804) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000380)=0x1, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe4, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe10a}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8c0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4010) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000700)) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r11, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_VENDOR_DATA={0x55, 0x1f, "802b1944e98f356947e092ef2793a6a87eb2bfdd0e54fbc5c07ea141f6a2929b837ba887a6b47e7fb531130156cb32b6402159e72123e64978c3378cf18d915262d08f6ad162dc62f6980ca41a0ba0a332"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x60409753}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x20004840) syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) r14 = accept$inet6(0xffffffffffffffff, &(0x7f0000000b40)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000b80)=0x1c) ioctl$BTRFS_IOC_GET_FEATURES(r14, 0x80189439, &(0x7f0000000bc0)) writev(r8, &(0x7f0000000f40)=[{&(0x7f0000000c00)="456eb6179e2f04640d3550aef02822841387629381cedcc73dcc32f3be8a7156acb1644aa86d6ba0eac249caa3a93ef2f75c081d5670d576eed46c92e3608887a4bb5cb5f1dcd89115027a529143d899f7aa5d2365b6d4df3323559ce857a8515e284a7cc21bca2ff77f9cecbfe2f946b7f3f014addfd15162a0666152b1699b89979d54d8a5d07d381ad7a2464c3135e5ab6f4ba1d09fbf3c1bd76ccffce87a9ea7d180ea411b3b083c021befe97bc8e06b4620246d9b8fe8b8ecfd85c15f8f018718478a2ea305e3f077f08ffb346db8c400369e008da514238b9d6e714a819406ee66", 0xe4}, {&(0x7f0000000d00)="b579054ca66cb0638b676b57586f630bd86cca338aca6844d9fd58e86c740acdd42b87d7df582810c4559475d172bc48db38bd3d1f88b6205bb97a7734e7989d3b4dcc", 0x43}, {&(0x7f0000000d80)="ed905f22b77966c9a39668179301ac55ee012c227b7308f3c2acd0909aa7604f4e7aa6b220ab3f165e16b4f11f6f9bff4f3271745ead68d26ea9ccfb2f37a66c4e732d6055857c0f9e578c1446603852dc45ab98381e0959966e06bba981f9507a450f44084a5c31e7f9cb42f99979e33ceec3d1692717d247841e3ff14cea6d25c81b30dec82b670b65028580", 0x8d}, {&(0x7f0000000e40)="e0760c1b433cd58bf6cf77f1de50f9a29fcdff3333beddee0a5d49538bce3b2cf67b5a8f7b475bac1bdb05929779ac83d67d8f2967f3bf542e1f9bb726f398286b9cb22cea0e8a54fb2cb577a17371abec63cfaa09076c789c3d97b857c046ca689607a31593ad772c31888738428bbd5a50b61efb0037f7df2d6f22f7ea4b983ef3f85ca64135e800fbedbd580af319db7eab88fe37638221046d12bafca24c9732bf146938496e", 0xa8}, {&(0x7f0000000f00)="ea42cd5fc422d345f9d6f12f37ae35e7982e22f631dea51fdec5a02ee97a3f414e5d10", 0x23}], 0x5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001000)={0x25c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x13c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x59}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff3e}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9a6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x23}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x87a}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x5}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4046}, 0x400c4) write$nci(0xffffffffffffffff, &(0x7f0000001300)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x1, {0x2, [{0x2, 0x10}, {0x2, 0x5}]}}, 0x8) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r15, 0x5, &(0x7f0000001380)='*^[\x00', 0x0, r8) 3.324208067s ago: executing program 0 (id=5349): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 2.230085011s ago: executing program 7 (id=5452): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)={[], [{@euid_lt={'euid<', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x80}}, {@measure}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}, 0x2, 0x522, &(0x7f0000000180)="$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") rmdir(&(0x7f0000000000)='./file0\x00') 2.229815221s ago: executing program 2 (id=5453): socket(0x10, 0x803, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x40000) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000026c0)='./file2\x00', 0x200000, &(0x7f0000000340)={[{@dioread_lock}, {@noquota}, {@grpquota}, {@grpquota}, {@grpquota}]}, 0xfc, 0x58a, &(0x7f0000000680)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x1246, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x300000000000000, 0x1}, 0x800) 2.227421501s ago: executing program 3 (id=5454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400004}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x4002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000a39e00000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b24001280200001800a00010071756f7461000000100002800c000140000000000000008008000340000001"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) listen(r2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x7fffffff, 0x80000000) socket$can_raw(0x1d, 0x3, 0x1) 2.160709024s ago: executing program 7 (id=5455): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xa00, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa81"}}}}, 0xa0e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) read$watch_queue(r5, &(0x7f0000002d40)=""/4095, 0xfff) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000080)=""/240, 0xf0) 2.06001634s ago: executing program 3 (id=5456): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440100001000130429bd7000000000007f000001000000000000000000000000ac1e01010000000000000000000000000000fffe4e280000000000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000f000000000000000000000000320000007f000001000000000000000000000000ff03000000000000feffffffffffff1f0100800000000000000200000000000003000000000000004e0000000000000081000000000000000000000000000000030000000000000005000000000000000800000000000000080000040000000000000000f9ffffff20000800000000000000000002"], 0x144}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 1.780597807s ago: executing program 2 (id=5457): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000060000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.700792952s ago: executing program 3 (id=5458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 1.667475683s ago: executing program 2 (id=5459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 1.640317885s ago: executing program 2 (id=5460): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (rerun: 32) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) (async, rerun: 64) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.576292118s ago: executing program 0 (id=5349): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 517.03811ms ago: executing program 7 (id=5461): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)={0x20, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x20}], 0x1}, 0x0) 516.64373ms ago: executing program 2 (id=5462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000fffe0000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000440"], 0xe8}}, 0x0) 516.27374ms ago: executing program 3 (id=5463): r0 = creat(0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/12) write$cgroup_int(r0, 0x0, 0x0) (async) write$cgroup_int(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x40090) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x7fff) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r6}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c051}, 0x4) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r6}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c051}, 0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r9, r0, r0, r0, r0], 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/22, 0x16, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 504.374081ms ago: executing program 2 (id=5464): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x0, &(0x7f0000000640)=""/177, 0xb1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x4001000006) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xfdef) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x8, 0xbf, 0x0, 0x20b, 0x2, "7f0900000000010000000000000100", 0x563, 0x5}) unshare(0x300) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x84000000) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 501.969301ms ago: executing program 7 (id=5465): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 333.13027ms ago: executing program 7 (id=5466): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1fd2, 0x6007, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x1, 0x79, 0x1, {0x22, 0xf4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x234, 0x1, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x4, 0xff, 0xff, 0x20, 0x55}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0xbe, &(0x7f0000000100)=@string={0xbe, 0x3, "624cf9279a25f8ca27d440fdf13cc2a51f9301772f36af3b9c347bf80fafc123b5ed81206e6782b5013dc2c44f08785f6ee7abe6bd7600436acec343d918677605b91f001f9dbf4d6bccd26dbc84e7dd761b27202e647a392ba24059a23b2701a14dcf3e52bd52f555cd0b266199373c24ace13eee8b34cd23bd5b48071aaf2aea6b8d791bb408b3cf514165a653a5261c3359f7f2fb7ad47e1ae50cf93e2383043e94b7ba0706240e36bcfc3666521c4d219c5fc55ca1cd492c2b60"}}, {0xd3, &(0x7f0000000280)=@string={0xd3, 0x3, "06db6526b1671966c17adfe87a79e148bf228baf384260857777347bccfec5112cab61b7a053580af2827f6cbdc1918ad1919440d03addfde6acdff84dd3745b84df9587dd816f7571a092a43ac823b6bd999f21a3bb11d7f1576b3d2fd0989789661d0168eba255b94adace2d6bbf44af06437502bc57a94d38e678aee73b3055eb0c33fdf1cd4df417d5b0473b10f821b81272ccd979ac79dc17f7aa8f559ad79748ebf48c723c8c3a58b2304dc53d58705196c3ab57876dbecb70b969707624fa6c31290fdaf394576a5d3b44d199f3"}}, {0x5b, &(0x7f0000000380)=@string={0x5b, 0x3, "255a0ecf25c9c6cbf8b64be251781a7c4d3b8724ba32eca49ef37d026efd351d660e9de1eddb206dc9b863d9f595077a06d615f63c156f3ef1cbad6b74e41d6a323a02ac6dc2a700e118eb69f9a93f96f886c67f7ace632b1e"}}, {0x30, &(0x7f0000000200)=@string={0x30, 0x3, "0730195ec545f0cc59c292aaf812d418039c2cc8ac4ec700893dc27744c8447f89707f300f28ee9a38e8a7c7d733"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x439}}]}) r2 = socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000004c0)={0x1f, 0x34, @any, 0x0, 0x2}, 0xe) listen(r4, 0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = dup3(r2, r2, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 168.62248ms ago: executing program 3 (id=5467): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x1) (async, rerun: 32) r1 = socket(0x1000000010, 0x80002, 0x2000000) (rerun: 32) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x100, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xf, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x2, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x5, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x8, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0xf, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b88, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x8c, 0xffff, 0x5, 0xfffeffff, 0x3ff, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x4, 0x2, 0x81, 0x9, 0x280, 0x0, 0xb, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x4, 0x4, 0x7, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x800001, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) (async) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) (async) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b00000000009500001100000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) (async) r8 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) sendto$inet6(r1, &(0x7f0000000600)="cf9730b130ba32728c7b3d24a5f7d85f", 0x10, 0x20040081, &(0x7f0000001980)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) (async, rerun: 64) ftruncate(r8, 0x10000) (rerun: 64) unshare(0x20060400) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000004000000040000001200000000000000", @ANYRES32, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="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"], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0500"], 0x10) (async) fcntl$addseals(r8, 0x409, 0x7) write(r8, &(0x7f0000000200)='D', 0x1) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) (rerun: 64) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x0, 0xf917, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000f40)={0x3, 0x6, @start={r11, 0x0, "daad2e2cf855e1bd650ba41b40a8ffb431f027162561bfb569d56c2b669f5e375bfb4842cb9e4061a16c42ed436dc74108f5542f0c6436a1955e3155e8994685da8f14e6e1258d854f9570b914428750254588968b0b20212a189b6fa164c7c655e5cf9b9548f5d766e0fe13386837e390f380dd1a2d018b2ba6b19b023d1478497466953e65a7d44804ac275f01fae01486f71b34d89e253b5beb3fa31e53d39ccd1c562b5b35684c1bbf4f4f0f5bbc659029a1360c6c20a3f15ef6487e864c213f1b64ba064ec817746977cee5c9d592d015d066859c5869bff5932718563d7fd58b3b0aef37c8f04009df924851c64a64cc341ce2e39cacfb1cf4489a65fe0f9dec476889afb7670076465acddd810cfba58f5352b595599603eeb3c7dd4084b86e3563ab4ebf712ef286b820e9aa4239fbb5d139bec8985c5111aa7bf27d7fa424e1dcfcbec08910d44ed0bf3148189c0700822e4895281bb874e58b71ff993ebbf5263b0dfe9ff3c71a6ba93097b389d8c55ea5f4787dc2e9b50bdec27b5336b014e68f9102cf4d8e0a9e125bfe8a400a1e8aeeca2f806ddaefe4ca35a9e51476b907e1a939224b8250049b23309d3ae475c8a020c36cd0ee92910a7c75260f62f61890bff7b4301459862c1de50cbdd9e516afcdbde52a240d7ec322fec81421760f21edf2722f51a5b10c82817ed945ec96fb6217b41de0f73f8fc806b11ce12036254c57d6b2bde890d29abe8ec3c8b5a1abfa2bf7d5d1b4721a092d1ed53f19083fd065d0c6ef5452396abeb5d7501302df9dfe83321043bd09065b6fc9fbb73a4784c48516fb72dca4f9a66112f651a0f43314ede24d324f7cd10cf546c9005564ebaea0cc37f91ce43fa2efc154e157e5f077d30c1f2eb9c9e08b93fccba4639f0796e4bfaf2d23d31fca70a765bd781d30276101a276a4e598368d9e27eb4418741ac5f027ee326c1b5bef6daa02c52703d351bdba23b4cc6178156dd679bebd7787a36be327fbc9ed0c69a7ed7c231a1cea9e66cb16969aa567597253174abd8315c19251840f78a33684bf30554fae47294d5e6ef4c405df1f4e9b2f7047cb63af32736d30079b4c2e97dbbe172da345ef4934a80666171ebcfeaa2883bbef74129f604ca0993cef9cfd33a6a69fa4983a25c659176ca876e99440125b033aa88d3e8c12a38c0ecf50c03bfe18991de430bfa10a430d41a309434d5a5edb4fab9a146328a8ff2cfddd089bd51d520bf94544a3bbebc0f925c45b5ef7b88da5a562a5c693d74ea27323c58eb19ddd2168a0f236d15aa816509e6f958942b936ddba37354f7336d62db0d3959ea91a8cad9d357d640c7aa36cb59aab62d13ed326a2c718d725cce5641502ee32351fb335f5498d21ef05bd44404219bbd30cb41ceb382d706a29f2982fa76491de0614ec03839c82364f4522884b", "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"}, [0x10001, 0x100000000002, 0x0, 0x8, 0xb92, 0xfffffffffffffffd, 0x10, 0xffffeffffffffffc, 0x7, 0x100, 0x6, 0x80, 0x9, 0x14, 0xc, 0x525e02a0, 0x3, 0x3, 0x4, 0x7fffffff, 0x85, 0x7, 0xe1, 0x2, 0xac8, 0x5, 0x8, 0x6, 0x0, 0x100000000, 0x1d86, 0xb3, 0x8, 0xffffffffffffffad, 0x7, 0x3, 0x0, 0x68c8, 0x5, 0x0, 0x6ac, 0xfffffffffffffff9, 0x5, 0x40, 0x3, 0x0, 0x9, 0x0, 0x9, 0x4, 0xfffffffffffffced, 0x80, 0x4, 0x9, 0x0, 0x9b, 0xe4, 0x7, 0x1ff, 0x0, 0x100000000, 0xd, 0x9, 0xf72a]}) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x1010445, &(0x7f0000000ac0)={[{@max_dir_size_kb}, {@i_version}, {@usrjquota}, {@quota}, {@jqfmt_vfsold}, {@nomblk_io_submit}]}, 0x0, 0x445, &(0x7f0000000640)="$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") (async, rerun: 64) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) (rerun: 64) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001dc0)={0x68, r12, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf1a}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040004}, 0x40000) 46.101868ms ago: executing program 3 (id=5468): socket(0x10, 0x803, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x40000) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000026c0)='./file2\x00', 0x200000, &(0x7f0000000340)={[{@dioread_lock}, {@noquota}, {@grpquota}, {@grpquota}, {@grpquota}]}, 0xfc, 0x58a, &(0x7f0000000680)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x1246, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x400000000000000, 0x1}, 0x800) 0s ago: executing program 0 (id=5349): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) kernel console output (not intermixed with test programs): 46596][T11293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.554387][T11293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.586314][T20349] loop2: detected capacity change from 0 to 128 [ 363.603826][T11293] veth1_macvtap: left promiscuous mode [ 363.625661][T11293] veth0_macvtap: left promiscuous mode [ 363.637988][T11293] veth1_vlan: left promiscuous mode [ 363.652305][T11293] veth0_vlan: left promiscuous mode [ 363.660243][T20349] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 363.676857][T20349] syz.2.4636: attempt to access beyond end of device [ 363.676857][T20349] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 363.767018][T11277] kworker/u8:48: attempt to access beyond end of device [ 363.767018][T11277] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 363.837817][T20366] loop2: detected capacity change from 0 to 1024 [ 363.865934][T11293] team0 (unregistering): Port device team_slave_1 removed [ 363.876647][T11293] team0 (unregistering): Port device team_slave_0 removed [ 363.889864][T20366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.098300][T20297] Failed to initialize the IGMP autojoin socket (err -2) [ 364.201058][T20379] __nla_validate_parse: 1 callbacks suppressed [ 364.201082][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4643'. [ 364.256656][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4643'. [ 364.309162][T20381] vhci_hcd vhci_hcd.2: invalid port number 98 [ 364.315543][T20381] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 364.405317][T20297] chnl_net:caif_netlink_parms(): no params data found [ 364.540113][T20406] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 364.557842][T20406] SELinux: failed to load policy [ 364.689022][T20297] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.697340][T20297] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.703481][T20422] FAULT_INJECTION: forcing a failure. [ 364.703481][T20422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.719955][T20422] CPU: 0 UID: 0 PID: 20422 Comm: syz.7.4653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 364.720093][T20422] Tainted: [W]=WARN [ 364.720104][T20422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.720138][T20422] Call Trace: [ 364.720148][T20422] [ 364.720157][T20422] __dump_stack+0x1d/0x30 [ 364.720191][T20422] dump_stack_lvl+0x95/0xd0 [ 364.720297][T20422] dump_stack+0x15/0x1b [ 364.720325][T20422] should_fail_ex+0x263/0x280 [ 364.720367][T20422] should_fail+0xb/0x20 [ 364.720405][T20422] should_fail_usercopy+0x1a/0x20 [ 364.720482][T20422] _copy_from_user+0x1c/0xb0 [ 364.720511][T20422] input_event_from_user+0x5e/0x190 [ 364.720581][T20422] ? input_inject_event+0x104/0x120 [ 364.720619][T20422] evdev_write+0x1b0/0x2b0 [ 364.720722][T20422] ? __pfx_evdev_write+0x10/0x10 [ 364.720797][T20422] vfs_write+0x269/0x9f0 [ 364.720822][T20422] ? __rcu_read_unlock+0x4e/0x70 [ 364.720921][T20422] ? __fget_files+0x184/0x1c0 [ 364.720951][T20422] ? tick_program_event+0x79/0xc0 [ 364.721000][T20422] ksys_write+0xdc/0x1a0 [ 364.721028][T20422] __x64_sys_write+0x40/0x50 [ 364.721055][T20422] x64_sys_call+0x2847/0x3000 [ 364.721155][T20422] do_syscall_64+0xc0/0x2a0 [ 364.721198][T20422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.721228][T20422] RIP: 0033:0x7f245137aeb9 [ 364.721251][T20422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.721283][T20422] RSP: 002b:00007f244fdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.721311][T20422] RAX: ffffffffffffffda RBX: 00007f24515f5fa0 RCX: 00007f245137aeb9 [ 364.721331][T20422] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 364.721349][T20422] RBP: 00007f244fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 364.721377][T20422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.721394][T20422] R13: 00007f24515f6038 R14: 00007f24515f5fa0 R15: 00007fff17819b08 [ 364.721423][T20422] [ 364.928547][T20297] bridge_slave_0: entered allmulticast mode [ 364.935251][T20297] bridge_slave_0: entered promiscuous mode [ 364.944692][T20297] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.951822][T20297] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.959253][T20297] bridge_slave_1: entered allmulticast mode [ 364.966902][T20297] bridge_slave_1: entered promiscuous mode [ 365.056568][T20297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.085325][T20426] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 365.091952][T20426] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 365.099747][T20426] vhci_hcd vhci_hcd.0: Device attached [ 365.143698][T20297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.199892][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.223814][T20297] team0: Port device team_slave_0 added [ 365.257471][T20297] team0: Port device team_slave_1 added [ 365.308138][T20297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.315315][T20297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.341803][T20297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.354274][T20297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.361277][T20297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.387898][T20297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.389914][ T9570] usb 2-1: SetAddress Request (2) to port 0 [ 365.408843][ T9570] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 365.435128][T20442] SELinux: failed to load policy [ 365.444697][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 365.444715][ T29] audit: type=1400 audit(1769619808.468:8954): avc: denied { ioctl } for pid=20440 comm="syz.7.4659" path="socket:[61058]" dev="sockfs" ino=61058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.578007][T20297] hsr_slave_0: entered promiscuous mode [ 365.597846][T20446] FAULT_INJECTION: forcing a failure. [ 365.597846][T20446] name failslab, interval 1, probability 0, space 0, times 0 [ 365.605442][T20297] hsr_slave_1: entered promiscuous mode [ 365.610843][T20446] CPU: 0 UID: 0 PID: 20446 Comm: syz.7.4661 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.610963][T20446] Tainted: [W]=WARN [ 365.611000][T20446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.611039][T20446] Call Trace: [ 365.611053][T20446] [ 365.611062][T20446] __dump_stack+0x1d/0x30 [ 365.611202][T20446] dump_stack_lvl+0x95/0xd0 [ 365.611285][T20446] dump_stack+0x15/0x1b [ 365.611391][T20446] should_fail_ex+0x263/0x280 [ 365.611496][T20446] should_failslab+0x8c/0xb0 [ 365.611596][T20446] __kmalloc_noprof+0xb8/0x580 [ 365.611682][T20446] ? copy_splice_read+0xc2/0x6c0 [ 365.611819][T20446] copy_splice_read+0xc2/0x6c0 [ 365.612058][T20446] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 365.612210][T20446] splice_direct_to_actor+0x28f/0x670 [ 365.612344][T20446] ? __pfx_direct_splice_actor+0x10/0x10 [ 365.612447][T20446] do_splice_direct+0x119/0x1a0 [ 365.612522][T20446] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 365.612718][T20446] do_sendfile+0x382/0x650 [ 365.612819][T20446] __x64_sys_sendfile64+0x105/0x150 [ 365.612918][T20446] x64_sys_call+0x2db1/0x3000 [ 365.613017][T20446] do_syscall_64+0xc0/0x2a0 [ 365.613152][T20446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.613235][T20446] RIP: 0033:0x7f245137aeb9 [ 365.613290][T20446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.613363][T20446] RSP: 002b:00007f244fdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 365.613427][T20446] RAX: ffffffffffffffda RBX: 00007f24515f5fa0 RCX: 00007f245137aeb9 [ 365.613478][T20446] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 365.613520][T20446] RBP: 00007f244fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 365.613605][T20446] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 365.613664][T20446] R13: 00007f24515f6038 R14: 00007f24515f5fa0 R15: 00007fff17819b08 [ 365.613760][T20446] [ 365.834202][T20427] vhci_hcd: connection reset by peer [ 365.857990][T11277] vhci_hcd vhci_hcd.0: stop threads [ 365.863278][T11277] vhci_hcd vhci_hcd.0: release socket [ 365.868790][T11277] vhci_hcd vhci_hcd.0: disconnect device [ 365.926869][T20470] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4667'. [ 365.943438][T20471] loop2: detected capacity change from 0 to 128 [ 366.069755][T20480] FAULT_INJECTION: forcing a failure. [ 366.069755][T20480] name failslab, interval 1, probability 0, space 0, times 0 [ 366.082529][T20480] CPU: 1 UID: 0 PID: 20480 Comm: syz.3.4670 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.082568][T20480] Tainted: [W]=WARN [ 366.082635][T20480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.082650][T20480] Call Trace: [ 366.082659][T20480] [ 366.082671][T20480] __dump_stack+0x1d/0x30 [ 366.082701][T20480] dump_stack_lvl+0x95/0xd0 [ 366.082795][T20480] dump_stack+0x15/0x1b [ 366.082826][T20480] should_fail_ex+0x263/0x280 [ 366.082912][T20480] should_failslab+0x8c/0xb0 [ 366.082941][T20480] __kmalloc_noprof+0xb8/0x580 [ 366.083046][T20480] ? copy_splice_read+0xc2/0x6c0 [ 366.083111][T20480] copy_splice_read+0xc2/0x6c0 [ 366.083189][T20480] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 366.083292][T20480] splice_direct_to_actor+0x28f/0x670 [ 366.083320][T20480] ? __pfx_direct_splice_actor+0x10/0x10 [ 366.083359][T20480] do_splice_direct+0x119/0x1a0 [ 366.083380][T20480] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 366.083408][T20480] do_sendfile+0x382/0x650 [ 366.083489][T20480] __x64_sys_sendfile64+0x105/0x150 [ 366.083525][T20480] x64_sys_call+0x2db1/0x3000 [ 366.083553][T20480] do_syscall_64+0xc0/0x2a0 [ 366.083599][T20480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.083631][T20480] RIP: 0033:0x7fe5131aaeb9 [ 366.083655][T20480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.083691][T20480] RSP: 002b:00007fe511c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 366.083743][T20480] RAX: ffffffffffffffda RBX: 00007fe513425fa0 RCX: 00007fe5131aaeb9 [ 366.083761][T20480] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 366.083776][T20480] RBP: 00007fe511c07090 R08: 0000000000000000 R09: 0000000000000000 [ 366.083795][T20480] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 366.083815][T20480] R13: 00007fe513426038 R14: 00007fe513425fa0 R15: 00007ffd4ea3dd28 [ 366.083865][T20480] [ 366.307061][ T29] audit: type=1400 audit(1769619809.381:8955): avc: denied { read } for pid=20481 comm="syz.3.4671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.348505][T20482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.416223][ T29] audit: type=1400 audit(1769619809.496:8956): avc: denied { write } for pid=20493 comm="syz.3.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.441052][ T29] audit: type=1400 audit(1769619809.517:8957): avc: denied { read } for pid=20493 comm="syz.3.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.707759][T20297] netdevsim netdevsim8 netdevsim0: renamed from eth17 [ 366.728377][T20297] netdevsim netdevsim8 netdevsim1: renamed from eth18 [ 366.745732][T20297] netdevsim netdevsim8 netdevsim2: renamed from eth19 [ 366.759516][ T29] audit: type=1400 audit(1769619809.853:8958): avc: denied { create } for pid=20506 comm="syz.7.4680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.781746][ T29] audit: type=1400 audit(1769619809.853:8959): avc: denied { read write } for pid=20506 comm="syz.7.4680" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.806570][ T29] audit: type=1400 audit(1769619809.853:8960): avc: denied { open } for pid=20506 comm="syz.7.4680" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.834848][T20297] netdevsim netdevsim8 netdevsim3: renamed from eth20 [ 366.894913][T20511] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 366.894913][T20511] program syz.7.4680 not setting count and/or reply_len properly [ 366.952182][ T29] audit: type=1400 audit(1769619809.990:8961): avc: denied { write } for pid=20506 comm="syz.7.4680" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 366.976115][ T29] audit: type=1400 audit(1769619809.990:8962): avc: denied { open } for pid=20506 comm="syz.7.4680" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.001826][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4680'. [ 367.252367][T20297] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.271431][T20497] syz.3.4677 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 367.282626][T20497] CPU: 1 UID: 0 PID: 20497 Comm: syz.3.4677 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.282674][T20497] Tainted: [W]=WARN [ 367.282743][T20497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.282762][T20497] Call Trace: [ 367.282772][T20497] [ 367.282783][T20497] __dump_stack+0x1d/0x30 [ 367.282819][T20497] dump_stack_lvl+0x95/0xd0 [ 367.282852][T20497] dump_stack+0x15/0x1b [ 367.282921][T20497] dump_header+0x80/0x240 [ 367.282953][T20497] oom_kill_process+0x295/0x350 [ 367.282989][T20497] out_of_memory+0x97d/0xb80 [ 367.283066][T20497] try_charge_memcg+0x62e/0xa10 [ 367.283103][T20497] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 367.283159][T20497] __read_swap_cache_async+0x17b/0x2d0 [ 367.283221][T20497] swap_cluster_readahead+0x262/0x3c0 [ 367.283263][T20497] swapin_readahead+0xde/0x840 [ 367.283300][T20497] ? __rcu_read_unlock+0x33/0x70 [ 367.283473][T20497] ? __rcu_read_unlock+0x4e/0x70 [ 367.283507][T20497] ? swap_cache_get_folio+0x26f/0x280 [ 367.283553][T20497] do_swap_page+0x59b/0x2a50 [ 367.283671][T20497] ? __rcu_read_lock+0x36/0x50 [ 367.283705][T20497] ? __pfx_default_wake_function+0x10/0x10 [ 367.283784][T20497] handle_mm_fault+0xb40/0x3030 [ 367.283836][T20497] ? vma_start_read+0x1c7/0x2c0 [ 367.283877][T20497] do_user_addr_fault+0x62f/0x1050 [ 367.284032][T20497] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 367.284094][T20497] ? irqentry_exit+0x3c/0x510 [ 367.284131][T20497] exc_page_fault+0x62/0xa0 [ 367.284166][T20497] asm_exc_page_fault+0x26/0x30 [ 367.284237][T20497] RIP: 0033:0x7fe5131660be [ 367.284260][T20497] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 367.284289][T20497] RSP: 002b:00007ffd4ea3de10 EFLAGS: 00010246 [ 367.284315][T20497] RAX: 0000000000000000 RBX: 000055557926e500 RCX: 00007fe51316b78e [ 367.284335][T20497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.284354][T20497] RBP: 00007fe513427da0 R08: 0000000000000000 R09: 0000000000000000 [ 367.284373][T20497] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005d5de [ 367.284397][T20497] R13: 00007fe513425fac R14: 000000000005d2d9 R15: 00007ffd4ea3df90 [ 367.284424][T20497] [ 367.284432][T20497] memory: usage 307200kB, limit 307200kB, failcnt 3517 [ 367.344254][T11284] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.344292][T11284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.441774][T11284] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.442400][T20497] memory+swap: usage 309784kB, limit 9007199254740988kB, failcnt 0 [ 367.462076][T11284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.468203][T20497] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 367.566105][T20497] Memory cgroup stats for /syz3: [ 367.567650][T20497] cache 0 [ 367.575691][T20497] rss 0 [ 367.578484][T20497] shmem 0 [ 367.581508][T20497] mapped_file 0 [ 367.584987][T20497] dirty 0 [ 367.587972][T20497] writeback 0 [ 367.591491][T20497] workingset_refault_anon 1140 [ 367.596290][T20497] workingset_refault_file 12185 [ 367.601317][T20497] swap 2646016 [ 367.604728][T20497] swapcached 4096 [ 367.608630][T20497] pgpgin 410782 [ 367.612178][T20497] pgpgout 410780 [ 367.615927][T20497] pgfault 351920 [ 367.619555][T20497] pgmajfault 480 [ 367.623158][T20497] inactive_anon 4096 [ 367.627090][T20497] active_anon 0 [ 367.630673][T20497] inactive_file 0 [ 367.634772][T20497] active_file 4096 [ 367.638656][T20497] unevictable 0 [ 367.642184][T20497] hierarchical_memory_limit 314572800 [ 367.647595][T20497] hierarchical_memsw_limit 9223372036854771712 [ 367.653844][T20497] total_cache 0 [ 367.657445][T20497] total_rss 0 [ 367.660932][T20497] total_shmem 0 [ 367.664695][T20497] total_mapped_file 0 [ 367.668800][T20497] total_dirty 0 [ 367.672294][T20497] total_writeback 0 [ 367.676136][T20497] total_workingset_refault_anon 1140 [ 367.681502][T20497] total_workingset_refault_file 12185 [ 367.686946][T20497] total_swap 2646016 [ 367.690875][T20497] total_swapcached 4096 [ 367.695056][T20497] total_pgpgin 410782 [ 367.699185][T20497] total_pgpgout 410780 [ 367.703301][T20497] total_pgfault 351920 [ 367.707463][T20497] total_pgmajfault 480 [ 367.711587][T20497] total_inactive_anon 4096 [ 367.716079][T20497] total_active_anon 0 [ 367.720099][T20497] total_inactive_file 0 [ 367.724327][T20497] total_active_file 4096 [ 367.728618][T20497] total_unevictable 0 [ 367.730984][T20529] loop2: detected capacity change from 0 to 128 [ 367.732653][T20497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4198,pid=19221,uid=0 [ 367.746977][ T29] audit: type=1400 audit(1769619810.798:8963): avc: denied { listen } for pid=20525 comm="syz.0.4684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.754227][T20497] Memory cgroup out of memory: Killed process 19221 (syz.3.4198) total-vm:96048kB, anon-rss:1232kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 367.798038][T20531] program syz.7.4686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.941673][T16718] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 367.953029][T16718] CPU: 1 UID: 0 PID: 16718 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.953076][T16718] Tainted: [W]=WARN [ 367.953159][T16718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.953178][T16718] Call Trace: [ 367.953235][T16718] [ 367.953246][T16718] __dump_stack+0x1d/0x30 [ 367.953284][T16718] dump_stack_lvl+0x95/0xd0 [ 367.953349][T16718] dump_stack+0x15/0x1b [ 367.953375][T16718] dump_header+0x80/0x240 [ 367.953401][T16718] oom_kill_process+0x295/0x350 [ 367.953431][T16718] out_of_memory+0x97d/0xb80 [ 367.953548][T16718] try_charge_memcg+0x62e/0xa10 [ 367.953589][T16718] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 367.953688][T16718] __read_swap_cache_async+0x17b/0x2d0 [ 367.953739][T16718] swap_cluster_readahead+0x262/0x3c0 [ 367.953829][T16718] swapin_readahead+0xde/0x840 [ 367.953879][T16718] ? kvm_sched_clock_read+0x11/0x20 [ 367.953915][T16718] ? sched_clock+0x3f/0x60 [ 367.954007][T16718] ? __perf_event_task_sched_in+0xa65/0xad0 [ 367.954059][T16718] ? __rcu_read_unlock+0x4e/0x70 [ 367.954106][T16718] ? swap_cache_get_folio+0x26f/0x280 [ 367.954191][T16718] do_swap_page+0x59b/0x2a50 [ 367.954266][T16718] ? finish_task_switch+0x79/0x280 [ 367.954366][T16718] ? __schedule+0x82d/0xc90 [ 367.954394][T16718] ? __rcu_read_lock+0x36/0x50 [ 367.954434][T16718] ? __pfx_default_wake_function+0x10/0x10 [ 367.954471][T16718] handle_mm_fault+0xb40/0x3030 [ 367.954559][T16718] ? vma_start_read+0x1c7/0x2c0 [ 367.954643][T16718] do_user_addr_fault+0x62f/0x1050 [ 367.954686][T16718] exc_page_fault+0x62/0xa0 [ 367.954722][T16718] asm_exc_page_fault+0x26/0x30 [ 367.954754][T16718] RIP: 0033:0x7fe5131660d7 [ 367.954801][T16718] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 367.954912][T16718] RSP: 002b:00007ffd4ea3e020 EFLAGS: 00010202 [ 367.954941][T16718] RAX: 0000000000000000 RBX: 000055557926e500 RCX: 00007fe5131660d7 [ 367.954963][T16718] RDX: 00007ffd4ea3e060 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.954983][T16718] RBP: 00007ffd4ea3e0cc R08: 0000000000000000 R09: 0000000000000000 [ 367.955004][T16718] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 367.955023][T16718] R13: 00000000000927c0 R14: 000000000005d2cb R15: 00007ffd4ea3e120 [ 367.955085][T16718] [ 367.955096][T16718] memory: usage 307200kB, limit 307200kB, failcnt 3626 [ 368.200804][T16718] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 368.208734][T16718] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 368.216502][T16718] Memory cgroup stats for /syz3: [ 368.217070][T16718] cache 0 [ 368.225234][T16718] rss 0 [ 368.228271][T16718] shmem 0 [ 368.231366][T16718] mapped_file 0 [ 368.234863][T16718] dirty 0 [ 368.237828][T16718] writeback 0 [ 368.241206][T16718] workingset_refault_anon 1142 [ 368.246570][T16718] workingset_refault_file 12185 [ 368.251577][T16718] swap 368640 [ 368.254985][T16718] swapcached 12288 [ 368.258774][T16718] pgpgin 410784 [ 368.262375][T16718] pgpgout 410780 [ 368.266045][T16718] pgfault 351920 [ 368.269807][T16718] pgmajfault 480 [ 368.273430][T16718] inactive_anon 0 [ 368.277128][T16718] active_anon 12288 [ 368.281072][T16718] inactive_file 0 [ 368.284731][T16718] active_file 4096 [ 368.288540][T16718] unevictable 0 [ 368.292043][T16718] hierarchical_memory_limit 314572800 [ 368.297495][T16718] hierarchical_memsw_limit 9223372036854771712 [ 368.303722][T16718] total_cache 0 [ 368.307268][T16718] total_rss 0 [ 368.310684][T16718] total_shmem 0 [ 368.314438][T16718] total_mapped_file 0 [ 368.318720][T16718] total_dirty 0 [ 368.322251][T16718] total_writeback 0 [ 368.326301][T16718] total_workingset_refault_anon 1142 [ 368.331628][T16718] total_workingset_refault_file 12185 [ 368.337169][T16718] total_swap 368640 [ 368.341006][T16718] total_swapcached 12288 [ 368.345371][T16718] total_pgpgin 410784 [ 368.346894][T20297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.349375][T16718] total_pgpgout 410780 [ 368.360726][T16718] total_pgfault 351920 [ 368.364969][T16718] total_pgmajfault 480 [ 368.369274][T16718] total_inactive_anon 0 [ 368.373600][T16718] total_active_anon 12288 [ 368.378036][T16718] total_inactive_file 0 [ 368.382402][T16718] total_active_file 4096 [ 368.386676][T16718] total_unevictable 0 [ 368.390692][T16718] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4677,pid=20497,uid=0 [ 368.406224][T16718] Memory cgroup out of memory: Killed process 20497 (syz.3.4677) total-vm:94000kB, anon-rss:1328kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 368.516549][T20546] FAULT_INJECTION: forcing a failure. [ 368.516549][T20546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.530015][T20546] CPU: 1 UID: 0 PID: 20546 Comm: syz.0.4689 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 368.530095][T20546] Tainted: [W]=WARN [ 368.530105][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.530123][T20546] Call Trace: [ 368.530131][T20546] [ 368.530139][T20546] __dump_stack+0x1d/0x30 [ 368.530172][T20546] dump_stack_lvl+0x95/0xd0 [ 368.530268][T20546] dump_stack+0x15/0x1b [ 368.530295][T20546] should_fail_ex+0x263/0x280 [ 368.530340][T20546] should_fail_alloc_page+0xf2/0x100 [ 368.530376][T20546] alloc_pages_bulk_noprof+0x101/0x520 [ 368.530453][T20546] copy_splice_read+0xf3/0x6c0 [ 368.530499][T20546] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 368.530536][T20546] splice_direct_to_actor+0x28f/0x670 [ 368.530566][T20546] ? __pfx_direct_splice_actor+0x10/0x10 [ 368.530612][T20546] do_splice_direct+0x119/0x1a0 [ 368.530635][T20546] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 368.530715][T20546] do_sendfile+0x382/0x650 [ 368.530747][T20546] __x64_sys_sendfile64+0x105/0x150 [ 368.530782][T20546] x64_sys_call+0x2db1/0x3000 [ 368.530818][T20546] do_syscall_64+0xc0/0x2a0 [ 368.530935][T20546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.530963][T20546] RIP: 0033:0x7fe134d7aeb9 [ 368.530980][T20546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.531000][T20546] RSP: 002b:00007fe1337d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 368.531053][T20546] RAX: ffffffffffffffda RBX: 00007fe134ff5fa0 RCX: 00007fe134d7aeb9 [ 368.531073][T20546] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 368.531091][T20546] RBP: 00007fe1337d7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.531107][T20546] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 368.531192][T20546] R13: 00007fe134ff6038 R14: 00007fe134ff5fa0 R15: 00007ffee99f9948 [ 368.531214][T20546] [ 368.784902][T20549] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4690'. [ 369.046312][T20297] veth0_vlan: entered promiscuous mode [ 369.064798][T20297] veth1_vlan: entered promiscuous mode [ 369.139645][T20297] veth0_macvtap: entered promiscuous mode [ 369.170444][T20297] veth1_macvtap: entered promiscuous mode [ 369.272343][T20297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.318288][T20297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.360110][T20297] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 369.383090][T20616] Failed to initialize the IGMP autojoin socket (err -2) [ 369.396075][T20609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4701'. [ 369.405523][T20297] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 369.423582][T20297] wireguard: wg0: Could not create IPv4 socket [ 369.432530][T20297] wireguard: wg1: Could not create IPv4 socket [ 369.441271][T20297] wireguard: wg2: Could not create IPv4 socket [ 369.468117][T20624] FAULT_INJECTION: forcing a failure. [ 369.468117][T20624] name failslab, interval 1, probability 0, space 0, times 0 [ 369.481062][T20624] CPU: 0 UID: 0 PID: 20624 Comm: syz.7.4703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.481103][T20624] Tainted: [W]=WARN [ 369.481113][T20624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.481130][T20624] Call Trace: [ 369.481156][T20624] [ 369.481164][T20624] __dump_stack+0x1d/0x30 [ 369.481191][T20624] dump_stack_lvl+0x95/0xd0 [ 369.481219][T20624] dump_stack+0x15/0x1b [ 369.481247][T20624] should_fail_ex+0x263/0x280 [ 369.481322][T20624] should_failslab+0x8c/0xb0 [ 369.481382][T20624] __kmalloc_noprof+0xb8/0x580 [ 369.481416][T20624] ? iter_file_splice_write+0xf9/0xa80 [ 369.481454][T20624] iter_file_splice_write+0xf9/0xa80 [ 369.481483][T20624] ? shmem_file_read_iter+0x488/0x540 [ 369.481540][T20624] ? copy_splice_read+0x675/0x6c0 [ 369.481588][T20624] ? copy_splice_read+0x675/0x6c0 [ 369.481636][T20624] ? __pfx_iter_file_splice_write+0x10/0x10 [ 369.481689][T20624] direct_splice_actor+0x156/0x2a0 [ 369.481717][T20624] ? shmem_file_open+0x31/0x40 [ 369.481759][T20624] splice_direct_to_actor+0x311/0x670 [ 369.481809][T20624] ? __pfx_direct_splice_actor+0x10/0x10 [ 369.481893][T20624] do_splice_direct+0x119/0x1a0 [ 369.481919][T20624] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 369.481967][T20624] do_sendfile+0x382/0x650 [ 369.482004][T20624] __x64_sys_sendfile64+0x105/0x150 [ 369.482038][T20624] x64_sys_call+0x2db1/0x3000 [ 369.482084][T20624] do_syscall_64+0xc0/0x2a0 [ 369.482175][T20624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.482284][T20624] RIP: 0033:0x7f245137aeb9 [ 369.482303][T20624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.482325][T20624] RSP: 002b:00007f244fdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 369.482346][T20624] RAX: ffffffffffffffda RBX: 00007f24515f5fa0 RCX: 00007f245137aeb9 [ 369.482363][T20624] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 369.482380][T20624] RBP: 00007f244fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 369.482436][T20624] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 369.482453][T20624] R13: 00007f24515f6038 R14: 00007f24515f5fa0 R15: 00007fff17819b08 [ 369.482478][T20624] [ 369.754491][T20631] netlink: 'syz.8.4623': attribute type 20 has an invalid length. [ 369.762477][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4623'. [ 369.829661][T20631] netlink: 'syz.8.4623': attribute type 20 has an invalid length. [ 369.837960][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4623'. [ 369.884796][T20641] loop2: detected capacity change from 0 to 764 [ 370.073559][T20664] FAULT_INJECTION: forcing a failure. [ 370.073559][T20664] name failslab, interval 1, probability 0, space 0, times 0 [ 370.086448][T20664] CPU: 0 UID: 0 PID: 20664 Comm: syz.0.4713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.086536][T20664] Tainted: [W]=WARN [ 370.086546][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.086563][T20664] Call Trace: [ 370.086572][T20664] [ 370.086583][T20664] __dump_stack+0x1d/0x30 [ 370.086617][T20664] dump_stack_lvl+0x95/0xd0 [ 370.086648][T20664] dump_stack+0x15/0x1b [ 370.086703][T20664] should_fail_ex+0x263/0x280 [ 370.086815][T20664] should_failslab+0x8c/0xb0 [ 370.086847][T20664] __kmalloc_noprof+0xb8/0x580 [ 370.086951][T20664] ? iter_file_splice_write+0xf9/0xa80 [ 370.087096][T20664] ? iter_file_splice_write+0xca/0xa80 [ 370.087271][T20664] iter_file_splice_write+0xf9/0xa80 [ 370.087298][T20664] ? shmem_file_read_iter+0x488/0x540 [ 370.087333][T20664] ? copy_splice_read+0x675/0x6c0 [ 370.087401][T20664] ? copy_splice_read+0x675/0x6c0 [ 370.087450][T20664] ? copy_splice_read+0x675/0x6c0 [ 370.087501][T20664] ? __pfx_iter_file_splice_write+0x10/0x10 [ 370.087581][T20664] direct_splice_actor+0x156/0x2a0 [ 370.087603][T20664] ? shmem_file_open+0x31/0x40 [ 370.087718][T20664] splice_direct_to_actor+0x311/0x670 [ 370.087768][T20664] ? __pfx_direct_splice_actor+0x10/0x10 [ 370.087803][T20664] do_splice_direct+0x119/0x1a0 [ 370.087830][T20664] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 370.087865][T20664] do_sendfile+0x382/0x650 [ 370.087940][T20664] __x64_sys_sendfile64+0x105/0x150 [ 370.087977][T20664] x64_sys_call+0x2db1/0x3000 [ 370.088030][T20664] do_syscall_64+0xc0/0x2a0 [ 370.088072][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.088184][T20664] RIP: 0033:0x7fe134d7aeb9 [ 370.088206][T20664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.088245][T20664] RSP: 002b:00007fe1337d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 370.088272][T20664] RAX: ffffffffffffffda RBX: 00007fe134ff5fa0 RCX: 00007fe134d7aeb9 [ 370.088290][T20664] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 370.088306][T20664] RBP: 00007fe1337d7090 R08: 0000000000000000 R09: 0000000000000000 [ 370.088368][T20664] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 370.088380][T20664] R13: 00007fe134ff6038 R14: 00007fe134ff5fa0 R15: 00007ffee99f9948 [ 370.088426][T20664] [ 370.338528][ T9570] usb 2-1: device descriptor read/8, error -110 [ 370.378531][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 370.378552][ T29] audit: type=1400 audit(1769619813.653:8984): avc: denied { create } for pid=20676 comm="syz.0.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 370.457984][ T9570] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 370.486631][ T9570] usb 2-1: enqueue for inactive port 0 [ 370.493468][ T9570] usb 2-1: enqueue for inactive port 0 [ 370.501053][T20695] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4717'. [ 370.531160][ T9570] usb 2-1: enqueue for inactive port 0 [ 370.589738][ T29] audit: type=1400 audit(1769619813.874:8985): avc: denied { override_creds } for pid=20698 comm="syz.2.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 370.713756][T20714] bridge2: entered promiscuous mode [ 370.912832][ T29] audit: type=1400 audit(1769619814.209:8986): avc: denied { create } for pid=20733 comm="syz.8.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.932866][ T29] audit: type=1400 audit(1769619814.209:8987): avc: denied { bind } for pid=20733 comm="syz.8.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.940944][T20736] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4726'. [ 370.963103][T20737] netlink: 'syz.8.4727': attribute type 1 has an invalid length. [ 370.972863][T20737] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4727'. [ 371.009770][ T29] audit: type=1400 audit(1769619814.272:8988): avc: denied { read } for pid=20733 comm="syz.8.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.070907][T20750] netlink: 'syz.7.4730': attribute type 20 has an invalid length. [ 371.078900][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4730'. [ 371.090004][T20750] netlink: 'syz.7.4730': attribute type 20 has an invalid length. [ 371.097979][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4730'. [ 371.195060][ T29] audit: type=1326 audit(1769619814.503:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20757 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe134d7aeb9 code=0x7ffc0000 [ 371.218722][ T29] audit: type=1326 audit(1769619814.514:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20757 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fe134d7aeb9 code=0x7ffc0000 [ 371.242574][ T29] audit: type=1326 audit(1769619814.514:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20757 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe134d7aeb9 code=0x7ffc0000 [ 371.266403][ T29] audit: type=1326 audit(1769619814.514:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20757 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe134d7aeb9 code=0x7ffc0000 [ 371.310929][T20756] loop2: detected capacity change from 0 to 8192 [ 371.319131][ T29] audit: type=1326 audit(1769619814.514:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20757 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe134d7aeb9 code=0x7ffc0000 [ 371.444185][T20776] FAULT_INJECTION: forcing a failure. [ 371.444185][T20776] name failslab, interval 1, probability 0, space 0, times 0 [ 371.457024][T20776] CPU: 0 UID: 0 PID: 20776 Comm: syz.7.4735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 371.457122][T20776] Tainted: [W]=WARN [ 371.457129][T20776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.457143][T20776] Call Trace: [ 371.457161][T20776] [ 371.457170][T20776] __dump_stack+0x1d/0x30 [ 371.457201][T20776] dump_stack_lvl+0x95/0xd0 [ 371.457226][T20776] dump_stack+0x15/0x1b [ 371.457254][T20776] should_fail_ex+0x263/0x280 [ 371.457294][T20776] should_failslab+0x8c/0xb0 [ 371.457332][T20776] __kmalloc_noprof+0xb8/0x580 [ 371.457358][T20776] ? copy_splice_read+0xc2/0x6c0 [ 371.457477][T20776] copy_splice_read+0xc2/0x6c0 [ 371.457596][T20776] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 371.457645][T20776] splice_direct_to_actor+0x28f/0x670 [ 371.457674][T20776] ? __pfx_direct_splice_actor+0x10/0x10 [ 371.457721][T20776] do_splice_direct+0x119/0x1a0 [ 371.457743][T20776] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 371.457834][T20776] do_sendfile+0x382/0x650 [ 371.457865][T20776] __x64_sys_sendfile64+0x105/0x150 [ 371.457892][T20776] x64_sys_call+0x2db1/0x3000 [ 371.457988][T20776] do_syscall_64+0xc0/0x2a0 [ 371.458020][T20776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.458045][T20776] RIP: 0033:0x7f245137aeb9 [ 371.458078][T20776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.458102][T20776] RSP: 002b:00007f244fdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 371.458123][T20776] RAX: ffffffffffffffda RBX: 00007f24515f5fa0 RCX: 00007f245137aeb9 [ 371.458138][T20776] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 371.458157][T20776] RBP: 00007f244fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.458233][T20776] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 371.458247][T20776] R13: 00007f24515f6038 R14: 00007f24515f5fa0 R15: 00007fff17819b08 [ 371.458267][T20776] [ 371.667330][ T9570] usb usb2-port1: attempt power cycle [ 371.791882][T20791] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 371.802340][T20791] block device autoloading is deprecated and will be removed. [ 371.918803][T20799] FAULT_INJECTION: forcing a failure. [ 371.918803][T20799] name failslab, interval 1, probability 0, space 0, times 0 [ 371.931806][T20799] CPU: 0 UID: 0 PID: 20799 Comm: syz.7.4739 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 371.931842][T20799] Tainted: [W]=WARN [ 371.931849][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.931927][T20799] Call Trace: [ 371.931935][T20799] [ 371.931946][T20799] __dump_stack+0x1d/0x30 [ 371.932055][T20799] dump_stack_lvl+0x95/0xd0 [ 371.932080][T20799] dump_stack+0x15/0x1b [ 371.932109][T20799] should_fail_ex+0x263/0x280 [ 371.932151][T20799] should_failslab+0x8c/0xb0 [ 371.932263][T20799] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 371.932304][T20799] ? __alloc_skb+0x2f0/0x4b0 [ 371.932352][T20799] __alloc_skb+0x2f0/0x4b0 [ 371.932393][T20799] tipc_msg_create+0x47/0x230 [ 371.932427][T20799] tipc_group_proto_xmit+0xb7/0x2f0 [ 371.932619][T20799] tipc_group_update_rcv_win+0x49b/0x730 [ 371.932723][T20799] tipc_recvmsg+0x6d2/0x9f0 [ 371.932808][T20799] ? __pfx_tipc_recvmsg+0x10/0x10 [ 371.932833][T20799] sock_recvmsg+0x139/0x160 [ 371.932864][T20799] ____sys_recvmsg+0xf5/0x280 [ 371.932930][T20799] ___sys_recvmsg+0x11f/0x3b0 [ 371.932965][T20799] __x64_sys_recvmsg+0xd1/0x160 [ 371.932997][T20799] x64_sys_call+0x2cbf/0x3000 [ 371.933112][T20799] do_syscall_64+0xc0/0x2a0 [ 371.933154][T20799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.933178][T20799] RIP: 0033:0x7f245137aeb9 [ 371.933262][T20799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.933348][T20799] RSP: 002b:00007f244fdd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 371.933375][T20799] RAX: ffffffffffffffda RBX: 00007f24515f5fa0 RCX: 00007f245137aeb9 [ 371.933391][T20799] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 371.933405][T20799] RBP: 00007f244fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.933421][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.933496][T20799] R13: 00007f24515f6038 R14: 00007f24515f5fa0 R15: 00007fff17819b08 [ 371.933518][T20799] [ 372.231456][T20816] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4743'. [ 372.261136][T20811] infiniband !yz!: set active [ 372.266052][T20811] infiniband !yz!: added team_slave_0 [ 372.272243][T20811] !yz!: rxe_create_qp: returned err = -2 [ 372.277989][T20811] infiniband !yz!: Couldn't create ib_mad QP1 [ 372.284337][T20811] infiniband !yz!: Couldn't open port 1 [ 372.302588][T20811] RDS/IB: !yz!: added [ 372.315622][T20811] smc: adding ib device !yz! with port count 1 [ 372.330274][T20811] smc: ib device !yz! port 1 has no pnetid [ 372.347849][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4744'. [ 372.461573][T20825] FAULT_INJECTION: forcing a failure. [ 372.461573][T20825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.475044][T20825] CPU: 1 UID: 0 PID: 20825 Comm: syz.7.4747 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 372.475157][T20825] Tainted: [W]=WARN [ 372.475168][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.475184][T20825] Call Trace: [ 372.475191][T20825] [ 372.475199][T20825] __dump_stack+0x1d/0x30 [ 372.475227][T20825] dump_stack_lvl+0x95/0xd0 [ 372.475278][T20825] dump_stack+0x15/0x1b [ 372.475380][T20825] should_fail_ex+0x263/0x280 [ 372.475429][T20825] should_fail_alloc_page+0xf2/0x100 [ 372.475466][T20825] alloc_pages_bulk_noprof+0x101/0x520 [ 372.475546][T20825] copy_splice_read+0xf3/0x6c0 [ 372.475594][T20825] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 372.475697][T20825] splice_direct_to_actor+0x28f/0x670 [ 372.475727][T20825] ? __pfx_direct_splice_actor+0x10/0x10 [ 372.475865][T20825] do_splice_direct+0x119/0x1a0 [ 372.475893][T20825] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 372.475929][T20825] do_sendfile+0x382/0x650 [ 372.476022][T20825] __x64_sys_sendfile64+0x105/0x150 [ 372.476057][T20825] x64_sys_call+0x2db1/0x3000 [ 372.476139][T20825] do_syscall_64+0xc0/0x2a0 [ 372.476184][T20825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.476271][T20825] RIP: 0033:0x7f245137aeb9 [ 372.476305][T20825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.476332][T20825] RSP: 002b:00007f244fdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 372.476356][T20825] RAX: ffffffffffffffda RBX: 00007f24515f5fa0 RCX: 00007f245137aeb9 [ 372.476374][T20825] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 372.476397][T20825] RBP: 00007f244fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 372.476507][T20825] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 372.476526][T20825] R13: 00007f24515f6038 R14: 00007f24515f5fa0 R15: 00007fff17819b08 [ 372.476549][T20825] [ 372.868820][T20843] bond_slave_0: entered promiscuous mode [ 372.874635][T20843] bond_slave_1: entered promiscuous mode [ 372.885404][T20843] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 372.895156][T20843] bond_slave_0: left promiscuous mode [ 372.900658][T20843] bond_slave_1: left promiscuous mode [ 372.938616][T20856] loop8: detected capacity change from 0 to 128 [ 372.989085][T20850] netlink: 'syz.3.4752': attribute type 11 has an invalid length. [ 372.997350][T20858] netlink: 'syz.7.4757': attribute type 20 has an invalid length. [ 373.005762][T20858] netlink: 'syz.7.4757': attribute type 20 has an invalid length. [ 373.006938][T20856] SELinux: policydb version 1570974684 does not match my version range 15-35 [ 373.025359][T20856] SELinux: failed to load policy [ 373.070765][T20856] syz.8.4755: attempt to access beyond end of device [ 373.070765][T20856] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 373.132760][T11292] kworker/u8:63: attempt to access beyond end of device [ 373.132760][T11292] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 373.201523][T20877] FAULT_INJECTION: forcing a failure. [ 373.201523][T20877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.215024][T20877] CPU: 1 UID: 0 PID: 20877 Comm: syz.3.4761 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.215070][T20877] Tainted: [W]=WARN [ 373.215078][T20877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.215148][T20877] Call Trace: [ 373.215158][T20877] [ 373.215171][T20877] __dump_stack+0x1d/0x30 [ 373.215206][T20877] dump_stack_lvl+0x95/0xd0 [ 373.215283][T20877] dump_stack+0x15/0x1b [ 373.215305][T20877] should_fail_ex+0x263/0x280 [ 373.215349][T20877] should_fail_alloc_page+0xf2/0x100 [ 373.215428][T20877] alloc_pages_bulk_noprof+0x101/0x520 [ 373.215467][T20877] copy_splice_read+0xf3/0x6c0 [ 373.215569][T20877] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 373.215680][T20877] splice_direct_to_actor+0x28f/0x670 [ 373.215776][T20877] ? __pfx_direct_splice_actor+0x10/0x10 [ 373.215808][T20877] do_splice_direct+0x119/0x1a0 [ 373.215836][T20877] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 373.215872][T20877] do_sendfile+0x382/0x650 [ 373.215924][T20877] __x64_sys_sendfile64+0x105/0x150 [ 373.215961][T20877] x64_sys_call+0x2db1/0x3000 [ 373.215996][T20877] do_syscall_64+0xc0/0x2a0 [ 373.216067][T20877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.216099][T20877] RIP: 0033:0x7fe5131aaeb9 [ 373.216135][T20877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.216156][T20877] RSP: 002b:00007fe511c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 373.216185][T20877] RAX: ffffffffffffffda RBX: 00007fe513425fa0 RCX: 00007fe5131aaeb9 [ 373.216205][T20877] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 373.216223][T20877] RBP: 00007fe511c07090 R08: 0000000000000000 R09: 0000000000000000 [ 373.216242][T20877] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 373.216269][T20877] R13: 00007fe513426038 R14: 00007fe513425fa0 R15: 00007ffd4ea3dd28 [ 373.216291][T20877] [ 373.553498][T20910] netlink: 'syz.2.4770': attribute type 1 has an invalid length. [ 373.574507][T20910] bond1: entered promiscuous mode [ 373.579896][T20910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.629912][T20921] loop2: detected capacity change from 0 to 1024 [ 373.640918][T20921] EXT4-fs: Ignoring removed orlov option [ 373.662855][T20921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.678180][ T9570] usb usb2-port1: unable to enumerate USB device [ 373.804180][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.304429][T21000] loop2: detected capacity change from 0 to 128 [ 374.457830][T21020] loop8: detected capacity change from 0 to 128 [ 374.541211][T21024] loop2: detected capacity change from 0 to 1024 [ 374.555110][T21029] forcing mempool usage for bio_alloc_bioset+0x57e/0xa50 [ 374.576019][T21029] syz.8.4790: attempt to access beyond end of device [ 374.576019][T21029] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 374.621598][T21024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.704823][T11277] kworker/u8:48: attempt to access beyond end of device [ 374.704823][T11277] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 374.720382][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.766826][T21045] netlink: 'syz.2.4796': attribute type 20 has an invalid length. [ 374.769345][T21042] FAULT_INJECTION: forcing a failure. [ 374.769345][T21042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.775218][T21045] __nla_validate_parse: 8 callbacks suppressed [ 374.775233][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 374.803943][T21042] CPU: 0 UID: 0 PID: 21042 Comm: syz.0.4794 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 374.803990][T21042] Tainted: [W]=WARN [ 374.804002][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.804021][T21042] Call Trace: [ 374.804030][T21042] [ 374.804067][T21042] __dump_stack+0x1d/0x30 [ 374.804097][T21042] dump_stack_lvl+0x95/0xd0 [ 374.804171][T21042] dump_stack+0x15/0x1b [ 374.804201][T21042] should_fail_ex+0x263/0x280 [ 374.804246][T21042] should_fail+0xb/0x20 [ 374.804334][T21042] should_fail_usercopy+0x1a/0x20 [ 374.804374][T21042] _copy_to_user+0x20/0xa0 [ 374.804397][T21042] simple_read_from_buffer+0xb5/0x130 [ 374.804449][T21042] proc_fail_nth_read+0x10e/0x150 [ 374.804543][T21042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.804622][T21042] vfs_read+0x1ab/0x7f0 [ 374.804642][T21042] ? __rcu_read_unlock+0x4e/0x70 [ 374.804730][T21042] ? __fget_files+0x184/0x1c0 [ 374.804763][T21042] ? mutex_lock+0x57/0x90 [ 374.804796][T21042] ksys_read+0xdc/0x1a0 [ 374.804819][T21042] __x64_sys_read+0x40/0x50 [ 374.804871][T21042] x64_sys_call+0x2889/0x3000 [ 374.804975][T21042] do_syscall_64+0xc0/0x2a0 [ 374.805009][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.805042][T21042] RIP: 0033:0x7fe134d3b78e [ 374.805065][T21042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 374.805093][T21042] RSP: 002b:00007fe1337d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.805191][T21042] RAX: ffffffffffffffda RBX: 00007fe1337d76c0 RCX: 00007fe134d3b78e [ 374.805211][T21042] RDX: 000000000000000f RSI: 00007fe1337d70a0 RDI: 0000000000000005 [ 374.805272][T21042] RBP: 00007fe1337d7090 R08: 0000000000000000 R09: 0000000000000000 [ 374.805291][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.805360][T21042] R13: 00007fe134ff6038 R14: 00007fe134ff5fa0 R15: 00007ffee99f9948 [ 374.805387][T21042] [ 375.097782][T21045] netlink: 'syz.2.4796': attribute type 20 has an invalid length. [ 375.105852][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 375.183980][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 375.184002][ T29] audit: type=1400 audit(1769619818.702:9103): avc: denied { getopt } for pid=21062 comm="syz.0.4801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.259659][T21066] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4802'. [ 375.272214][T21068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4803'. [ 375.388453][ T29] audit: type=1400 audit(1769619818.912:9104): avc: denied { write } for pid=21056 comm="syz.3.4799" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 375.485065][T21074] loop8: detected capacity change from 0 to 128 [ 375.522285][T21081] loop2: detected capacity change from 0 to 128 [ 375.546192][T21074] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.598193][T21074] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 375.633637][T21088] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 375.689177][T21088] syz.2.4806: attempt to access beyond end of device [ 375.689177][T21088] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 375.744365][T20297] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.767299][T11284] kworker/u8:55: attempt to access beyond end of device [ 375.767299][T11284] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 375.835412][T21108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21108 comm=syz.2.4812 [ 375.861144][ T29] audit: type=1400 audit(1769619819.416:9105): avc: denied { getopt } for pid=21109 comm="syz.8.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 375.893095][T21108] loop2: detected capacity change from 0 to 512 [ 375.928601][T21108] EXT4-fs (loop2): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 375.941628][T21113] loop8: detected capacity change from 0 to 128 [ 375.968060][T21113] syz.8.4815: attempt to access beyond end of device [ 375.968060][T21113] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 376.035940][T11279] kworker/u8:50: attempt to access beyond end of device [ 376.035940][T11279] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 376.112725][T21122] loop8: detected capacity change from 0 to 1024 [ 376.132202][T21122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.260408][T20297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.285949][ T29] audit: type=1326 audit(1769619819.857:9106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21149 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5131aaeb9 code=0x7ffc0000 [ 376.324099][T21152] netlink: 'syz.8.4823': attribute type 20 has an invalid length. [ 376.332046][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4823'. [ 376.362586][ T29] audit: type=1326 audit(1769619819.857:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21149 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe5131aaeb9 code=0x7ffc0000 [ 376.386189][ T29] audit: type=1326 audit(1769619819.909:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21149 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5131aac22 code=0x7ffc0000 [ 376.409598][ T29] audit: type=1326 audit(1769619819.909:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21149 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5131aac22 code=0x7ffc0000 [ 376.433090][ T29] audit: type=1326 audit(1769619819.909:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21149 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5131aaeb9 code=0x7ffc0000 [ 376.456698][ T29] audit: type=1326 audit(1769619819.909:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21149 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5131aaeb9 code=0x7ffc0000 [ 376.517763][T21152] netlink: 'syz.8.4823': attribute type 20 has an invalid length. [ 376.526180][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4823'. [ 376.669801][ T29] audit: type=1400 audit(1769619820.235:9112): avc: denied { create } for pid=21167 comm="syz.3.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 376.750850][T21188] netlink: 84 bytes leftover after parsing attributes in process `syz.8.4831'. [ 376.832724][T21197] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4834'. [ 376.916205][T21212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.109672][T21223] SELinux: failed to load policy [ 377.146129][T21225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21225 comm=syz.7.4840 [ 377.220592][T21229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21229 comm=syz.7.4840 [ 377.243924][T21228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4841'. [ 377.306799][T21225] 9p: Bad value for 'rfdno' [ 377.320401][T21232] loop8: detected capacity change from 0 to 128 [ 377.404408][T21232] FAULT_INJECTION: forcing a failure. [ 377.404408][T21232] name failslab, interval 1, probability 0, space 0, times 0 [ 377.417163][T21232] CPU: 0 UID: 0 PID: 21232 Comm: syz.8.4842 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 377.417247][T21232] Tainted: [W]=WARN [ 377.417256][T21232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.417272][T21232] Call Trace: [ 377.417281][T21232] [ 377.417290][T21232] __dump_stack+0x1d/0x30 [ 377.417397][T21232] dump_stack_lvl+0x95/0xd0 [ 377.417473][T21232] dump_stack+0x15/0x1b [ 377.417495][T21232] should_fail_ex+0x263/0x280 [ 377.417528][T21232] should_failslab+0x8c/0xb0 [ 377.417558][T21232] kmem_cache_alloc_noprof+0x68/0x490 [ 377.417615][T21232] ? __blockdev_direct_IO+0x131/0x21e0 [ 377.417651][T21232] __blockdev_direct_IO+0x131/0x21e0 [ 377.417727][T21232] ? folios_put_refs+0x291/0x2d0 [ 377.417769][T21232] ? __pfx_fat_get_block+0x10/0x10 [ 377.417978][T21232] fat_direct_IO+0x102/0x1d0 [ 377.418010][T21232] generic_file_read_iter+0x21b/0x330 [ 377.418049][T21232] copy_splice_read+0x471/0x6c0 [ 377.418090][T21232] ? __pfx_filemap_splice_read+0x10/0x10 [ 377.418140][T21232] splice_direct_to_actor+0x28f/0x670 [ 377.418163][T21232] ? __pfx_direct_splice_actor+0x10/0x10 [ 377.418188][T21232] do_splice_direct+0x119/0x1a0 [ 377.418271][T21232] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 377.418307][T21232] do_sendfile+0x382/0x650 [ 377.418437][T21232] __x64_sys_sendfile64+0x105/0x150 [ 377.418465][T21232] x64_sys_call+0x2db1/0x3000 [ 377.418500][T21232] do_syscall_64+0xc0/0x2a0 [ 377.418533][T21232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.418596][T21232] RIP: 0033:0x7f481684aeb9 [ 377.418614][T21232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.418668][T21232] RSP: 002b:00007f48152a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 377.418696][T21232] RAX: ffffffffffffffda RBX: 00007f4816ac5fa0 RCX: 00007f481684aeb9 [ 377.418712][T21232] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 377.418727][T21232] RBP: 00007f48152a7090 R08: 0000000000000000 R09: 0000000000000000 [ 377.418745][T21232] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 377.418824][T21232] R13: 00007f4816ac6038 R14: 00007f4816ac5fa0 R15: 00007ffcb6b41948 [ 377.418894][T21232] [ 377.684634][T11279] kworker/u8:50: attempt to access beyond end of device [ 377.684634][T11279] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 377.763069][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4832'. [ 378.242198][T21315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=21315 comm=syz.7.4860 [ 378.258849][T21315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21315 comm=syz.7.4860 [ 378.314097][T21324] FAULT_INJECTION: forcing a failure. [ 378.314097][T21324] name failslab, interval 1, probability 0, space 0, times 0 [ 378.326919][T21324] CPU: 1 UID: 0 PID: 21324 Comm: syz.3.4862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 378.326996][T21324] Tainted: [W]=WARN [ 378.327007][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.327024][T21324] Call Trace: [ 378.327033][T21324] [ 378.327107][T21324] __dump_stack+0x1d/0x30 [ 378.327141][T21324] dump_stack_lvl+0x95/0xd0 [ 378.327172][T21324] dump_stack+0x15/0x1b [ 378.327244][T21324] should_fail_ex+0x263/0x280 [ 378.327287][T21324] should_failslab+0x8c/0xb0 [ 378.327375][T21324] __kmalloc_noprof+0xb8/0x580 [ 378.327401][T21324] ? iter_file_splice_write+0xf9/0xa80 [ 378.327423][T21324] iter_file_splice_write+0xf9/0xa80 [ 378.327508][T21324] ? shmem_file_read_iter+0x488/0x540 [ 378.327547][T21324] ? copy_splice_read+0x675/0x6c0 [ 378.327673][T21324] ? copy_splice_read+0x675/0x6c0 [ 378.327749][T21324] ? copy_splice_read+0x675/0x6c0 [ 378.327797][T21324] ? __pfx_iter_file_splice_write+0x10/0x10 [ 378.327891][T21324] direct_splice_actor+0x156/0x2a0 [ 378.327919][T21324] ? shmem_file_open+0x31/0x40 [ 378.327964][T21324] splice_direct_to_actor+0x311/0x670 [ 378.327988][T21324] ? __pfx_direct_splice_actor+0x10/0x10 [ 378.328013][T21324] do_splice_direct+0x119/0x1a0 [ 378.328118][T21324] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 378.328214][T21324] do_sendfile+0x382/0x650 [ 378.328255][T21324] __x64_sys_sendfile64+0x105/0x150 [ 378.328291][T21324] x64_sys_call+0x2db1/0x3000 [ 378.328325][T21324] do_syscall_64+0xc0/0x2a0 [ 378.328450][T21324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.328479][T21324] RIP: 0033:0x7fe5131aaeb9 [ 378.328501][T21324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.328549][T21324] RSP: 002b:00007fe511c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 378.328576][T21324] RAX: ffffffffffffffda RBX: 00007fe513425fa0 RCX: 00007fe5131aaeb9 [ 378.328596][T21324] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 378.328613][T21324] RBP: 00007fe511c07090 R08: 0000000000000000 R09: 0000000000000000 [ 378.328630][T21324] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 378.328670][T21324] R13: 00007fe513426038 R14: 00007fe513425fa0 R15: 00007ffd4ea3dd28 [ 378.328731][T21324] [ 378.711618][T21360] veth1_macvtap: left promiscuous mode [ 379.468328][T21415] loop2: detected capacity change from 0 to 1024 [ 379.487132][T21415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.560364][T21429] __nla_validate_parse: 5 callbacks suppressed [ 379.560385][T21429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4880'. [ 379.575718][T21429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4880'. [ 379.597255][T21422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4880'. [ 379.606717][T21422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4880'. [ 379.631470][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.678893][T21439] SELinux: failed to load policy [ 379.785552][T21455] 9p: Bad value for 'wfdno' [ 379.884079][T21478] netlink: 'syz.0.4894': attribute type 3 has an invalid length. [ 379.892752][T21474] FAULT_INJECTION: forcing a failure. [ 379.892752][T21474] name failslab, interval 1, probability 0, space 0, times 0 [ 379.905566][T21474] CPU: 1 UID: 0 PID: 21474 Comm: syz.7.4893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 379.905611][T21474] Tainted: [W]=WARN [ 379.905621][T21474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.905673][T21474] Call Trace: [ 379.905684][T21474] [ 379.905695][T21474] __dump_stack+0x1d/0x30 [ 379.905730][T21474] dump_stack_lvl+0x95/0xd0 [ 379.905865][T21474] dump_stack+0x15/0x1b [ 379.905886][T21474] should_fail_ex+0x263/0x280 [ 379.905980][T21474] should_failslab+0x8c/0xb0 [ 379.906075][T21474] __kmalloc_noprof+0xb8/0x580 [ 379.906120][T21474] ? copy_splice_read+0xc2/0x6c0 [ 379.906170][T21474] copy_splice_read+0xc2/0x6c0 [ 379.906243][T21474] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 379.906384][T21474] splice_direct_to_actor+0x28f/0x670 [ 379.906415][T21474] ? __pfx_direct_splice_actor+0x10/0x10 [ 379.906503][T21474] do_splice_direct+0x119/0x1a0 [ 379.906531][T21474] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 379.906618][T21474] do_sendfile+0x382/0x650 [ 379.906661][T21474] __x64_sys_sendfile64+0x105/0x150 [ 379.906699][T21474] x64_sys_call+0x2db1/0x3000 [ 379.906793][T21474] do_syscall_64+0xc0/0x2a0 [ 379.906839][T21474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.906870][T21474] RIP: 0033:0x7f245137aeb9 [ 379.906891][T21474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.906980][T21474] RSP: 002b:00007f244fdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 379.907003][T21474] RAX: ffffffffffffffda RBX: 00007f24515f5fa0 RCX: 00007f245137aeb9 [ 379.907017][T21474] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 379.907030][T21474] RBP: 00007f244fdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.907044][T21474] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 379.907062][T21474] R13: 00007f24515f6038 R14: 00007f24515f5fa0 R15: 00007fff17819b08 [ 379.907111][T21474] [ 379.956405][T21478] netlink: 'syz.0.4894': attribute type 3 has an invalid length. [ 380.016078][T21484] loop2: detected capacity change from 0 to 512 [ 380.125037][T21487] SELinux: failed to load policy [ 380.158990][T21484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 380.266367][T21484] EXT4-fs (loop2): 1 truncate cleaned up [ 380.272701][T21484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.337927][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 380.337947][ T29] audit: type=1400 audit(1769619824.108:9213): avc: denied { add_name } for pid=21466 comm="syz.2.4891" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.369496][ T29] audit: type=1400 audit(1769619824.108:9214): avc: denied { create } for pid=21466 comm="syz.2.4891" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 380.390871][ T29] audit: type=1400 audit(1769619824.139:9215): avc: denied { read write } for pid=21466 comm="syz.2.4891" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.414097][ T29] audit: type=1400 audit(1769619824.139:9216): avc: denied { open } for pid=21466 comm="syz.2.4891" path="/165/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.454122][T21513] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4901'. [ 380.464560][T21515] netlink: 'syz.7.4902': attribute type 20 has an invalid length. [ 380.473407][T21515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4902'. [ 380.487954][ T29] audit: type=1400 audit(1769619824.265:9217): avc: denied { ioctl } for pid=21466 comm="syz.2.4891" path="/165/bus/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.575393][T21515] netlink: 'syz.7.4902': attribute type 20 has an invalid length. [ 380.583302][T21515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4902'. [ 380.736621][ T29] audit: type=1400 audit(1769619824.517:9218): avc: denied { accept } for pid=21530 comm="syz.0.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.769276][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'. [ 380.778322][T21531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4908'. [ 381.016917][T21543] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 381.038965][T21543] SELinux: failed to load policy [ 381.077386][ T29] audit: type=1400 audit(1769619824.885:9219): avc: denied { create } for pid=21551 comm="syz.7.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 381.126974][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.274914][T21572] loop2: detected capacity change from 0 to 1024 [ 381.324636][T21572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 381.371376][T21572] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.384257][T21572] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.4917: lblock 0 mapped to illegal pblock 0 (length 6) [ 381.398837][T21572] EXT4-fs (loop2): Remounting filesystem read-only [ 381.446137][ T29] audit: type=1400 audit(1769619825.273:9220): avc: denied { watch watch_reads } for pid=21594 comm="syz.8.4927" path="/37" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 381.472949][ T29] audit: type=1400 audit(1769619825.305:9221): avc: denied { read } for pid=21589 comm="syz.3.4925" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 381.496817][ T29] audit: type=1326 audit(1769619825.305:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21595 comm="syz.7.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 381.594502][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 381.754118][T21628] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4934'. [ 381.896134][T21647] netlink: 'syz.8.4939': attribute type 20 has an invalid length. [ 381.976044][T21647] netlink: 'syz.8.4939': attribute type 20 has an invalid length. [ 382.187861][T21675] netlink: 'syz.2.4947': attribute type 3 has an invalid length. [ 382.219972][T21678] loop8: detected capacity change from 0 to 512 [ 382.242970][T21678] EXT4-fs error (device loop8): __ext4_fill_super:5553: inode #2: comm syz.8.4946: iget: checksum invalid [ 382.263580][T21678] EXT4-fs (loop8): get root inode failed [ 382.269367][T21678] EXT4-fs (loop8): mount failed [ 382.275458][T21675] netlink: 'syz.2.4947': attribute type 1 has an invalid length. [ 382.292901][T21675] bond2: entered allmulticast mode [ 382.304271][T21675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.316347][T21684] FAULT_INJECTION: forcing a failure. [ 382.316347][T21684] name failslab, interval 1, probability 0, space 0, times 0 [ 382.329114][T21684] CPU: 1 UID: 0 PID: 21684 Comm: syz.3.4948 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 382.329159][T21684] Tainted: [W]=WARN [ 382.329223][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.329239][T21684] Call Trace: [ 382.329246][T21684] [ 382.329255][T21684] __dump_stack+0x1d/0x30 [ 382.329290][T21684] dump_stack_lvl+0x95/0xd0 [ 382.329367][T21684] dump_stack+0x15/0x1b [ 382.329391][T21684] should_fail_ex+0x263/0x280 [ 382.329434][T21684] should_failslab+0x8c/0xb0 [ 382.329568][T21684] __kmalloc_noprof+0xb8/0x580 [ 382.329599][T21684] ? iter_file_splice_write+0xf9/0xa80 [ 382.329622][T21684] iter_file_splice_write+0xf9/0xa80 [ 382.329696][T21684] ? shmem_file_read_iter+0x488/0x540 [ 382.329737][T21684] ? copy_splice_read+0x675/0x6c0 [ 382.329848][T21684] ? copy_splice_read+0x675/0x6c0 [ 382.329894][T21684] ? __pfx_iter_file_splice_write+0x10/0x10 [ 382.329915][T21684] direct_splice_actor+0x156/0x2a0 [ 382.329986][T21684] ? shmem_file_open+0x31/0x40 [ 382.330025][T21684] splice_direct_to_actor+0x311/0x670 [ 382.330046][T21684] ? __pfx_direct_splice_actor+0x10/0x10 [ 382.330071][T21684] do_splice_direct+0x119/0x1a0 [ 382.330136][T21684] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 382.330235][T21684] do_sendfile+0x382/0x650 [ 382.330275][T21684] __x64_sys_sendfile64+0x105/0x150 [ 382.330415][T21684] x64_sys_call+0x2db1/0x3000 [ 382.330449][T21684] do_syscall_64+0xc0/0x2a0 [ 382.330485][T21684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.330525][T21684] RIP: 0033:0x7fe5131aaeb9 [ 382.330548][T21684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.330583][T21684] RSP: 002b:00007fe511c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 382.330605][T21684] RAX: ffffffffffffffda RBX: 00007fe513425fa0 RCX: 00007fe5131aaeb9 [ 382.330624][T21684] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 382.330642][T21684] RBP: 00007fe511c07090 R08: 0000000000000000 R09: 0000000000000000 [ 382.330661][T21684] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 382.330718][T21684] R13: 00007fe513426038 R14: 00007fe513425fa0 R15: 00007ffd4ea3dd28 [ 382.330739][T21684] [ 382.632216][T21675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=281 sclass=netlink_route_socket pid=21675 comm=syz.2.4947 [ 382.961044][T21735] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 382.980103][T21735] SELinux: failed to load policy [ 382.996468][T21738] FAULT_INJECTION: forcing a failure. [ 382.996468][T21738] name failslab, interval 1, probability 0, space 0, times 0 [ 383.009263][T21738] CPU: 1 UID: 0 PID: 21738 Comm: syz.0.4961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 383.009313][T21738] Tainted: [W]=WARN [ 383.009332][T21738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.009350][T21738] Call Trace: [ 383.009359][T21738] [ 383.009369][T21738] __dump_stack+0x1d/0x30 [ 383.009436][T21738] dump_stack_lvl+0x95/0xd0 [ 383.009470][T21738] dump_stack+0x15/0x1b [ 383.009501][T21738] should_fail_ex+0x263/0x280 [ 383.009615][T21738] should_failslab+0x8c/0xb0 [ 383.009651][T21738] __kmalloc_noprof+0xb8/0x580 [ 383.009688][T21738] ? copy_splice_read+0xc2/0x6c0 [ 383.009829][T21738] copy_splice_read+0xc2/0x6c0 [ 383.009878][T21738] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 383.009946][T21738] splice_direct_to_actor+0x28f/0x670 [ 383.009978][T21738] ? __pfx_direct_splice_actor+0x10/0x10 [ 383.010012][T21738] do_splice_direct+0x119/0x1a0 [ 383.010061][T21738] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 383.010116][T21738] do_sendfile+0x382/0x650 [ 383.010161][T21738] __x64_sys_sendfile64+0x105/0x150 [ 383.010203][T21738] x64_sys_call+0x2db1/0x3000 [ 383.010314][T21738] do_syscall_64+0xc0/0x2a0 [ 383.010362][T21738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.010397][T21738] RIP: 0033:0x7fe134d7aeb9 [ 383.010422][T21738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.010451][T21738] RSP: 002b:00007fe1337d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 383.010512][T21738] RAX: ffffffffffffffda RBX: 00007fe134ff5fa0 RCX: 00007fe134d7aeb9 [ 383.010535][T21738] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 383.010554][T21738] RBP: 00007fe1337d7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.010575][T21738] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 383.010615][T21738] R13: 00007fe134ff6038 R14: 00007fe134ff5fa0 R15: 00007ffee99f9948 [ 383.010653][T21738] [ 383.239446][T21743] Failed to initialize the IGMP autojoin socket (err -2) [ 383.494706][T21778] netlink: 'syz.8.4967': attribute type 1 has an invalid length. [ 383.719713][T21810] batadv_slave_0: entered promiscuous mode [ 383.739348][T21814] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 383.747081][T21814] SELinux: failed to load policy [ 383.924294][T21841] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 383.943279][T21841] geneve2: entered promiscuous mode [ 383.948713][T21841] geneve2: entered allmulticast mode [ 383.958659][T21841] bond3: (slave geneve2): Opening slave failed [ 384.327895][T21876] loop2: detected capacity change from 0 to 512 [ 384.358142][T21885] __nla_validate_parse: 8 callbacks suppressed [ 384.358161][T21885] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4993'. [ 384.406716][T21876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.434044][T21876] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.606085][T21905] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4996'. [ 384.715415][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.833496][T21927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4999'. [ 384.838773][T21939] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5005'. [ 384.853653][T21935] FAULT_INJECTION: forcing a failure. [ 384.853653][T21935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 384.867006][T21935] CPU: 1 UID: 0 PID: 21935 Comm: syz.0.5006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 384.867052][T21935] Tainted: [W]=WARN [ 384.867062][T21935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.867127][T21935] Call Trace: [ 384.867136][T21935] [ 384.867148][T21935] __dump_stack+0x1d/0x30 [ 384.867184][T21935] dump_stack_lvl+0x95/0xd0 [ 384.867215][T21935] dump_stack+0x15/0x1b [ 384.867306][T21935] should_fail_ex+0x263/0x280 [ 384.867435][T21935] should_fail_alloc_page+0xf2/0x100 [ 384.867473][T21935] alloc_pages_bulk_noprof+0x101/0x520 [ 384.867510][T21935] copy_splice_read+0xf3/0x6c0 [ 384.867626][T21935] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 384.867679][T21935] splice_direct_to_actor+0x28f/0x670 [ 384.867776][T21935] ? __pfx_direct_splice_actor+0x10/0x10 [ 384.867810][T21935] do_splice_direct+0x119/0x1a0 [ 384.867837][T21935] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 384.867921][T21935] do_sendfile+0x382/0x650 [ 384.867963][T21935] __x64_sys_sendfile64+0x105/0x150 [ 384.868158][T21935] x64_sys_call+0x2db1/0x3000 [ 384.868195][T21935] do_syscall_64+0xc0/0x2a0 [ 384.868238][T21935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.868297][T21935] RIP: 0033:0x7fe134d7aeb9 [ 384.868319][T21935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.868344][T21935] RSP: 002b:00007fe1337d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 384.868366][T21935] RAX: ffffffffffffffda RBX: 00007fe134ff5fa0 RCX: 00007fe134d7aeb9 [ 384.868389][T21935] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 384.868481][T21935] RBP: 00007fe1337d7090 R08: 0000000000000000 R09: 0000000000000000 [ 384.868500][T21935] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 384.868519][T21935] R13: 00007fe134ff6038 R14: 00007fe134ff5fa0 R15: 00007ffee99f9948 [ 384.868546][T21935] [ 385.074117][T21940] netlink: 'syz.7.5007': attribute type 1 has an invalid length. [ 385.122198][T21948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=21948 comm=syz.2.5009 [ 385.199387][T21955] bond2: (slave geneve3): Opening slave failed [ 385.433485][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 385.433505][ T29] audit: type=1326 audit(1769619829.451:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.493426][ T29] audit: type=1326 audit(1769619829.503:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.517295][ T29] audit: type=1326 audit(1769619829.503:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.541078][ T29] audit: type=1326 audit(1769619829.503:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.564791][ T29] audit: type=1326 audit(1769619829.503:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.588435][ T29] audit: type=1326 audit(1769619829.503:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.611989][ T29] audit: type=1326 audit(1769619829.503:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.635720][ T29] audit: type=1326 audit(1769619829.503:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.660283][ T29] audit: type=1326 audit(1769619829.503:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.683963][ T29] audit: type=1326 audit(1769619829.503:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21974 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245137aeb9 code=0x7ffc0000 [ 385.770190][T21999] usb usb7: usbfs: process 21999 (syz.8.5020) did not claim interface 0 before use [ 385.807307][T21999] loop8: detected capacity change from 0 to 128 [ 385.817294][T21999] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 385.840204][T22007] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5023'. [ 385.859904][T22008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=22008 comm=syz.3.5022 [ 386.201269][T22062] netlink: 'syz.2.5037': attribute type 1 has an invalid length. [ 386.212539][T22039] ip6gre1: entered promiscuous mode [ 386.219773][T22039] ip6gre1: entered allmulticast mode [ 386.253638][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5037'. [ 386.262834][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5037'. [ 386.327137][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5036'. [ 386.341038][T22073] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5039'. [ 386.613314][T22105] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5046'. [ 386.707158][T22116] FAULT_INJECTION: forcing a failure. [ 386.707158][T22116] name failslab, interval 1, probability 0, space 0, times 0 [ 386.719932][T22116] CPU: 1 UID: 0 PID: 22116 Comm: syz.3.5051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.719975][T22116] Tainted: [W]=WARN [ 386.719985][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.720004][T22116] Call Trace: [ 386.720014][T22116] [ 386.720024][T22116] __dump_stack+0x1d/0x30 [ 386.720058][T22116] dump_stack_lvl+0x95/0xd0 [ 386.720158][T22116] dump_stack+0x15/0x1b [ 386.720271][T22116] should_fail_ex+0x263/0x280 [ 386.720308][T22116] should_failslab+0x8c/0xb0 [ 386.720333][T22116] __kmalloc_noprof+0xb8/0x580 [ 386.720366][T22116] ? copy_splice_read+0xc2/0x6c0 [ 386.720504][T22116] copy_splice_read+0xc2/0x6c0 [ 386.720559][T22116] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 386.720688][T22116] splice_direct_to_actor+0x28f/0x670 [ 386.720722][T22116] ? __pfx_direct_splice_actor+0x10/0x10 [ 386.720757][T22116] do_splice_direct+0x119/0x1a0 [ 386.720780][T22116] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 386.720816][T22116] do_sendfile+0x382/0x650 [ 386.720899][T22116] __x64_sys_sendfile64+0x105/0x150 [ 386.720937][T22116] x64_sys_call+0x2db1/0x3000 [ 386.720973][T22116] do_syscall_64+0xc0/0x2a0 [ 386.721049][T22116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.721103][T22116] RIP: 0033:0x7fe5131aaeb9 [ 386.721125][T22116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.721151][T22116] RSP: 002b:00007fe511c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.721187][T22116] RAX: ffffffffffffffda RBX: 00007fe513425fa0 RCX: 00007fe5131aaeb9 [ 386.721207][T22116] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 386.721224][T22116] RBP: 00007fe511c07090 R08: 0000000000000000 R09: 0000000000000000 [ 386.721255][T22116] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000002 [ 386.721273][T22116] R13: 00007fe513426038 R14: 00007fe513425fa0 R15: 00007ffd4ea3dd28 [ 386.721301][T22116] [ 386.989993][T22135] chnl_net:caif_netlink_parms(): no params data found [ 387.154879][T22169] IPv6: sit1: Disabled Multicast RS [ 387.231051][T22177] loop2: detected capacity change from 0 to 128 [ 387.319986][T22199] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 387.344845][T22199] syz.2.5061: attempt to access beyond end of device [ 387.344845][T22199] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 387.499470][T11270] kworker/u8:41: attempt to access beyond end of device [ 387.499470][T11270] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 388.066400][T22287] loop2: detected capacity change from 0 to 512 [ 388.127087][T22287] EXT4-fs error (device loop2): ext4_quota_enable:7177: inode #4: comm syz.2.5093: iget: bad i_size value: -72057594037921792 [ 388.199265][T22287] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.5093: Bad quota inode: 4, type: 1 [ 388.265339][T22308] netlink: 'syz.8.5099': attribute type 1 has an invalid length. [ 388.302324][T22287] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 388.349736][T22287] EXT4-fs (loop2): mount failed [ 388.451640][T22312] geneve2: entered promiscuous mode [ 388.613252][T22319] lapb20: entered promiscuous mode [ 388.618519][T22319] lapb20: entered allmulticast mode [ 388.934074][T22375] usb usb7: usbfs: process 22375 (syz.3.5111) did not claim interface 0 before use [ 389.034554][T22380] futex_wake_op: syz.2.5114 tries to shift op by -3; fix this program [ 389.243289][T22399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.322735][T22401] netlink: 'syz.2.5120': attribute type 20 has an invalid length. [ 389.330713][T22401] __nla_validate_parse: 8 callbacks suppressed [ 389.330735][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 389.386634][T22399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.445152][T22401] netlink: 'syz.2.5120': attribute type 20 has an invalid length. [ 389.453123][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 389.689417][T22437] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5128'. [ 389.737380][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5129'. [ 389.864648][T22455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5135'. [ 390.265529][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 390.265550][ T29] audit: type=1326 audit(1769619834.531:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481684aeb9 code=0x7ffc0000 [ 390.295526][ T29] audit: type=1326 audit(1769619834.531:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481684aeb9 code=0x7ffc0000 [ 390.297284][T22507] Failed to initialize the IGMP autojoin socket (err -2) [ 390.319671][ T29] audit: type=1326 audit(1769619834.531:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f481684aeb9 code=0x7ffc0000 [ 390.350511][ T29] audit: type=1326 audit(1769619834.531:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481684aeb9 code=0x7ffc0000 [ 390.435188][ T29] audit: type=1326 audit(1769619834.647:9659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f481680b78e code=0x7ffc0000 [ 390.459046][ T29] audit: type=1326 audit(1769619834.647:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481684aeb9 code=0x7ffc0000 [ 390.483201][ T29] audit: type=1326 audit(1769619834.647:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f481684aeb9 code=0x7ffc0000 [ 390.507002][ T29] audit: type=1326 audit(1769619834.647:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22500 comm="syz.8.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481684aeb9 code=0x7ffc0000 [ 390.577395][T22527] loop2: detected capacity change from 0 to 128 [ 390.606214][T22527] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.652938][T22536] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 390.701228][T22536] SELinux: failed to load policy [ 390.707118][T22527] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.788688][ T29] audit: type=1400 audit(1769619835.077:9663): avc: denied { read write open } for pid=22526 comm="syz.2.5156" path="/220/file1/bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 390.872627][T18289] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.884491][T22555] netlink: 'syz.7.5162': attribute type 30 has an invalid length. [ 390.941370][T22570] loop2: detected capacity change from 0 to 1024 [ 390.963866][T22570] EXT4-fs: dax option not supported [ 390.995134][ T29] audit: type=1400 audit(1769619835.287:9664): avc: denied { read } for pid=22554 comm="syz.7.5162" path="socket:[67004]" dev="sockfs" ino=67004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 391.073395][T22577] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5168'. [ 391.094633][T22577] hsr_slave_0: left promiscuous mode [ 391.104123][T22577] hsr_slave_1: left promiscuous mode [ 391.305844][T22606] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.382037][T22606] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.438642][T22606] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.514299][T22606] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.624029][ T5447] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.637572][ T5447] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.655800][ T5447] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.681954][ T5447] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.751226][T22645] bridge0: port 3(ipvlan2) entered blocking state [ 391.757816][T22645] bridge0: port 3(ipvlan2) entered disabled state [ 391.780129][T22645] ipvlan2: entered allmulticast mode [ 391.785565][T22645] bridge0: entered allmulticast mode [ 391.807881][T22645] ipvlan2: left allmulticast mode [ 391.813007][T22645] bridge0: left allmulticast mode [ 391.830479][T22648] loop2: detected capacity change from 0 to 512 [ 391.889914][T22648] EXT4-fs (loop2): too many log groups per flexible block group [ 391.906721][T22648] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 391.920457][T22648] EXT4-fs (loop2): mount failed [ 392.063532][T22658] veth2: entered promiscuous mode [ 392.068788][T22658] veth2: entered allmulticast mode [ 392.229251][T22672] loop2: detected capacity change from 0 to 1024 [ 392.275430][T22672] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.333020][T22672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.409679][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.619645][T22707] bridge0: port 3(ipvlan2) entered blocking state [ 392.626406][T22707] bridge0: port 3(ipvlan2) entered disabled state [ 392.664434][T22707] ipvlan2: entered allmulticast mode [ 392.670629][T22707] bridge0: entered allmulticast mode [ 392.693125][T22707] ipvlan2: left allmulticast mode [ 392.699096][T22707] bridge0: left allmulticast mode [ 392.754562][T22733] usb usb7: usbfs: process 22733 (syz.0.5204) did not claim interface 0 before use [ 393.285536][T22807] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5226'. [ 393.429767][T22837] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5234'. [ 393.511226][T22850] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5235'. [ 393.761372][ T3377] kernel write not supported for file bpf-prog (pid: 3377 comm: kworker/0:2) [ 393.842150][T22886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22886 comm=syz.2.5243 [ 393.867258][T22886] netlink: 'syz.2.5243': attribute type 13 has an invalid length. [ 394.201753][ T1029] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 394.228838][ T1029] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.250330][T22926] loop2: detected capacity change from 0 to 2048 [ 394.711188][T22957] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5254'. [ 394.758453][T22928] hid-generic 0000:0000:0000.0004: pid 22928 passed too short report [ 395.113770][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 395.113787][ T29] audit: type=1400 audit(1769619839.612:9820): avc: denied { getopt } for pid=22980 comm="syz.0.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.140710][ T29] audit: type=1400 audit(1769619839.612:9821): avc: denied { write } for pid=22980 comm="syz.0.5259" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 395.165580][ T29] audit: type=1400 audit(1769619839.612:9822): avc: denied { open } for pid=22980 comm="syz.0.5259" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 395.548427][T23023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5270'. [ 395.703684][ T29] audit: type=1400 audit(1769619840.179:9823): avc: denied { recv } for pid=23034 comm="dhcpcd" src=68 daddr=255.255.255.255 dest=67 netif=veth0_to_bond scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 395.948753][ T29] audit: type=1400 audit(1769619840.493:9824): avc: denied { ioctl } for pid=23048 comm="syz.3.5275" path="socket:[68347]" dev="sockfs" ino=68347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 396.091340][ T29] audit: type=1400 audit(1769619840.546:9825): avc: denied { create } for pid=23048 comm="syz.3.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 396.112039][ T29] audit: type=1400 audit(1769619840.588:9826): avc: denied { connect } for pid=23053 comm="syz.7.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 396.132328][ T29] audit: type=1400 audit(1769619840.588:9827): avc: denied { bind } for pid=23053 comm="syz.7.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 396.279405][T23072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5283'. [ 396.288407][T23072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5283'. [ 396.545137][T23104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.682547][T23121] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5298'. [ 396.745362][T23128] usb usb7: usbfs: process 23128 (syz.0.5302) did not claim interface 0 before use [ 396.792697][T23135] usb usb7: usbfs: process 23135 (syz.0.5304) did not claim interface 0 before use [ 396.925884][ T29] audit: type=1400 audit(1769619841.522:9828): avc: denied { bind } for pid=23149 comm="syz.3.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 396.955968][ T29] audit: type=1326 audit(1769619841.543:9829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5131aaeb9 code=0x7ffc0000 [ 397.105056][T23169] syz.8.5318 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 397.130220][T23178] netlink: 'syz.7.5320': attribute type 1 has an invalid length. [ 397.154205][T23175] Failed to initialize the IGMP autojoin socket (err -2) [ 397.291381][T23197] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5323'. [ 397.300515][T23197] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5323'. [ 397.344400][T23199] Failed to initialize the IGMP autojoin socket (err -2) [ 397.451094][T23210] usb usb7: usbfs: process 23210 (syz.7.5325) did not claim interface 0 before use [ 397.469896][T23213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5326'. [ 397.538623][T23218] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5327'. [ 398.127390][T23258] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 398.148580][T23258] gretap1: entered allmulticast mode [ 398.272755][T23260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5331'. [ 398.324482][T23260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 398.824753][T23313] loop2: detected capacity change from 0 to 1024 [ 398.859242][T23313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.918451][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.196865][T23335] Failed to initialize the IGMP autojoin socket (err -2) [ 399.250857][T11270] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.320201][T11270] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.430445][T11270] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.487915][T11270] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.519275][T23393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5359'. [ 399.634483][T11270] team0: left allmulticast mode [ 399.640221][T11270] team_slave_0: left allmulticast mode [ 399.645774][T11270] team_slave_1: left allmulticast mode [ 399.651975][T11270] bridge0: port 3(team0) entered disabled state [ 399.697114][T11270] bridge_slave_1: left allmulticast mode [ 399.702864][T11270] bridge_slave_1: left promiscuous mode [ 399.708792][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.731949][T11270] bridge_slave_0: left allmulticast mode [ 399.737755][T11270] bridge_slave_0: left promiscuous mode [ 399.743523][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.785309][T23412] loop2: detected capacity change from 0 to 128 [ 399.794071][T23412] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 399.822214][T23412] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.987917][T11279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 400.009664][T11270] bond1 (unregistering): Released all slaves [ 400.036711][T11270] bond0 (unregistering): Released all slaves [ 400.117266][T23386] Failed to initialize the IGMP autojoin socket (err -2) [ 400.232299][T11270] hsr_slave_0: left promiscuous mode [ 400.239154][T11270] hsr_slave_1: left promiscuous mode [ 400.255303][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.262968][T11270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.340129][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.348149][T11270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.387801][T11270] batman_adv: batadv0: Interface deactivated: dummy0 [ 400.394711][T11270] batman_adv: batadv0: Removing interface: dummy0 [ 400.436684][T11270] veth0_macvtap: left promiscuous mode [ 400.444423][T11270] veth1_vlan: left promiscuous mode [ 400.449997][T11270] veth0_vlan: left promiscuous mode [ 400.604266][T11270] team_slave_1 (unregistering): left promiscuous mode [ 400.622369][T11270] team0 (unregistering): Port device team_slave_1 removed [ 400.644810][T11270] team_slave_0 (unregistering): left promiscuous mode [ 400.668746][T11270] team0 (unregistering): Port device team_slave_0 removed [ 400.676761][ T5447] smc: removing ib device !yz! [ 400.756529][ T36] lo speed is unknown, defaulting to 1000 [ 400.762468][ T36] infiniband syz2: ib_query_port failed (-19) [ 401.593222][T23501] loop2: detected capacity change from 0 to 4096 [ 401.632027][T23501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.668937][T23501] EXT4-fs (loop2): shut down requested (2) [ 401.679287][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 401.679305][ T29] audit: type=1400 audit(1769619846.508:10325): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 401.709522][T23501] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5376'. [ 401.721762][T23501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5376'. [ 401.731177][ T29] audit: type=1400 audit(1769619846.508:10326): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.753131][ T29] audit: type=1400 audit(1769619846.508:10327): avc: denied { append } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.775672][ T29] audit: type=1400 audit(1769619846.508:10328): avc: denied { open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.798396][ T29] audit: type=1400 audit(1769619846.508:10329): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.855603][T23488] Failed to initialize the IGMP autojoin socket (err -2) [ 401.865660][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.013296][T23539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5386'. [ 402.077980][T23539] team1: entered promiscuous mode [ 402.083209][T23539] team1: entered allmulticast mode [ 402.098029][T23539] 8021q: adding VLAN 0 to HW filter on device team1 [ 402.148059][T23551] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5387'. [ 402.173692][T23556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=23556 comm=syz.2.5388 [ 402.345606][T23553] Failed to initialize the IGMP autojoin socket (err -2) [ 402.608110][T23578] Failed to initialize the IGMP autojoin socket (err -2) [ 403.385840][T23609] Failed to initialize the IGMP autojoin socket (err -2) [ 403.425126][T23645] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5402'. [ 403.456689][T23639] usb usb7: usbfs: process 23639 (syz.2.5401) did not claim interface 0 before use [ 404.055796][T23695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5406'. [ 404.240933][T23719] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.5409'. [ 404.281499][T23696] Failed to initialize the IGMP autojoin socket (err -2) [ 404.316634][T23731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5414'. [ 404.982393][T23779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5417'. [ 405.236655][T23815] loop2: detected capacity change from 0 to 512 [ 405.280599][T23815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 405.287594][T23815] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 405.298061][T23815] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 405.308435][T23815] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5424: Failed to acquire dquot type 1 [ 405.347630][T23783] Failed to initialize the IGMP autojoin socket (err -2) [ 405.422073][T23815] EXT4-fs (loop2): 1 truncate cleaned up [ 405.429250][T23827] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5427'. [ 405.439729][T23815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.538880][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.623615][T23904] loop2: detected capacity change from 0 to 1024 [ 406.651411][T23880] Failed to initialize the IGMP autojoin socket (err -2) [ 406.694677][T23904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.819983][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.959497][T23824] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5426'. [ 406.969842][T23824] tipc: Enabling of bearer rejected, failed to enable media [ 407.072862][ T29] audit: type=1400 audit(1769619852.176:10330): avc: denied { mount } for pid=23822 comm="syz.3.5426" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 407.643234][T23987] netlink: 'syz.3.5442': attribute type 10 has an invalid length. [ 407.654235][T23987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.676349][T23987] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 407.699170][T23997] netlink: 'syz.7.5444': attribute type 29 has an invalid length. [ 407.728592][T23997] netlink: 'syz.7.5444': attribute type 29 has an invalid length. [ 407.737495][T23997] netlink: 508 bytes leftover after parsing attributes in process `syz.7.5444'. [ 407.757450][T23997] netlink: 'syz.7.5444': attribute type 10 has an invalid length. [ 407.770430][T23997] dummy0: entered promiscuous mode [ 407.778697][T23997] dummy0: entered allmulticast mode [ 407.791901][T23997] team0: Port device dummy0 added [ 407.804762][T23997] netlink: 'syz.7.5444': attribute type 10 has an invalid length. [ 407.826648][T23997] dummy0: left promiscuous mode [ 407.851581][T23997] dummy0: left allmulticast mode [ 407.865949][T23997] team0: Port device dummy0 removed [ 407.885400][T23997] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 407.923982][T24018] netlink: 7688 bytes leftover after parsing attributes in process `syz.3.5447'. [ 408.001011][T23998] Failed to initialize the IGMP autojoin socket (err -2) [ 408.106160][T24034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5450'. [ 408.371182][T23226] syz.8.5318 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 408.381543][T23226] CPU: 1 UID: 0 PID: 23226 Comm: syz.8.5318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 408.381615][T23226] Tainted: [W]=WARN [ 408.381622][T23226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.381636][T23226] Call Trace: [ 408.381644][T23226] [ 408.381653][T23226] __dump_stack+0x1d/0x30 [ 408.381763][T23226] dump_stack_lvl+0x95/0xd0 [ 408.381793][T23226] dump_stack+0x15/0x1b [ 408.381821][T23226] dump_header+0x80/0x240 [ 408.381851][T23226] oom_kill_process+0x295/0x350 [ 408.381967][T23226] out_of_memory+0x97d/0xb80 [ 408.382002][T23226] try_charge_memcg+0x62e/0xa10 [ 408.382033][T23226] __mem_cgroup_charge+0x65/0x150 [ 408.382133][T23226] shmem_get_folio_gfp+0x47b/0xd60 [ 408.382181][T23226] shmem_write_begin+0xfc/0x1f0 [ 408.382224][T23226] generic_perform_write+0x183/0x490 [ 408.382264][T23226] shmem_file_write_iter+0xc5/0xf0 [ 408.382301][T23226] __kernel_write_iter+0x319/0x590 [ 408.382324][T23226] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 408.382471][T23226] dump_user_range+0xa7d/0xdb0 [ 408.382559][T23226] elf_core_dump+0x21a2/0x2330 [ 408.382603][T23226] ? 0xffffffffff600000 [ 408.382641][T23226] coredump_write+0xacf/0xdf0 [ 408.382677][T23226] vfs_coredump+0x26bc/0x3120 [ 408.382717][T23226] ? __memcg_slab_free_hook+0xbc/0x230 [ 408.382763][T23226] ? proc_coredump_connector+0x160/0x2b0 [ 408.382808][T23226] ? kmem_cache_free+0xdf/0x380 [ 408.382844][T23226] get_signal+0xd7b/0xf60 [ 408.382885][T23226] arch_do_signal_or_restart+0x96/0x450 [ 408.382980][T23226] irqentry_exit+0xf7/0x510 [ 408.383022][T23226] asm_exc_page_fault+0x26/0x30 [ 408.383051][T23226] RIP: 0033:0x7f48167014f7 [ 408.383145][T23226] Code: e8 8e fa ff ff 89 f2 48 8d 3d 15 38 1b 00 48 8d 35 01 38 1b 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 408.383170][T23226] RSP: 002b:00007f4815246060 EFLAGS: 00010206 [ 408.383193][T23226] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f481684aeb9 [ 408.383210][T23226] RDX: 00007f4815246080 RSI: 00007f48152461b0 RDI: 000000000000000b [ 408.383224][T23226] RBP: 00007f48168b8c1f R08: 0000000000000000 R09: 0000000000000058 [ 408.383241][T23226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.383258][T23226] R13: 00007f4816ac6218 R14: 00007f4816ac6180 R15: 00007ffcb6b41948 [ 408.383450][T23226] [ 408.383460][T23226] memory: usage 307200kB, limit 307200kB, failcnt 21855 [ 408.628624][T23226] memory+swap: usage 431832kB, limit 9007199254740988kB, failcnt 0 [ 408.637409][T23226] kmem: usage 4528kB, limit 9007199254740988kB, failcnt 0 [ 408.644660][T23226] Memory cgroup stats for /syz8: [ 408.670205][T23226] cache 309391360 [ 408.678890][T23226] rss 450560 [ 408.682181][T23226] shmem 309379072 [ 408.685856][T23226] mapped_file 0 [ 408.690127][T23226] dirty 0 [ 408.693100][T23226] writeback 0 [ 408.697097][T23226] workingset_refault_anon 656 [ 408.701827][T23226] workingset_refault_file 11 [ 408.706476][T23226] swap 127623168 [ 408.710115][T23226] swapcached 90112 [ 408.713943][T23226] pgpgin 151734 [ 408.718154][T23226] pgpgout 76066 [ 408.721651][T23226] pgfault 61518 [ 408.725130][T23226] pgmajfault 98 [ 408.728698][T23226] inactive_anon 181456896 [ 408.733049][T23226] active_anon 128462848 [ 408.737382][T23226] inactive_file 0 [ 408.741031][T23226] active_file 16384 [ 408.744937][T23226] unevictable 0 [ 408.749082][T23226] hierarchical_memory_limit 314572800 [ 408.754600][T23226] hierarchical_memsw_limit 9223372036854771712 [ 408.760823][T23226] total_cache 309391360 [ 408.765038][T23226] total_rss 450560 [ 408.768786][T23226] total_shmem 309379072 [ 408.772976][T23226] total_mapped_file 0 [ 408.777763][T23226] total_dirty 0 [ 408.781358][T23226] total_writeback 0 [ 408.785246][T23226] total_workingset_refault_anon 656 [ 408.790549][T23226] total_workingset_refault_file 11 [ 408.795762][T23226] total_swap 127623168 [ 408.799865][T23226] total_swapcached 90112 [ 408.804900][T23226] total_pgpgin 151734 [ 408.809097][T23226] total_pgpgout 76066 [ 408.813166][T23226] total_pgfault 61518 [ 408.817243][T23226] total_pgmajfault 98 [ 408.821250][T23226] total_inactive_anon 181456896 [ 408.826221][T23226] total_active_anon 128462848 [ 408.830921][T23226] total_inactive_file 0 [ 408.835992][T23226] total_active_file 16384 [ 408.840376][T23226] total_unevictable 0 [ 408.844531][T23226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4886,pid=21458,uid=0 [ 408.859422][T23226] Memory cgroup out of memory: Killed process 21458 (syz.8.4886) total-vm:94132kB, anon-rss:1252kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 409.009788][T23179] syz.8.5318 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 409.021481][T23179] CPU: 1 UID: 0 PID: 23179 Comm: syz.8.5318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 409.021612][T23179] Tainted: [W]=WARN [ 409.021622][T23179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.021640][T23179] Call Trace: [ 409.021649][T23179] [ 409.021662][T23179] __dump_stack+0x1d/0x30 [ 409.021696][T23179] dump_stack_lvl+0x95/0xd0 [ 409.021724][T23179] dump_stack+0x15/0x1b [ 409.021756][T23179] dump_header+0x80/0x240 [ 409.021783][T23179] oom_kill_process+0x295/0x350 [ 409.021855][T23179] out_of_memory+0x97d/0xb80 [ 409.021897][T23179] try_charge_memcg+0x62e/0xa10 [ 409.021931][T23179] __mem_cgroup_charge+0x65/0x150 [ 409.022011][T23179] filemap_add_folio+0x110/0x350 [ 409.022045][T23179] __filemap_get_folio_mpol+0x326/0x680 [ 409.022190][T23179] filemap_fault+0x473/0xbb0 [ 409.022222][T23179] ? _raw_spin_lock+0x52/0xa0 [ 409.022262][T23179] __do_fault+0xbc/0x200 [ 409.022291][T23179] handle_mm_fault+0x11d7/0x3030 [ 409.022383][T23179] ? _raw_spin_lock+0x52/0xa0 [ 409.022425][T23179] ? __pte_offset_map_lock+0x1d9/0x240 [ 409.022471][T23179] __get_user_pages+0x1023/0x1ea0 [ 409.022558][T23179] get_dump_page+0xb4/0x240 [ 409.022604][T23179] dump_user_range+0x148/0xdb0 [ 409.022643][T23179] elf_core_dump+0x21a2/0x2330 [ 409.022697][T23179] ? 0xffffffffff600000 [ 409.022758][T23179] coredump_write+0xacf/0xdf0 [ 409.022799][T23179] vfs_coredump+0x26bc/0x3120 [ 409.022837][T23179] ? __memcg_slab_free_hook+0xbc/0x230 [ 409.022957][T23179] ? proc_coredump_connector+0x160/0x2b0 [ 409.022983][T23179] ? kmem_cache_free+0xdf/0x380 [ 409.023077][T23179] get_signal+0xd7b/0xf60 [ 409.023115][T23179] arch_do_signal_or_restart+0x96/0x450 [ 409.023229][T23179] irqentry_exit+0xf7/0x510 [ 409.023267][T23179] asm_exc_page_fault+0x26/0x30 [ 409.023295][T23179] RIP: 0033:0x7f48167014f7 [ 409.023330][T23179] Code: e8 8e fa ff ff 89 f2 48 8d 3d 15 38 1b 00 48 8d 35 01 38 1b 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 409.023430][T23179] RSP: 002b:00007f4815246060 EFLAGS: 00010206 [ 409.023454][T23179] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f481684aeb9 [ 409.023472][T23179] RDX: 00007f4815246080 RSI: 00007f48152461b0 RDI: 000000000000000b [ 409.023491][T23179] RBP: 00007f48168b8c1f R08: 0000000000000000 R09: 0000000000000058 [ 409.023505][T23179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.023560][T23179] R13: 00007f4816ac6218 R14: 00007f4816ac6180 R15: 00007ffcb6b41948 [ 409.023585][T23179] [ 409.272535][T23179] memory: usage 307196kB, limit 307200kB, failcnt 22202 [ 409.280548][T23179] memory+swap: usage 431668kB, limit 9007199254740988kB, failcnt 0 [ 409.288473][T23179] kmem: usage 4392kB, limit 9007199254740988kB, failcnt 0 [ 409.295700][T23179] Memory cgroup stats for /syz8: [ 409.329864][T24050] loop2: detected capacity change from 0 to 1024 [ 409.345433][ T29] audit: type=1400 audit(1769619854.528:10331): avc: denied { mount } for pid=24053 comm="syz.3.5454" name="/" dev="hugetlbfs" ino=70802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 409.413868][T24050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.476174][ T29] audit: type=1400 audit(1769619854.696:10332): avc: denied { getopt } for pid=24055 comm="syz.7.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 409.502976][T23179] cache 309514240 [ 409.506754][T23179] rss 450560 [ 409.510770][T23179] shmem 309497856 [ 409.514513][T23179] mapped_file 4096 [ 409.518299][T23179] dirty 0 [ 409.521322][T23179] writeback 0 [ 409.524705][T23179] workingset_refault_anon 656 [ 409.529473][T23179] workingset_refault_file 24 [ 409.534183][T23179] swap 127459328 [ 409.538441][T23179] swapcached 90112 [ 409.542232][T23179] pgpgin 151793 [ 409.545720][T23179] pgpgout 76095 [ 409.549289][T23179] pgfault 61527 [ 409.552790][T23179] pgmajfault 103 [ 409.556463][T23179] inactive_anon 128311296 [ 409.560819][T23179] active_anon 181727232 [ 409.565003][T23179] inactive_file 8192 [ 409.569752][T23179] active_file 0 [ 409.573242][T23179] unevictable 0 [ 409.576810][T23179] hierarchical_memory_limit 314572800 [ 409.582214][T23179] hierarchical_memsw_limit 9223372036854771712 [ 409.588446][T23179] total_cache 309514240 [ 409.592680][T23179] total_rss 450560 [ 409.597181][T23179] total_shmem 309497856 [ 409.601368][T23179] total_mapped_file 4096 [ 409.605672][T23179] total_dirty 0 [ 409.609148][T23179] total_writeback 0 [ 409.613008][T23179] total_workingset_refault_anon 656 [ 409.618252][T23179] total_workingset_refault_file 24 [ 409.624173][T23179] total_swap 127459328 [ 409.628390][T23179] total_swapcached 90112 [ 409.632875][T23179] total_pgpgin 151793 [ 409.636885][T23179] total_pgpgout 76095 [ 409.640892][T23179] total_pgfault 61527 [ 409.645030][T23179] total_pgmajfault 103 [ 409.649221][T23179] total_inactive_anon 128311296 [ 409.655843][T23179] total_active_anon 181727232 [ 409.662184][T23179] total_inactive_file 8192 [ 409.667562][T23179] total_active_file 0 [ 409.671618][T23179] total_unevictable 0 [ 409.675765][T23179] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5318,pid=23229,uid=0 [ 409.691653][T23179] Memory cgroup out of memory: Killed process 23229 (syz.8.5318) total-vm:90424kB, anon-rss:1360kB, file-rss:53888kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 409.748733][T18289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.840583][T24062] Failed to initialize the IGMP autojoin socket (err -2) [ 409.910732][T24095] nfs4: Unknown parameter '' [ 409.952951][T24095] nfs4: Unknown parameter '' [ 409.974817][T24095] nfs4: Unknown parameter '' [ 409.979752][T24095] nfs4: Unknown parameter '' [ 409.999403][T24095] nfs4: Unknown parameter '' [ 410.011417][T24095] nfs4: Unknown parameter '' [ 410.017405][T24095] nfs4: Unknown parameter '' [ 410.024935][T24095] nfs4: Unknown parameter '' [ 410.033335][T24095] nfs4: Unknown parameter '' [ 410.040936][T24095] nfs4: Unknown parameter '' [ 410.051034][T24095] nfs4: Unknown parameter '' [ 410.059117][T24095] nfs4: Unknown parameter '' [ 410.066234][T24095] nfs4: Unknown parameter '' [ 410.074281][T24095] nfs4: Unknown parameter '' [ 410.083084][T24095] nfs4: Unknown parameter '' [ 410.109505][T24095] nfs4: Unknown parameter '' [ 410.124909][T24095] nfs4: Unknown parameter '' [ 410.132953][T24095] nfs4: Unknown parameter '' [ 410.148030][T24095] nfs4: Unknown parameter '' [ 410.153085][T24095] nfs4: Unknown parameter '' [ 410.171275][T24095] nfs4: Unknown parameter '' [ 410.178289][T24095] nfs4: Unknown parameter '' [ 410.186229][T24095] nfs4: Unknown parameter '' [ 410.194213][T24095] nfs4: Unknown parameter '' [ 410.201863][T24095] nfs4: Unknown parameter '' [ 410.211702][T24095] nfs4: Unknown parameter '' [ 410.217341][T24095] nfs4: Unknown parameter '' [ 410.225587][T24095] nfs4: Unknown parameter '' [ 410.233407][T24095] nfs4: Unknown parameter '' [ 410.241074][T24095] nfs4: Unknown parameter '' [ 410.249287][T24095] nfs4: Unknown parameter '' [ 410.258434][T24095] nfs4: Unknown parameter '' [ 410.266118][T24095] nfs4: Unknown parameter '' [ 410.280035][T24095] nfs4: Unknown parameter '' [ 410.285151][T24095] nfs4: Unknown parameter '' [ 410.290214][T24095] nfs4: Unknown parameter '' [ 410.318144][T24095] nfs4: Unknown parameter '' [ 410.323046][T24095] nfs4: Unknown parameter '' [ 410.328117][T24095] nfs4: Unknown parameter '' [ 410.332986][T24095] nfs4: Unknown parameter '' [ 410.337893][T24095] nfs4: Unknown parameter '' [ 410.342779][T24095] nfs4: Unknown parameter '' [ 410.347782][T24095] nfs4: Unknown parameter '' [ 410.352719][T24095] nfs4: Unknown parameter '' [ 410.365715][T24095] nfs4: Unknown parameter '' [ 410.370591][T24095] nfs4: Unknown parameter '' [ 410.376972][T24095] nfs4: Unknown parameter '' [ 410.381786][T24095] nfs4: Unknown parameter '' [ 410.388779][T24095] nfs4: Unknown parameter '' [ 410.394354][T24095] nfs4: Unknown parameter '' [ 410.399184][T24095] nfs4: Unknown parameter '' [ 410.414398][T24095] nfs4: Unknown parameter '' [ 410.419331][T24095] nfs4: Unknown parameter '' [ 410.426224][T24095] nfs4: Unknown parameter '' [ 410.431159][T24095] nfs4: Unknown parameter '' [ 410.447270][T24095] nfs4: Unknown parameter '' [ 410.452369][T24095] nfs4: Unknown parameter '' [ 410.457283][T24095] nfs4: Unknown parameter '' [ 410.463312][T24095] nfs4: Unknown parameter '' [ 410.468093][T24095] nfs4: Unknown parameter '' [ 410.475149][T24095] nfs4: Unknown parameter '' [ 410.489613][T24095] nfs4: Unknown parameter '' [ 410.494593][T24095] nfs4: Unknown parameter '' [ 410.501451][T24095] nfs4: Unknown parameter '' [ 410.506279][T24095] nfs4: Unknown parameter '' [ 410.981972][T24168] netlink: 'syz.3.5463': attribute type 10 has an invalid length. [ 410.990000][T24168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5463'. [ 411.033332][T24168] batadv0: entered promiscuous mode [ 411.038612][T24168] batadv0: entered allmulticast mode [ 411.119262][T24168] bond0: (slave batadv0): Releasing backup interface [ 411.130158][T24168] bridge0: port 3(batadv0) entered blocking state [ 411.136686][T24168] bridge0: port 3(batadv0) entered disabled state [ 411.226284][ T29] audit: type=1400 audit(1769619856.533:10333): avc: denied { ioctl } for pid=24185 comm="syz.7.5466" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.255084][T11276] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 411.264526][T11276] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 411.276794][T24187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.307965][T24187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.436405][T24177] Failed to initialize the IGMP autojoin socket (err -2) [ 411.458722][T24197] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5466'. [ 411.613743][T23226] ================================================================== [ 411.621982][T23226] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 411.631938][T23226] [ 411.634299][T23226] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 1: [ 411.642391][T23226] tick_do_update_jiffies64+0x113/0x1c0 [ 411.647981][T23226] tick_nohz_handler+0x8d/0x3d0 [ 411.652869][T23226] __hrtimer_run_queues+0x20f/0x590 [ 411.658292][T23226] hrtimer_interrupt+0x269/0x810 [ 411.663273][T23226] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 411.669212][T23226] sysvec_apic_timer_interrupt+0x6f/0x80 [ 411.674877][T23226] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.680886][T23226] unmap_page_range+0x840/0x2760 [ 411.685992][T23226] unmap_vmas+0x27a/0x3f0 [ 411.690360][T23226] exit_mmap+0x19e/0x6c0 [ 411.694655][T23226] __mmput+0x28/0x1c0 [ 411.698677][T23226] mmput+0x40/0x50 [ 411.702483][T23226] exit_mm+0xe3/0x180 [ 411.706607][T23226] do_exit+0x3fa/0x1590 [ 411.710897][T23226] do_group_exit+0x138/0x140 [ 411.715552][T23226] __x64_sys_exit_group+0x1f/0x20 [ 411.720642][T23226] x64_sys_call+0x2fff/0x3000 [ 411.725360][T23226] do_syscall_64+0xc0/0x2a0 [ 411.729930][T23226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.735861][T23226] [ 411.738213][T23226] read to 0xffffffff86a09a00 of 8 bytes by task 23226 on cpu 0: [ 411.745863][T23226] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 411.752157][T23226] count_shadow_nodes+0x6a/0x230 [ 411.757138][T23226] do_shrink_slab+0x63/0x670 [ 411.761765][T23226] shrink_slab+0x538/0x880 [ 411.766212][T23226] shrink_node+0x6cb/0x2000 [ 411.770762][T23226] do_try_to_free_pages+0x404/0xcc0 [ 411.776095][T23226] try_to_free_mem_cgroup_pages+0x222/0x470 [ 411.782062][T23226] try_charge_memcg+0x37e/0xa10 [ 411.786952][T23226] __mem_cgroup_charge+0x65/0x150 [ 411.792028][T23226] shmem_get_folio_gfp+0x47b/0xd60 [ 411.797184][T23226] shmem_write_begin+0xfc/0x1f0 [ 411.802068][T23226] generic_perform_write+0x183/0x490 [ 411.807399][T23226] shmem_file_write_iter+0xc5/0xf0 [ 411.812731][T23226] __kernel_write_iter+0x319/0x590 [ 411.817971][T23226] dump_user_range+0xa7d/0xdb0 [ 411.822775][T23226] elf_core_dump+0x21a2/0x2330 [ 411.827589][T23226] coredump_write+0xacf/0xdf0 [ 411.832297][T23226] vfs_coredump+0x26bc/0x3120 [ 411.837005][T23226] get_signal+0xd7b/0xf60 [ 411.841371][T23226] arch_do_signal_or_restart+0x96/0x450 [ 411.846957][T23226] irqentry_exit+0xf7/0x510 [ 411.851497][T23226] asm_exc_page_fault+0x26/0x30 [ 411.856380][T23226] [ 411.858720][T23226] value changed: 0x0000000100003227 -> 0x0000000100003228 [ 411.865849][T23226] [ 411.868211][T23226] Reported by Kernel Concurrency Sanitizer on: [ 411.874385][T23226] CPU: 0 UID: 0 PID: 23226 Comm: syz.8.5318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.885785][T23226] Tainted: [W]=WARN [ 411.889609][T23226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.900038][T23226] ================================================================== [ 411.919486][ T30] oom_reaper: reaped process 23229 (syz.8.5318), now anon-rss:4kB, file-rss:15072kB, shmem-rss:0kB [ 412.369147][ T29] audit: type=1400 audit(1769619857.729:10334): avc: denied { create } for pid=24205 comm="syz.8.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 412.409163][ T29] audit: type=1400 audit(1769619857.761:10335): avc: denied { ioctl } for pid=24205 comm="syz.8.5451" path="socket:[71745]" dev="sockfs" ino=71745 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 412.461575][ T29] audit: type=1400 audit(1769619857.803:10336): avc: denied { write } for pid=24205 comm="syz.8.5451" path="socket:[71745]" dev="sockfs" ino=71745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.636622][ T29] audit: type=1400 audit(1769619858.002:10337): avc: denied { write } for pid=3298 comm="syz-executor" path="pipe:[2176]" dev="pipefs" ino=2176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 412.660242][ T29] audit: type=1400 audit(1769619858.013:10338): avc: denied { recv } for pid=3297 comm="sshd-session" saddr=10.128.0.163 src=41878 daddr=10.128.1.122 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 413.158264][T11276] bridge_slave_1: left allmulticast mode [ 413.164057][T11276] bridge_slave_1: left promiscuous mode [ 413.169915][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.232493][T11276] bridge_slave_0: left allmulticast mode [ 413.239106][T11276] bridge_slave_0: left promiscuous mode [ 413.244967][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.423025][T11276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.475877][T11276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.507145][T11276] bond0 (unregistering): Released all slaves [ 413.516904][T11276] bond1 (unregistering): Released all slaves [ 413.525739][T11276] bond2 (unregistering): Released all slaves [ 413.534638][T11276] bond3 (unregistering): Released all slaves [ 413.549957][T11276] bond4 (unregistering): Released all slaves [ 413.654374][T11276] hsr_slave_0: left promiscuous mode [ 413.661084][T11276] hsr_slave_1: left promiscuous mode [ 413.668254][T11276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.676649][T11276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.727597][T11276] team0 (unregistering): Port device team_slave_1 removed [ 413.738912][T11276] team0 (unregistering): Port device team_slave_0 removed [ 413.786092][T11270] smc: removing ib device syz0 [ 414.083507][T11276] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.093386][T11276] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.169858][T11276] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.180031][T11276] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.236272][T11276] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.246137][T11276] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.294120][T11276] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.304078][T11276] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.592742][T11276] bridge0: port 3(batadv0) entered disabled state [ 414.605921][T11276] bridge_slave_1: left allmulticast mode [ 414.611694][T11276] bridge_slave_1: left promiscuous mode [ 414.617547][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.634862][T11276] bridge_slave_0: left allmulticast mode [ 414.640777][T11276] bridge_slave_0: left promiscuous mode [ 414.646537][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.665213][T11276] team0: left allmulticast mode [ 414.670158][T11276] geneve1: left allmulticast mode [ 414.675338][T11276] team0: left promiscuous mode [ 414.680236][T11276] geneve1: left promiscuous mode [ 414.685711][T11276] bridge0: port 1(team0) entered disabled state [ 414.820945][T11276] dvmrp0 (unregistering): left allmulticast mode [ 414.830241][T11276] team0: Port device geneve1 removed [ 415.008714][T11276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.019403][T11276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.030325][T11276] bond0 (unregistering): Released all slaves [ 415.062123][T11276] dvmrp0 (unregistering): left allmulticast mode [ 415.071265][T11276] team0: Port device geneve1 removed [ 415.140368][T11276] team0: Port device bridge1 removed [ 415.226273][T11276] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 415.235296][T11276] bond0 (unregistering): Released all slaves [ 415.242845][T11276] bond1 (unregistering): Released all slaves [ 415.251573][T11276] bond2 (unregistering): Released all slaves [ 415.291473][T11276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.298882][T11276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.307330][T11276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.314782][T11276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.323966][T11276] hsr_slave_0: left promiscuous mode [ 415.329683][T11276] hsr_slave_1: left promiscuous mode [ 415.338257][T11276] veth1_macvtap: left promiscuous mode [ 415.343933][T11276] veth0_macvtap: left promiscuous mode [ 415.349592][T11276] veth1_vlan: left promiscuous mode [ 415.354859][T11276] veth0_vlan: left promiscuous mode [ 415.421543][T11276] team0 (unregistering): Port device team_slave_1 removed [ 415.432226][T11276] team0 (unregistering): Port device team_slave_0 removed