last executing test programs: 52.247496229s ago: executing program 3 (id=2851): openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/warn_count', 0x181080, 0x30) socket$kcm(0xa, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_ACT={0x4c, 0x3, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3, 0x1}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2e0, 0x0, 0x304, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff4e11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x426}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf7ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a233ac2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7d34a54fa392a74aa4589b7a2475dff2036d33270523ba267b5a14"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "99d5bfe7d68350454d31f284480fc4087f38911638d9053d679821"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xed54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 51.268638714s ago: executing program 3 (id=2860): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x33, 0x17, 0x1, {0x2a, './cgroup.cpu/test/memory.oom_control/file0'}}, 0x33) setxattr$security_evm(&(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control/file0\x00', &(0x7f0000000180), &(0x7f00000003c0)=ANY=[@ANYBLOB="0301130000000d00f47b3547c0b4eee7f44ad59f8640cba1ead83550f7c85b24801f6f133b38100bc3c2c56a03f5771c6b82641c1514dae7b664bc21906cae35715dd315e0b8c379796e6eab0396d0c87d0dd57bb92c21757224639e384b4e400efa20a4fb7f5486132dbbe2e8e9e071e53cf61af821ecfc440d7787e8d46dcfc9f50e82877a3df2781058bdb6d89614490322ce33289b7e24d2f3b3309195081c6689a22ca2e3fd7bd0c966eac4d68d11b4a95fefb352f3eb4eaadeeb64b30733e34e8f3513d2368cdf4be86a7a298c41b220e68133b82ccbbc6d4731402c694341febc51b289df055019edca339600"/253], 0xfd, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) unlinkat(r0, &(0x7f0000000080)='./cgroup.cpu/test/memory.oom_control/file0\x00', 0x0) syncfs(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x4}}, './cgroup.cpu/test/memory.oom_control\x00'}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000004c0)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) unshare(0x62040200) 50.645704329s ago: executing program 3 (id=2867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 50.335103717s ago: executing program 3 (id=2872): r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x20000000000009, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffbfffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x100, 0x6, 0x200, 0xa47, 0x815, 0xffffffffffffffff}) r5 = gettid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c03, 0x180) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0xfffffffffe000001}) pipe(0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000200)={0xffffffffffffffff, r7, 0x401}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000000d0)='sysfs\x00', 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x4}, 0xf) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='100 0', 0x5) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r9, 0x1, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x5, 0x4, 0x7cb3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000003}, 0x50) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x20000040, &(0x7f0000000100)={0xa, 0x2, 0xffffff7c, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x0) 48.652995978s ago: executing program 3 (id=2886): openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/warn_count', 0x181080, 0x30) socket$kcm(0xa, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_ACT={0x4c, 0x3, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3, 0x1}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2e0, 0x0, 0x304, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff4e11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x426}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf7ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a233ac2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7d34a54fa392a74aa4589b7a2475dff2036d33270523ba267b5a14"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "99d5bfe7d68350454d31f284480fc4087f38911638d9053d679821"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xed54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 48.294533347s ago: executing program 3 (id=2891): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000007, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x2, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x67, 0x4, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00'}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x23, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, @perf_bp={0x0, 0x3}, 0x135eb, 0x1, 0x11000, 0x8, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000006800010001001000fdffff7f00000000000000000c000200010000001500000006000300010000004604352f786ec4c942598e01f22ae8e1850de77067da370902b79ae8b3a77916fb87761e275c7d86f39c07e2422c76a5cf64172a51b788948253218e189892bf538eb9b5cb0f4b0d"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$kcm(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x73) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x29, 0x11, &(0x7f0000000140)=r3, 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000007911b8000200000000000000000000009500740000000000cd8ee68ac875f7f094c0342b2598ced68331ada5035ddd92eab41b42cc55b1af220c3f2195a15200a51d41d9dfabe24ddde1bf61432ff418b6b555fb701b7f21b0310d0b694782cc9c0b3e8166c32cddb015af9c8f2a1883cfb41a8fd9b740dc1776ef5ef4c251fe9ad5f7fef3"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="99", 0x1}], 0x1}, 0x844) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) (fail_nth: 1) 48.283801518s ago: executing program 32 (id=2891): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000007, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x2, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x67, 0x4, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00'}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x23, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, @perf_bp={0x0, 0x3}, 0x135eb, 0x1, 0x11000, 0x8, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000006800010001001000fdffff7f00000000000000000c000200010000001500000006000300010000004604352f786ec4c942598e01f22ae8e1850de77067da370902b79ae8b3a77916fb87761e275c7d86f39c07e2422c76a5cf64172a51b788948253218e189892bf538eb9b5cb0f4b0d"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$kcm(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x73) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x29, 0x11, &(0x7f0000000140)=r3, 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000007911b8000200000000000000000000009500740000000000cd8ee68ac875f7f094c0342b2598ced68331ada5035ddd92eab41b42cc55b1af220c3f2195a15200a51d41d9dfabe24ddde1bf61432ff418b6b555fb701b7f21b0310d0b694782cc9c0b3e8166c32cddb015af9c8f2a1883cfb41a8fd9b740dc1776ef5ef4c251fe9ad5f7fef3"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="99", 0x1}], 0x1}, 0x844) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) (fail_nth: 1) 2.739948233s ago: executing program 5 (id=3393): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000100)={{0x0, 0x0}}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x44411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xc000000000000000, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x6, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) bind$inet6(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000006d") listns(0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) unshare(0x26020480) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9928b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0xd66cd128430cb243, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 2.664503065s ago: executing program 5 (id=3395): unshare(0x28000600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x8}, 0x10ecc8, 0x2c65, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pidfd_send_signal(0xffffffffffffffff, 0x40, 0x0, 0x4) r2 = socket$inet(0x2, 0x1, 0x3) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x2000c044) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r5 = dup(r4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7030cb99a3fbac5e7e23", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00060400ac1e010100000000000000000000000008000000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket(0x11, 0x3, 0x62a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000080)={r8, r9+10000000}, &(0x7f00000000c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20d42, 0x1f8) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:boot_t:s0\x00', 0x1c, 0x2) 2.251221845s ago: executing program 2 (id=3401): socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x44) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x200e000) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r7) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x14010, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB=',msize=0x00000000400010']) connect$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) 2.247762245s ago: executing program 1 (id=3402): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) io_uring_setup(0x2e3a, 0x0) syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x0) epoll_create1(0x80000) syz_open_pts(r1, 0x600200) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x26040680) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r2, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 1.953805102s ago: executing program 1 (id=3405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x108444, 0x1224, 0xfff7ffff, 0x0, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0xca}, 0x0, 0x8, 0xffffffffffffffff, 0xa) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x2504, 0x0, 0x0, 0x6, 0xa8}, 0x0, 0xb, r3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) connect$pppl2tp(r4, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}}}, 0x2e) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0xbf, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000007, 0xa}, 0x20a8, 0x4000000000000000, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffbffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840)=[{r6, 0x40}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = syz_ublk_setup_io_uring(0x7085, &(0x7f0000000240)={0x0, 0x9cc, 0x8000, 0x2, 0x28f, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000800000000000000d7920000850000009200000085100000f9ffefff850000005f0000001800000000080000000000000004000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00faffffff0000950000f301cee828bcd118000000000000000000e035c989992aab02a0bfb8c5adfd7c21452b7002668e90121e31fd9208d82995ca5d56d09c9fcc1c8fa54994582764d421b012a8"], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x44, &(0x7f0000000500)=""/68, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xe, 0x80000001, 0x7415}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000600)=[r1], &(0x7f0000000640)=[{0x0, 0x2, 0xc, 0x9}, {0x0, 0x2, 0x5, 0x9}, {0x1, 0x4, 0x10, 0x3}, {0x5, 0x3, 0x6, 0xf}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x5, 0x8, 0x5}], 0x10, 0x5}, 0x94) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r8, 0x1f, &(0x7f0000000780)={0x28, 0x42, 0x0, r2, &(0x7f0000000380)="e4e981021e467c034314e9dfc80d75ef3c85f83eb20c2308b16e680f57d09db978cd3da89f5b4513db107026c7e8f95c50c410ae74e3568aaf0cad01b40b23513f95bf044079fc15d7a44236037e365e18124fa29c42466f9ff496706513455ba2668196fb8e78ad3d856b4d19a9a2e2c8bb03ec3ada69ad340b28abf3d17974bef540ace3bd19a67522294d4e845e1961b6008a73cafe5177e8a6ef988c220c507560060d82a9a2", 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, r9, 0x7}}, 0x1) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='c *:* mm'], 0xa) 1.804673346s ago: executing program 5 (id=3408): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) io_uring_setup(0x2e3a, 0x0) syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x0) epoll_create1(0x80000) syz_open_pts(r1, 0x600200) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x26040680) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r2, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$eJzs1L+LXFUUB/DvffPj7Zg1YxELsbEShJgoNoIsKGFZEHQ1KFhbCBFsFlKkCKy7U0f/ADUGFJZt0lgGbCRNUAhaWFmls/AHSlhCfDLvvdlMKbhiFj4fmLn3nHfmnjvMYcKxVmW6mtSDPrw/6TfDByVltAhWkzTTPN4V1Sfy9v56nafeGGQnaZNlXjrIyjj5/M3uQydT5sVJNU677X2ba7fO/b7/WFOW73Ojmt8p+aDPbi8etMfXScbjboXk+trN6e5sa+PKpbU6G5fvvPBeSe4mTe+d+TDll9xYzF6Vxaz/eTT96y+Stv+FRe7n8eZvnz165nx1++CTe03TNizJoEwnR9GSh8je7W69krULP25cvnP11M5KDiZP7108e3qYb9pZGyX5o4yr+T/jS/PE+9uLQTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkbm+dvMgs62S5Nw4203TPLv+5Eez4af1UtEjSe59fGYp81W/jv5t//uTTHdnh8eUUV788rtms4sGS4VNK99XScmvfcRx98zoiezOtjaqSRdfPfXc8zsHr9/du3j2dHVYNUn/Ww+75a8mJXl39f+4MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwsFvPdtO8cr56tY2assg3dXIyScnLKfWD+s1+PximXLu1//VPP6wcPhv066Wl80+0728N2qO6Vz5M8lqV0X/6xfhH/g4AAP//F95vWA==") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 1.6534601s ago: executing program 1 (id=3409): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66962000) msgsnd(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="01000000000000007986b05f3d6dd5a909dfa51fa939ac7ac68bd02edbd4cab0bc5ee24f62eb23b0b6825116d0c63c1e0a9960615adf67caa5212a006dc043af5e94f6570cc11599e5144acfd8c91c18248b88abf3363818817f5b5d03f52ff7ebaf6622d27fef9bc5665241ff84440e2fc720475962c04996ae92395cb5ae190aa065cd9f707dc468439af0a9ab00bb82f38d902748b9d09833fe450d7ccc5016df644d0f89eeb631833c9f81116b0cd3ead27a4bdba35b40baed5f28116ead14195c6a523e8be12baeae9148400c6b32db1cafce46d0d1dd79f3f6afa4aa0592b364372649bc12515ccc4a304005c130b75164b875fcbf26ab96aac0614085a8702251c05a4e24bfd9650d36e2ccf5063f5ebf4c7ae818069c7af7bbf2ca42cc5b8a7095e6e911e8a5eb68a6434ef85233d4989a4038df8229262174dde1be8b6af5f0484b6390acd5706087bfe74f1594ee7402ac74ebcfe3594110069cfb3006d599cd1934f2fe770f599341712d76dd22f306543580074060749887c2e724b359e75642f1c6550e589e045583ff4695a681e18c8b5b55c42fbcf54949493373c24eb2cfa537bc6cad6a3cd7c95ca9614867e6554ea6d40c0d4166b81ffd3847206ad93f13012e4712744ad4548b267d8675fcc800c9b928ee44b94d91e867bd518a7a1efd0d9e182f46d68f2a3adbbbe0a5c6cbaf42282a1567fde41e3a6f2b7836c7a6ce98649f5df999bef477a69eef6832a738f4aa4e551cf434cd4e73840080379671f675ac24070219d7e84fa16b83327ec9dd936df7b82c264158726451fa6f5b834c043c09a40029d12de44c8c370ef248a5e3378cffd27adc62c2a2c6d8ce4968ee72804297afe6b0a6dad6257fd27994fb7dcfa5eb2d5ef12d8c582d84df2a05eb035856303bd5a6cc818415b3c7bd0c96e77f0ec55f4804e2943dedb342f72570709f93078512616ed4bc1fb685eae727b717cab15f6ccfb40b10831be7d5f0140d264e0dc6abc64ec4598f7acd9a89a9afc1806f29f9ed5f2c8b4b25e57a8c680c541998f0ba0914dcf54e78d333ee95409d5e3cc3a2df411a4008ef2eb581e0c564c9967969f0f12442a6c3116a010f5251fe860b076b0991020942a7be8963a359e09d5d009fff299034cec707674f7069a3d4abad1f699cb4d992cdef901b3960b828f932e77110c3c90a706c1aa9f79be6ca0641af7a9d079d4c915d16077f4944c3e29f6fe3a221621352b6626f8aed77fe897a287d016547bb65bc8b7da068374c2e7c56436160f1c7c5180a87152979cb0e1c93323676745dfe2a4eb96b58e096844798197783b1ef5fb6e2f454cae1a40e220d9274aa55edd0b9dde59ec6705ef2d09946922e038a6f1c55f8546d9ae6958893ea011d41e5bcbe60deb7075f85c4adf834f4d30c2cb170d6e22c3b100ee139033d889e440047796baa02ed079a148dff89a263a7ee447d5c56edd3a6304e9866283945ac7f03256b2f5664c6495a609391861778060aa887428c919e9aebefe906bc7b1aafecc51406689fb07964d6e7fa247c59a05d7c31b8454ec7b50c176d569d88f990b03e047f4955958088fbb956188d70d0f4c951c156d46639f7afede368a2a199a9c4add81baff479186063771f6de97a392f991eeb9821647270d5c9a8b25b612248640fc31ece7af5e049787ec3ad825046d032f1f858b31161aa5bbc3d5b8038c8a555749761918abfc8e8699a2a286765b55bb544b19ebce4fe269fbfb3e2b474085950ab9dd6bc3b54146f16d008a3c955485ec6cdbfcdc98f8c71e1864f23d6e14682c043962043a7d8faa855c9eb2fa122c1cd9e6607e3420a99267e8ec33592697c3be06cdb15e72a82c8bf791a8ccf1bf1d6d4ef4248bfc01dd13d5d8097119397a5298e54f503c5fb0af3eee3da5a54a3c6db731c4417023b2d6c8855de5df61d0ee5411ffc099299444c0bfbb24d57d148dba088f3044a5922d0178e7d2df51a3772c33997ae17739c7069a011141d42bf839f2637caff2cf9ffb669ca4bd27fa4c01a965ae1e58c71bdcbcd3df25baaaae9d5bba55ae67f1c103ee0664e4f7b36bc3a5281444c7c1e51ae379b372f42ec95ea0cb23dca4db15590e4f2e355c4ec91e01a13285f87908778fabefc1d82ca76acf24f6d8b8ae474cf32f282c0a13e5d520666e3060f23d0e60506cb3511646452b92dd61c8250952583c8143fe9322b9137a12ad4399db0eeab192de6d6172276f56f00e848c4ae7b377a6a8722505b989c3a7db4932afeefce56793dcfa7b30ac858338c64400b3b684e855d42ab61f0011bcdba66e31bb106b1354bcac33e34d9852543d745c4503067e2a3bb979136001b858b62c6b48bd60eeb3974b8d25eb2239d6b928e4c5c2eb4187cbcf238e8760e32ee7c86995c339a839021475acd3203b17f6e86026e0ad2bd3bb03f2a71d074fb7374f0ec04083227a524e16fb4e94064acef1eb8fa72e47453df3665ad4a6f2a5c37372b8fc07d11ceeee5500350f0dcd012e2f1aac15ecdbf3c51456c8c3bc8ec4e3867c416022573b9f9f16eb3b0c19f446ba409aeaa5b40cc72f5ef1181163fb6ad78fc8b3824c9849bd1e77635c7c994ed7f6563b4727e9274eddeb14a8370ff19cc52458cc2c94df01029612cc7ee961a7921c5af9dfbfe133ed34e70302d34b909f66b0970472ae11168d4432567e0e571dfe7981ab186ab301a49c0b0a80c96bfdedcff82d37a8f86d47fc0dca35ca02ea872d1a9575eb0472754b6e89975867d2f378909bc439866542c8d106d1be90fef3b9191a09f068879ca3c954ac4ba91fd2057298e838ce0b265d5bf549544077b82352742dc97a5a94b9858d8495f87580c8601b61263d68be4146e565637ee95590b509172af00e75e32d56942cfadbfe7b3ba786a25270011e72248085f77472a6452a1aa763344eff7fd3dbe9619dba5e5da9d2c615c01a14f4b64f00b3d5def6e8de8b6157bebfb9e954e591b657a245fd1f5490920e02e1fd50e5473e8ff44c74d6307ab42168f4433d71267007f2791e4ae5f6365f701248cb37dcadf8cbf80495a7956734809fe185f0491d31df9157ff1c9a82125894aa9f96cbb12f7594787a524d528230ffc746fcd5a8ffcffec0f79ff11bb107f87434cd980c2e57ebce64c67a4886770fa487650379a16a170dc5c64dd3b62feef7f6d8f880ac26402fbe52515c2e1ceeb602226bd1fc89043eeaefbaff658cce903eb6795bcb50c2503bea84b4b4c991703ebddef942130dc9b72d8cc7c32ea0fb243ef453eb891a5ee6bb89597f7750d5a9638f5638079520a7783192a1d8554a3ec5b76908cbf1938bad4920fa771cbab839b1c9afdda013d7cce0719ccdbd76fa7314bc526d9f21f0e478e75ad1bf60b2447bb37ff026a3b075df91af5c750e47843b670af2a82d2b1215552777917634260f5c66ac5e34acdf54a3ee97ed1c7ac4c84f636d16c941165b787d36f0dbaa812390d57831c10d59534fe8950d6eb0a8a467c55ac9ce80d8c3ee50980b0b47806e3772deeef03112d790d5caa9661285bc21782aebc22630795f78523ae978c034f67e7c2e6d67575ace942a1aa8ebdc2556691993a9a4d5e42d64a0fb4827871e4c5f43e15e146560ea077daaa841fd4ecdfd0b3c27d3a796045466f805977fe81425e0fba3371f79848fdcd3561efda4070e6b5a094e70e28c276b5dd2dec4ce2cf9d13c1cf4b1daa1df3bce02202bb89b1f4082b92b02bceee77ffb140b277df0badda946a8a346e8f86943d3f1483be036263550be57d913d09ecc48ea30e5c9216940520ff127d57f4c6c57b544e9e52b6d952cc00e371363988131f21c8b2fe1a96a362de1a8697b5f3451c0f1bfb39521fd1801880d74a8ecd84aefd718bc6a4e6904b4871f236e72e0c643242e57036ad37497d67a1c1165bc3f565b92fe010972eadec0c26f2afe319b11ce6eea45820b576df774a0d7c278b655ab7f79828839720efdd86c18c62785dbd5b77b9392fb944b15218f9e15c792d6780ac0cf85aead6ba859b27774882c8d5a457f29fb150672630920724df4effe482fee54071816eb93133512b04331b9285d9c671631ed601b209f1623b2bbf83885e2e905c0e026e072039de1791ad30686118b3e51d6d5819138f6287447a901f"], 0xaf9, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x3a}}, 0xd, 0x3, 0xcc3, 0x9, 0x50, 0x5, 0x8}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x38}], 0x1) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x8080, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',dots,nodots,nodots,nodots,dots,check=normal,check=normal,nodots,nodots,nfs,nodots,nodots,sys_immutable,dots,nodots,quiet,\x00'], 0x21, 0x25c, &(0x7f0000000640)="$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") chroot(&(0x7f0000000580)='./file0/../file0\x00') r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {0x0, r5, 0x2}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) shutdown(r6, 0x1) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) 1.65205623s ago: executing program 5 (id=3410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) 1.560645162s ago: executing program 5 (id=3412): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="720ac4ff0200000071108d0000000000850000005b000a00950000000000000005ee6c3192b29500226061ed7cc83ba68a06744971ea4199e9af6b37873b6327867a4d8712fa59cc17a44f1c1219ca7752f7c8a8db2d72d070ae1c660c216c0638a0641c2cacf8fb254e354dc4ffc1d1d1906e3248ea8b15cbe543beb10cec8455df43f7abf3d0d9ae41b2"], &(0x7f0000000480)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f00000003c0)={0x7, 0x40, 0xd, 0xffffff3f, 0x943}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000002c0)=0x1ff, 0x5) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000440)=0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd4, 0x0, 0x4, 0x0, 0x57, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pread64(0xffffffffffffffff, &(0x7f0000000880)=""/103, 0x67, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000240)={0xb1, 0xffffffff, 0x800}) 1.361684847s ago: executing program 2 (id=3417): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd, 0x0, 0x8}, 0x1c) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.2474862s ago: executing program 2 (id=3418): unshare(0x28000600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x8}, 0x10ecc8, 0x2c65, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pidfd_send_signal(0xffffffffffffffff, 0x40, 0x0, 0x4) r2 = socket$inet(0x2, 0x1, 0x3) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x2000c044) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r5 = dup(r4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7030cb99a3fbac5e7e23", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00060400ac1e010100000000000000000000000008000000"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket(0x11, 0x3, 0x62a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000080)={r8, r9+10000000}, &(0x7f00000000c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20d42, 0x1f8) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:boot_t:s0\x00', 0x1c, 0x2) 1.170867802s ago: executing program 4 (id=3420): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlockall(0x7) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1, &(0x7f00000002c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000cc0)={[{@noblock_validity}, {@commit={'commit', 0x3d, 0x2a}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x6, 0x5fe, &(0x7f0000001b80)="$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") r6 = accept$inet(r5, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYRES64=r7, @ANYRES16=r7, @ANYBLOB="cfd428bd7000fcdbdf271500000008000100", @ANYRES32=0x0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8010) r8 = getuid() r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000d80)={'sit0\x00', 0x0, 0x7, 0x7800, 0x9, 0xffffffff, {{0x3d, 0x4, 0x0, 0x5, 0xf4, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x17, 0x1c, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x67, [@local]}, @timestamp_addr={0x44, 0x2c, 0xb2, 0x1, 0xa, [{@local, 0x13}, {@multicast1, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x7}, {@remote, 0x10}]}, @timestamp_addr={0x44, 0x44, 0xaa, 0x1, 0x6, [{@multicast1, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x8}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0xf}, {@loopback, 0x8}, {@broadcast, 0x9}, {@local, 0x7}]}, @timestamp_prespec={0x44, 0x4c, 0xe6, 0x3, 0x5, [{@multicast1, 0x1}, {@multicast2, 0xffff8000}, {@remote}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6b}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x5}, {@local, 0xa2}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0x1}]}]}}}}}) sendmsg$xdp(r9, &(0x7f0000000bc0)={&(0x7f0000000780)={0x2c, 0x8, r10, 0x24}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000007c0)="2ad60dd8679a924afabd924904902926240a398eb7cb6efcb15de6a7b84dad63ce202d78a5a86f9a96256b2018fd538db8cc297650bcf1d5078a8cf94bc69c6cfa16608c33e9042ec8a716403647d4141d0ae43917f71774714b80e3e4b5c781681afd0ac7f44299fb7e6aff164b4b1943b9a60e702a585da186e0eba8cd8a91e3", 0x81}, {&(0x7f0000000880)="61968a2c0bc503a7500fb088947df20614ece211d0fe8c93ef29a982753ef362839d4f33f153616df5b92bde005d8915daa2", 0x32}, {&(0x7f00000008c0)="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", 0xfc}, {&(0x7f00000009c0)="0cd204df8633619ef87605e12230a66736ab7d9975413582e804e3bb76320cce9a2b5bb7104392da9106ad9baeda7617fa656e3fd4b8376fca70a8cc0eb13ffb5865ba5f2da876", 0x47}, {&(0x7f0000000a40)="91bd7e9acf28f7ba0c1f9ca685a3d6c10b42da557801d1565ff46a8c6a5466123a990f2b8f0c94e66cb31783724103ab4a9574615b28916f69cc999f786ce1421a987d5aaca9be55312d", 0x4a}], 0x5, 0x0, 0x0, 0xc000000}, 0x24000044) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setregid(r13, 0x0) setresgid(0x0, r13, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000ac0)=@nat={'nat\x00', 0x19, 0x3, 0x4fa, [0x2000000005c0, 0x0, 0x0, 0x200000000904, 0x200000000934], 0x0, &(0x7f0000000240), &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=r13, @ANYRES32=0xee01, @ANYBLOB="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"]}, 0x5e5) 1.170000091s ago: executing program 0 (id=3421): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb563}, 0x0, 0x11100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250e00000008003b000200000005002f000100000005003700010000000500300001000000050030000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010081800400180012800b000100697b36746e6c0000080002800400130008000a00", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000007f4eccbabb40e73bce12252c3e41fcbe1520f5d73829a2248bff188c13eb1a6d27becd479c8cd1f73e98456762b6142b5e5f9a8d03bf274bf8214408999856ed173528b2f9809e43251483560d2942b8a69db5590acde37c2e40786b5a2b00", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="05002e000100000005002e000100000008002b00050000000800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000881) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf250100"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.087694654s ago: executing program 4 (id=3422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) 1.086381374s ago: executing program 4 (id=3423): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) 1.085240564s ago: executing program 1 (id=3424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 985.289336ms ago: executing program 0 (id=3425): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x40000) 959.827337ms ago: executing program 0 (id=3426): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb563}, 0x0, 0x11100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250e00000008003b000200000005002f000100000005003700010000000500300001000000050030000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000007f4eccbabb40e73bce12252c3e41fcbe1520f5d73829a2248bff188c13eb1a6d27becd479c8cd1f73e98456762b6142b5e5f9a8d03bf274bf8214408999856ed173528b2f9809e43251483560d2942b8a69db5590acde37c2e40786b5a2b00", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="05002e000100000005002e000100000008002b00050000000800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000881) pipe2(&(0x7f0000000000), 0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 939.218797ms ago: executing program 1 (id=3427): socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x44) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x200e000) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r7) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x14010, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB=',msize=0x00000000400010']) connect$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) 817.367491ms ago: executing program 0 (id=3428): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd, 0x0, 0x8}, 0x1c) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 645.173544ms ago: executing program 0 (id=3429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 644.825114ms ago: executing program 5 (id=3430): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 591.933316ms ago: executing program 0 (id=3431): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x31, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfd, 0x40, 0xe, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xee, 0xd, 0x1, {0x22, 0x9eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x7, 0xd}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x2, 0x0, 0x8, 0x40, 0xff}, 0x104, &(0x7f0000000400)={0x5, 0xf, 0x104, 0x1, [@generic={0xff, 0x10, 0x2, "88f26b925ba7d9c06022d3d54726fb565382b0d487f1ba31da4e8a4e7a81d58708ff16405fbc80e1ccd48283c283d94ce47c4f14eee23365a469288898b1755486277d1b8b1a54b9dcf3ea7a39b29823a416201b87fa41034a089a91be940a65123608473aca3bdbf9a31028e5ce7037b334b8fcbb18accd1b1371b664676faa21a31b5b6163eba5ae59c7171374305fc7c67f2845f82455f8673c7582b192d992850b3f1b3729909aa2104c8e72adbf3ebf285a16af59e1f1e9fe76794b0e0f80e9e041f87a671c95671b06aef0e32ff5dc667e8a29e749bf7e0bb13907155cc3ec330b76c37def54f33c47d7df30a3eb10874edd6afed12c73b585"}]}, 0xa, [{0x97, &(0x7f0000000680)=@string={0x97, 0x3, "bcf8532c130853e90f0deb0e1eed56fe7522afee7a19957b6cbe7c9e2775ca58f6f9734d25d716e8ea871381270681f53da50e81d2ca02c0d56168782c319f249b12d9b43f2935cf9b08d2a10ac19915c1ce1a57bf2abaa8dade9e9833175deb63feebf1fe20f466d1a4e043690b8dc0a7e23ebe6bc622cea24691573a2c83405ba674c81acd7f526f0e8c3510c90adc569bd111e5"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1809}}, {0x86, &(0x7f00000007c0)=ANY=[@ANYBLOB="86031f0949651610ae095a720dc24c437bc611d4d9e9d5c50a9f44da98cb6abdfd0c8bb2b4f2cfc4a6ca4047ee640bc9dae5b343e0fc6a42e0a14e5bb2b0241eeb01509e2276adefde32311e7bea98963ef450d51455969438a5c7a305d0a5c32c22106681e503c4a5033acd956c9de98c120f5225299da49f33cd46f6fdc34577bbf299614e"]}, {0x5, &(0x7f0000000880)=@string={0x5, 0x3, "7f27ae"}}, {0x82, &(0x7f00000008c0)=@string={0x82, 0x3, "1c389d829533c3123473daeba86a44b04d96c461132ebc936c13b44ca4cb52872de43ebd3b8e33a96d6f3689498c81532ac2307f8bdd7caf25c593896bdf9b3785ddab2ffa43f0201e6118f0148cd7e842fb3e4c93f651260815308610008f6f9456fc8072e97af7a63daa655031597226eb669e214911f938e94b7023d4b585"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x843}}, {0xa3, &(0x7f0000000b40)=@string={0xa3, 0x3, "914db0d38ce6eef06eb5114bff22b9b924387fd005417b0a32b0f10f0826253c499ee88f56315af4167fba7a77a44630fa74f41bdde96561e4c3f80d70a3d5592b7ae92fcc74e1c71874634390cd1e43d2694772ce013a1e4f48dc15557d2a858d776fbb90b9ab4e23b076ebda2ac302e5d9e220cd707dad2e95837232dff099dfb58dd789700aea14a47dd6b9f1938db795958e87e342bee704f57460c3a5b440"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000e80)={0x24, &(0x7f0000000cc0)={0x20, 0x3, 0xda, {0xda, 0x3, "fbf79cf94e4d3a5ee262d90e85abb5c118e4ca03a1456899e55232e66a15c5400d6858b99e3546d0abab136924d48031500ef14c99b0ff437a110074c9e6162147fc28af926b00a95b87d2a176f59e5473651291e5d6aaf298c7dc934921576f7f75d377452a9a3951a6a59781d4f2b8d23f13cdb01bfbbbce66a4f836228ef40f0e54680e41953d4fe5e627653a44da0a2c8bf3c0d3f1864451ec69e72e0564bff5d71426a1b03fcd018edaa9f5865c173774cc7b663dade7df3063dec86d73d9fe715afaa9d6619a09c52b13a107508f0faca3afcbaa7f"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000e00)={0x0, 0x22, 0x16, {[@local=@item_012={0x1, 0x2, 0x0, "9a"}, @global=@item_4={0x3, 0x1, 0x2, "e77c8b7c"}, @main=@item_012={0x2, 0x0, 0xa, '/K'}, @main=@item_012={0x1, 0x0, 0x73e5c5fe1ed3e0ca, '7'}, @local=@item_4={0x3, 0x2, 0x2, "f5dbf7ff"}, @local=@item_4={0x3, 0x2, 0x5, "2e76d86f"}]}}, &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x580}}}}, &(0x7f0000001080)={0x2c, &(0x7f0000000ec0)={0x20, 0x7, 0x8f, "a1fec4ab4e7425f46b89f7be587f22259997648531f2fdc6be7e70af1e8e876eea66d09bdb8d76b1aa39e1163aee7d5564a14c37ba0b5a804bed28d9cae39cc1b03d20088c515ab1b912056adda6c647d849bbcef89125ab117f99dca2fa35ded8f1a5e3c783dbb3fb3ff0ba48fee275566158b27ffe2b584db60e046dad7cb1fcc90a586570796351d83e4ff52688"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001000)={0x20, 0x1, 0x2c, "664d892d47f15d05f0b829e50d3cac489b8d4b37c46791c6108872632b7622a7e8f738f49d746e357a90394f"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x2}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000e80)={0x24, &(0x7f0000000cc0)={0x20, 0x3, 0xda, {0xda, 0x3, "fbf79cf94e4d3a5ee262d90e85abb5c118e4ca03a1456899e55232e66a15c5400d6858b99e3546d0abab136924d48031500ef14c99b0ff437a110074c9e6162147fc28af926b00a95b87d2a176f59e5473651291e5d6aaf298c7dc934921576f7f75d377452a9a3951a6a59781d4f2b8d23f13cdb01bfbbbce66a4f836228ef40f0e54680e41953d4fe5e627653a44da0a2c8bf3c0d3f1864451ec69e72e0564bff5d71426a1b03fcd018edaa9f5865c173774cc7b663dade7df3063dec86d73d9fe715afaa9d6619a09c52b13a107508f0faca3afcbaa7f"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000e00)={0x0, 0x22, 0x16, {[@local=@item_012={0x1, 0x2, 0x0, "9a"}, @global=@item_4={0x3, 0x1, 0x2, "e77c8b7c"}, @main=@item_012={0x2, 0x0, 0xa, '/K'}, @main=@item_012={0x1, 0x0, 0x73e5c5fe1ed3e0ca, '7'}, @local=@item_4={0x3, 0x2, 0x2, "f5dbf7ff"}, @local=@item_4={0x3, 0x2, 0x5, "2e76d86f"}]}}, &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x580}}}}, &(0x7f0000001080)={0x2c, &(0x7f0000000ec0)={0x20, 0x7, 0x8f, "a1fec4ab4e7425f46b89f7be587f22259997648531f2fdc6be7e70af1e8e876eea66d09bdb8d76b1aa39e1163aee7d5564a14c37ba0b5a804bed28d9cae39cc1b03d20088c515ab1b912056adda6c647d849bbcef89125ab117f99dca2fa35ded8f1a5e3c783dbb3fb3ff0ba48fee275566158b27ffe2b584db60e046dad7cb1fcc90a586570796351d83e4ff52688"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001000)={0x20, 0x1, 0x2c, "664d892d47f15d05f0b829e50d3cac489b8d4b37c46791c6108872632b7622a7e8f738f49d746e357a90394f"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x2}}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r11) sendmmsg$unix(r10, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) (async) sendmmsg$unix(r10, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 375.282361ms ago: executing program 2 (id=3432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f0000005580)={0x2c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000820) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x20031, 0xffffffffffffffff, 0x3b762000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400800, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0xffffffffffffff2e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x9, @icmp_id}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x8, 0x6, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @port=0x4e23}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @common=@inet=@set3={{0x50}, {{0xffffffffffffffff, 0x5}, {0x6, 0x4}, {0x2, 0x7}, 0x47}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @remote, @broadcast, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x440) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000400)={0x2, 0x6b7, @loopback}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b00)={0x0, 0x5, 0x1, [0xfffa]}, &(0x7f0000000b80)=0xa) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000bc0)=@assoc_value={r7}, 0x8) perf_event_open$cgroup(&(0x7f0000000c80)={0x2, 0x80, 0x8, 0x3, 0x9, 0xfe, 0x0, 0x9c6, 0x40040, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000c40), 0x5}, 0x2008, 0x9, 0x2, 0x2, 0x1, 0x8, 0xae, 0x0, 0x5, 0x0, 0x1}, r5, 0x6, 0xffffffffffffffff, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c00)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r6}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r9, 0x0, 0x0}, 0x10) fsync(r1) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b40)={r11, &(0x7f0000000440)="de50066c4b3da8ca9c92535162747c602f0eb4082b8c9bb1136276c743b1edfa398019b95a4153cc32312788ae49d18fba3b36a4cc0f77b1f7666c676c3874c7fca405a03a6552e6bd1640a5c0a78de3d068633460b003043a3a626f42c923b4c66ac15a92aacfc12e011fa89d380440be33f9db19d6ea4aac8bea40baeb73405e94f5bd43816b79a7bb6cf8da6d5350ba681e88c47db2996223ca562de6f3b72dd440fe20c09bc6f73905391af64285a565628484b980e887755ac00ac57574b550133da3f73d5d903864190d9093774e8b463735ac64e1557494a165a62e62b2878b5d0085146290098f61c357976669638ab67a", &(0x7f0000000b00), 0x4}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="600a00049c2b0800000000000000009f00000000", @ANYRES32=0x0, @ANYBLOB="136f020000000000400012800e00010069703665727370616e0000002c0002801400070000000000000000000000ffffe000000204001200060011004e2200000600180008000000"], 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='vxfs\x00', 0x10, &(0x7f00000003c0)='-*[}#.%/{%]#\x00') 300.195443ms ago: executing program 2 (id=3433): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}]}, 0x60}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1080}}, {@orlov}, {@nomblk_io_submit}, {@nolazytime}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") 188.870275ms ago: executing program 4 (id=3434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) 165.346516ms ago: executing program 4 (id=3435): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) io_uring_setup(0x2e3a, 0x0) syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x0) epoll_create1(0x80000) syz_open_pts(r1, 0x600200) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x26040680) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r2, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 83.689558ms ago: executing program 2 (id=3436): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb563}, 0x0, 0x11100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250e00000008003b000200000005002f000100000005003700010000000500300001000000050030000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010081800400180012800b000100697b36746e6c0000080002800400130008000a00", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000007f4eccbabb40e73bce12252c3e41fcbe1520f5d73829a2248bff188c13eb1a6d27becd479c8cd1f73e98456762b6142b5e5f9a8d03bf274bf8214408999856ed173528b2f9809e43251483560d2942b8a69db5590acde37c2e40786b5a2b00", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="05002e000100000005002e000100000008002b00050000000800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000881) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf250100"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 73.105939ms ago: executing program 1 (id=3437): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 0s ago: executing program 4 (id=3438): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb563}, 0x0, 0x11100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250e00000008003b000200000005002f000100000005003700010000000500300001000000050030000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000007f4eccbabb40e73bce12252c3e41fcbe1520f5d73829a2248bff188c13eb1a6d27becd479c8cd1f73e98456762b6142b5e5f9a8d03bf274bf8214408999856ed173528b2f9809e43251483560d2942b8a69db5590acde37c2e40786b5a2b00", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="05002e000100000005002e000100000008002b00050000000800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000881) pipe2(&(0x7f0000000000), 0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) kernel console output (not intermixed with test programs): 88][T13995] [ 275.675279][T13995] memory: usage 96kB, limit 96kB, failcnt 159 [ 275.682713][T13886] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.690030][T13995] memory+swap: usage 120kB, limit 9007199254740988kB, failcnt 0 [ 275.698892][T13886] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.701913][T13995] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 275.705183][T13886] bridge_slave_1: entered allmulticast mode [ 275.711086][T13995] Memory cgroup stats for [ 275.714496][T13886] bridge_slave_1: entered promiscuous mode [ 275.718029][T13995] /syz0/test: [ 275.968065][T13995] cache 0 [ 275.968948][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 275.971530][T13995] rss 0 [ 275.978189][T13975] syzkaller0: entered promiscuous mode [ 275.990288][T13975] syzkaller0: entered allmulticast mode [ 275.997582][T13989] tipc: Enabled bearer , priority 0 [ 276.025207][T13995] shmem 0 [ 276.028196][T13995] mapped_file 0 [ 276.031775][T13995] dirty 0 [ 276.035078][T13995] writeback 0 [ 276.038384][T13995] workingset_refault_anon 9 [ 276.042912][T13995] workingset_refault_file 0 [ 276.053909][T13995] swap 24576 [ 276.057396][T13995] swapcached 61440 [ 276.061211][T13995] pgpgin 15 [ 276.072396][T13886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.089181][T13996] tipc: Resetting bearer [ 276.096021][T13995] pgpgout 15 [ 276.126627][T13996] tipc: Disabling bearer [ 276.133142][T13995] pgfault 64 [ 276.139104][T13886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.151368][T13995] pgmajfault 5 [ 276.160206][ T50] IPVS: stop unused estimator thread 0... [ 276.168705][T13995] inactive_anon 0 [ 276.178920][T13886] team0: Port device team_slave_0 added [ 276.191430][T13886] team0: Port device team_slave_1 added [ 276.204412][T13995] active_anon 0 [ 276.207924][T13995] inactive_file 0 [ 276.211575][T13995] active_file 0 [ 276.235207][T14017] FAULT_INJECTION: forcing a failure. [ 276.235207][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 276.248040][T13995] unevictable 0 [ 276.251516][T13995] hierarchical_memory_limit 98304 [ 276.257099][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.4.3013 Not tainted syzkaller #0 PREEMPT(lazy) [ 276.257144][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.257159][T14017] Call Trace: [ 276.257166][T14017] [ 276.257177][T14017] __dump_stack+0x1d/0x30 [ 276.257199][T14017] dump_stack_lvl+0x95/0xd0 [ 276.257222][T14017] dump_stack+0x15/0x1b [ 276.257260][T14017] should_fail_ex+0x262/0x280 [ 276.257294][T14017] should_failslab+0x8c/0xb0 [ 276.257318][T14017] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 276.257403][T14017] ? radix_tree_node_alloc+0xa0/0x200 [ 276.257433][T14017] ? radix_tree_node_alloc+0xa0/0x200 [ 276.257474][T14017] radix_tree_node_alloc+0xa0/0x200 [ 276.257502][T14017] idr_get_free+0x1fc/0x560 [ 276.257572][T14017] idr_alloc_u32+0xe9/0x1a0 [ 276.257622][T14017] tcf_idr_check_alloc+0x1fc/0x2e0 [ 276.257656][T14017] tcf_mpls_init+0x233/0xbb0 [ 276.257694][T14017] ? __pfx_tcf_mpls_init+0x10/0x10 [ 276.257783][T14017] tcf_action_init_1+0x395/0x4d0 [ 276.257815][T14017] tcf_action_init+0x29d/0x700 [ 276.257852][T14017] tc_ctl_action+0x29e/0x860 [ 276.257936][T14017] ? __mutex_lock_slowpath+0xa/0x10 [ 276.257961][T14017] ? __pfx_tc_ctl_action+0x10/0x10 [ 276.258035][T14017] rtnetlink_rcv_msg+0x6a7/0x720 [ 276.258087][T14017] netlink_rcv_skb+0x11e/0x220 [ 276.258118][T14017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.258155][T14017] rtnetlink_rcv+0x1c/0x30 [ 276.258230][T14017] netlink_unicast+0x5a9/0x680 [ 276.258263][T14017] netlink_sendmsg+0x5be/0x6f0 [ 276.258299][T14017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.258395][T14017] ____sys_sendmsg+0x532/0x580 [ 276.258423][T14017] ___sys_sendmsg+0x195/0x1e0 [ 276.258457][T14017] __x64_sys_sendmsg+0xd4/0x160 [ 276.258560][T14017] x64_sys_call+0x22ab/0x2550 [ 276.258593][T14017] do_syscall_64+0x112/0x360 [ 276.258700][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.258725][T14017] RIP: 0033:0x7f1cfb76e0d9 [ 276.258741][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.258758][T14017] RSP: 002b:00007f1cfa1c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.258777][T14017] RAX: ffffffffffffffda RBX: 00007f1cfb9f5fa0 RCX: 00007f1cfb76e0d9 [ 276.258792][T14017] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 276.258880][T14017] RBP: 00007f1cfa1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.258892][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.258907][T14017] R13: 00007f1cfb9f6038 R14: 00007f1cfb9f5fa0 R15: 00007ffd37d7a688 [ 276.258928][T14017] [ 276.351660][T13995] hierarchical_memsw_limit 9223372036854771712 [ 276.352561][T13886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.374115][T13995] total_cache 0 [ 276.380482][T13886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.382187][T13995] total_rss 0 [ 276.388211][T13886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.411474][T13995] total_shmem 0 [ 276.422025][T13886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.428732][T13995] total_mapped_file 0 [ 276.432736][T13886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.438743][T13995] total_dirty 0 [ 276.446357][T13886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.466174][T14024] loop5: detected capacity change from 0 to 256 [ 276.515503][T13886] hsr_slave_0: entered promiscuous mode [ 276.520449][T13995] total_writeback 0 [ 276.575666][T13886] hsr_slave_1: entered promiscuous mode [ 276.586542][T13995] total_workingset_refault_anon 9 [ 276.608750][T13886] debugfs: 'hsr0' already exists in 'hsr' [ 276.614613][T14024] vfat: Deprecated parameter 'posix' [ 276.617684][T13886] Cannot create hsr debugfs directory [ 276.632918][T14024] FAT-fs: "posix" option is obsolete, not supported now [ 276.671638][T13995] total_workingset_refault_file 0 [ 276.685259][T13995] total_swap 24576 [ 276.688981][T13995] total_swapcached 61440 [ 276.693213][T13995] total_pgpgin 15 [ 276.697195][T13995] total_pgpgout 15 [ 276.701073][T13995] total_pgfault 64 [ 276.705010][T13995] total_pgmajfault 5 [ 276.708985][T13995] total_inactive_anon 0 [ 276.713466][T13995] total_active_anon 0 [ 276.717988][T13995] total_inactive_file 0 [ 276.728253][T13995] total_active_file 0 [ 276.732242][T13995] total_unevictable 0 [ 276.737705][T14040] loop4: detected capacity change from 0 to 512 [ 276.749723][T13995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.3009,pid=13987,uid=0 [ 276.772520][T14040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 276.784314][T13995] Memory cgroup out of memory: Killed process 13995 (syz.0.3009) total-vm:96368kB, anon-rss:1420kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 276.799225][T14040] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.847117][T14051] ip6t_srh: unknown srh invflags 4000 [ 276.872593][T14051] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 276.896255][T14051] SELinux: failed to load policy [ 277.040558][T14067] loop0: detected capacity change from 0 to 512 [ 277.072289][T13886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.082562][T14067] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 277.113866][T13886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.149171][T13886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.169401][T13886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.193683][T13886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.210396][T13886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.225038][T13886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.247647][T13886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.330064][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 277.330858][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'. [ 277.394515][T13886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.441710][T13886] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.466841][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.473937][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.485015][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.492176][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.548225][T14125] netlink: 'syz.0.3024': attribute type 21 has an invalid length. [ 277.561071][T14127] capability: warning: `syz.5.3023' uses 32-bit capabilities (legacy support in use) [ 277.669127][T13886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.702288][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3026'. [ 277.779197][T13886] veth0_vlan: entered promiscuous mode [ 277.789769][T13886] veth1_vlan: entered promiscuous mode [ 277.812807][T13886] veth0_macvtap: entered promiscuous mode [ 277.831966][T13886] veth1_macvtap: entered promiscuous mode [ 277.852729][T13886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.871759][T13886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.924499][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.937863][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.975515][ T7171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.984342][T14154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=14154 comm=syz.1.2990 [ 277.992963][ T7171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.008429][T14157] 9p: Bad value for 'rfdno' [ 278.151878][T14150] loop2: detected capacity change from 0 to 1764 [ 278.161900][T14150] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 278.183495][T14181] loop1: detected capacity change from 0 to 512 [ 278.235603][T14183] loop1: detected capacity change from 0 to 1764 [ 278.249592][T14183] iso9660: Unknown parameter 'Ì*RBvø³ÉcIÎ`kÌþòálÑòR©3Uô›Î®†øJ!Ÿ5n5¯!‘½6ÏC{§Æ0`Büb}t¸Ü#âjÐ!pÒ¡åÄwŸ‚!ôU›i£Ûs8QñÒáäÉ(ÆxA$S& [ 278.249592][T14183] vv' [ 278.362743][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 278.362798][ T28] audit: type=1400 audit(1787369362.079:1370): avc: denied { create } for pid=14191 comm="syz.1.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.395470][ T28] audit: type=1400 audit(1787369362.109:1371): avc: denied { bind } for pid=14191 comm="syz.1.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.419021][ T28] audit: type=1400 audit(1787369362.109:1372): avc: denied { write } for pid=14191 comm="syz.1.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.445970][ T28] audit: type=1400 audit(1787369362.109:1373): avc: denied { append } for pid=14191 comm="syz.1.3034" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.514168][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3036'. [ 278.544982][T14199] loop1: detected capacity change from 0 to 512 [ 278.564073][T14199] EXT4-fs: inline encryption not supported [ 278.593736][T14199] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 278.608337][ T3292] syz_tun (unregistering): left allmulticast mode [ 278.615599][T14199] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.3035: corrupted in-inode xattr: e_value size too large [ 278.634920][T14203] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 278.644084][ T3292] team0: Port device syz_tun removed [ 278.649945][ T28] audit: type=1400 audit(1787369362.359:1374): avc: denied { read } for pid=14201 comm="syz.4.3038" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 278.653204][T14199] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 278.675567][ T28] audit: type=1400 audit(1787369362.359:1375): avc: denied { open } for pid=14201 comm="syz.4.3038" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 278.684915][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 278.684946][ C0] EXT4-fs (loop1): initial error at time 1787369362: ext4_iget_extra_inode:5210: inode 15 [ 278.685003][ C0] EXT4-fs (loop1): last error at time 1787369362: ext4_iget_extra_inode:5210: inode 15 [ 278.713790][T14199] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.3035: couldn't read orphan inode 15 (err -117) [ 278.814823][T14199] loop1: lost filesystem error report for type 5 error -117 [ 278.834688][T14199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.855795][T14209] loop4: detected capacity change from 0 to 512 [ 278.892802][T14209] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 278.908824][ T28] audit: type=1400 audit(1787369362.629:1376): avc: denied { write } for pid=14193 comm="syz.1.3035" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.911745][T14199] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.3035: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 278.943280][T14209] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.3038: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840 [ 278.972417][ T28] audit: type=1400 audit(1787369362.629:1377): avc: denied { write } for pid=14193 comm="syz.1.3035" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.994897][T14209] loop4: lost filesystem error report for type 5 error -117 [ 278.996752][T14209] EXT4-fs (loop4): 1 orphan inode deleted [ 279.004240][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 279.004273][ C0] EXT4-fs (loop4): initial error at time 1787369362: ext4_xattr_inode_iget:473 [ 279.004325][ C0] EXT4-fs (loop4): last error at time 1787369362: ext4_xattr_inode_iget:473 [ 279.037654][ T28] audit: type=1400 audit(1787369362.629:1378): avc: denied { remove_name } for pid=14193 comm="syz.1.3035" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.068076][T14209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.073798][ T28] audit: type=1400 audit(1787369362.629:1379): avc: denied { rename } for pid=14193 comm="syz.1.3035" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.085973][T14209] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.297366][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.301976][T14224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3041'. [ 279.377426][T14207] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.384683][T14207] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.401668][T14207] bridge_slave_0: entered allmulticast mode [ 279.413960][T14207] bridge_slave_0: entered promiscuous mode [ 279.447666][T14207] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.455210][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.468899][T14207] bridge_slave_1: entered allmulticast mode [ 279.475895][T14207] bridge_slave_1: entered promiscuous mode [ 279.499360][T14207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.515166][T14207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.539447][T14207] team0: Port device team_slave_0 added [ 279.547769][T14207] team0: Port device team_slave_1 added [ 279.564233][T14207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.571304][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.600489][T14207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.611074][T14244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3047'. [ 279.613173][T14207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.642085][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.651032][T14249] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3048'. [ 279.685344][T14207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.728591][T14207] hsr_slave_0: entered promiscuous mode [ 279.735795][T14207] hsr_slave_1: entered promiscuous mode [ 279.741663][T14207] debugfs: 'hsr0' already exists in 'hsr' [ 279.750673][T14207] Cannot create hsr debugfs directory [ 279.768138][T14248] loop2: detected capacity change from 0 to 512 [ 279.793493][T14248] EXT4-fs (loop2): 1 orphan inode deleted [ 279.800064][T14250] 9p: Bad value for 'rfdno' [ 279.804859][ T7191] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:20: Failed to release dquot type 1 [ 279.811935][T14248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.822861][ T7191] loop2: lost filesystem error report for type 5 error -117 [ 279.829833][T14248] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.861403][T14207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.873070][T13517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.902051][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3051'. [ 279.922120][T14258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3051'. [ 279.943560][T14207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.959911][T14258] netlink: 'syz.2.3051': attribute type 39 has an invalid length. [ 280.011686][T14268] device-mapper: ioctl: name not supplied when creating device [ 280.031985][T14207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.120038][T14207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.160613][ T11] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x1 [ 280.174649][ T11] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x0 [ 280.192863][ T11] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x0 [ 280.240533][ T11] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 280.289398][T14207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.307056][T14207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.322503][T14207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.339272][T14300] loop5: detected capacity change from 0 to 164 [ 280.352236][T14292] fido_id[14292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.494034][T14207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.502038][T14300] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3059'. [ 280.514124][T14207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.544618][T14207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.553970][T14207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.565215][T14207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.645822][T14207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.666897][T14207] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.676084][T14328] EXT4-fs (loop1): 1 orphan inode deleted [ 280.684522][T14328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.702142][ T114] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1 [ 280.714906][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.722023][ T7171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.733512][T14328] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.749107][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.756196][ T7171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.789071][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.821889][T14342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3065'. [ 280.852493][T14351] ip6t_srh: unknown srh invflags 4000 [ 280.865469][T14351] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 280.888677][T14351] SELinux: failed to load policy [ 280.943428][T14207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.966432][T14364] nftables ruleset with unbound chain [ 281.076116][T14207] veth0_vlan: entered promiscuous mode [ 281.105253][T14207] veth1_vlan: entered promiscuous mode [ 281.138333][T14207] veth0_macvtap: entered promiscuous mode [ 281.158041][T14207] veth1_macvtap: entered promiscuous mode [ 281.169907][T14207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.189723][T14207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.243800][ T114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.252557][ T114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.282069][ T114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.323829][ T7171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.344449][T14388] 9p: Bad value for 'rfdno' [ 281.362513][T14351] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 281.453824][ T7173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.506560][ T7173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.551826][ T7173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.565912][T14400] set_capacity_and_notify: 2 callbacks suppressed [ 281.565927][T14400] loop0: detected capacity change from 0 to 512 [ 281.621560][T14400] EXT4-fs (loop0): 1 orphan inode deleted [ 281.634488][ T114] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1 [ 281.634825][T14400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.658961][ T114] loop0: lost filesystem error report for type 5 error -117 [ 281.668733][T14400] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.692071][ T7173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.705504][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.756148][T14418] No source specified [ 281.869453][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.897087][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.932661][T14389] bridge_slave_0: entered allmulticast mode [ 281.951266][T14389] bridge_slave_0: entered promiscuous mode [ 281.979664][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.999627][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.007690][T14389] bridge_slave_1: entered allmulticast mode [ 282.014157][T14389] bridge_slave_1: entered promiscuous mode [ 282.024910][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 282.076229][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.086771][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.119721][T14389] team0: Port device team_slave_0 added [ 282.127871][T14389] team0: Port device team_slave_1 added [ 282.158698][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.165827][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.201513][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.213759][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.221149][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.247809][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.263961][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 282.297670][T14389] hsr_slave_0: entered promiscuous mode [ 282.304612][T14389] hsr_slave_1: entered promiscuous mode [ 282.310646][T14389] debugfs: 'hsr0' already exists in 'hsr' [ 282.316835][T14389] Cannot create hsr debugfs directory [ 282.430798][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 282.450772][ T7173] bridge_slave_1: left allmulticast mode [ 282.457097][ T7173] bridge_slave_1: left promiscuous mode [ 282.472704][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.502045][ T7173] bridge_slave_0: left allmulticast mode [ 282.502369][T14479] ip6t_srh: unknown srh invflags 4000 [ 282.509622][ T7173] bridge_slave_0: left promiscuous mode [ 282.522436][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.537906][T14479] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 282.557242][T14479] SELinux: failed to load policy [ 282.638739][ T7173] bond1 (unregistering): (slave geneve2): Releasing active interface [ 282.654878][ T7173] geneve2 (unregistering): left allmulticast mode [ 282.685997][ T7173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.698982][ T7173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.711153][ T7173] bond0 (unregistering): Released all slaves [ 282.723547][ T7173] bond1 (unregistering): Released all slaves [ 282.733347][ T7173] bond2 (unregistering): Released all slaves [ 282.788249][ T7173] tipc: Left network mode [ 282.814473][T14479] loop1: detected capacity change from 0 to 512 [ 282.823079][ T7173] hsr_slave_0: left promiscuous mode [ 282.831549][ T7173] hsr_slave_1: left promiscuous mode [ 282.837833][ T7173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.846357][ T7173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.853282][T14493] __nla_validate_parse: 2 callbacks suppressed [ 282.853330][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3087'. [ 282.872109][ T7173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.883925][ T7173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.891729][T14479] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 282.907603][ T7173] veth1_macvtap: left promiscuous mode [ 282.918835][ T7173] veth0_macvtap: left promiscuous mode [ 282.983200][T14483] 9p: Bad value for 'rfdno' [ 282.988487][ T7173] team0 (unregistering): Port device team_slave_1 removed [ 283.001366][ T7173] team0 (unregistering): Port device team_slave_0 removed [ 283.029782][T14498] loop1: detected capacity change from 0 to 512 [ 283.076854][T14498] EXT4-fs (loop1): 1 orphan inode deleted [ 283.095138][T14498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.108231][ T7191] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:20: Failed to release dquot type 1 [ 283.135548][ T7191] loop1: lost filesystem error report for type 5 error -117 [ 283.146994][T14498] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.210400][T14497] 9p: Bad value for 'rfdno' [ 283.268774][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.280219][T14518] loop0: detected capacity change from 0 to 2048 [ 283.306497][T14518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.322900][T14389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.353511][T14389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.394056][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 283.394080][ T28] audit: type=1400 audit(1787369367.119:1411): avc: denied { write } for pid=14517 comm="syz.0.3093" name="ip6_mr_cache" dev="proc" ino=4026532832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 283.435570][T14389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.454817][T14389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.462797][T14389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.477820][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.494314][T14389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.514516][T14389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.549559][T14389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.608501][ T28] audit: type=1400 audit(1787369367.329:1412): avc: denied { write } for pid=14532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.638877][T14538] syzkaller0: entered promiscuous mode [ 283.649247][T14538] syzkaller0: entered allmulticast mode [ 283.663535][ T28] audit: type=1400 audit(1787369367.329:1413): avc: denied { write } for pid=14552 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.691338][T14548] syzkaller0: entered promiscuous mode [ 283.697625][T14548] syzkaller0: entered allmulticast mode [ 283.707556][T14538] tipc: Enabling of bearer rejected, failed to enable media [ 283.730630][T14548] tipc: Enabling of bearer rejected, failed to enable media [ 283.807371][T14565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3098'. [ 283.823997][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3099'. [ 283.842050][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3098'. [ 283.852697][ T28] audit: type=1400 audit(1787369367.569:1414): avc: denied { write } for pid=14555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.883329][ T28] audit: type=1400 audit(1787369367.589:1415): avc: denied { write } for pid=14573 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.886384][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.913530][T14576] netlink: 'syz.1.3098': attribute type 39 has an invalid length. [ 283.966886][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.969303][T14565] device-mapper: ioctl: name not supplied when creating device [ 283.975022][T14566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3100'. [ 283.996255][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.003450][ T7173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.022080][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.029188][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.065662][T14389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.086306][T14389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.098147][T14579] loop5: detected capacity change from 0 to 512 [ 284.108802][ T28] audit: type=1400 audit(1787369367.829:1416): avc: denied { write } for pid=14578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.180570][ T28] audit: type=1400 audit(1787369367.899:1417): avc: denied { write } for pid=14597 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.209921][T14579] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 284.248411][T14600] syz.2.3103 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 284.268990][T14579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 284.278771][T14579] System zones: 1-12 [ 284.280750][T14600] CPU: 0 UID: 0 PID: 14600 Comm: syz.2.3103 Not tainted syzkaller #0 PREEMPT(lazy) [ 284.280818][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.280833][T14600] Call Trace: [ 284.280840][T14600] [ 284.280849][T14600] __dump_stack+0x1d/0x30 [ 284.280937][T14600] dump_stack_lvl+0x95/0xd0 [ 284.280960][T14600] dump_stack+0x15/0x1b [ 284.280983][T14600] dump_header+0x80/0x240 [ 284.281058][T14600] oom_kill_process+0x294/0x420 [ 284.281128][T14600] out_of_memory+0x981/0xbc0 [ 284.281179][T14600] try_charge_memcg+0x624/0xa10 [ 284.281204][T14600] ? should_fail_ex+0x31/0x280 [ 284.281242][T14600] __obj_cgroup_charge+0x105/0x230 [ 284.281278][T14600] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 284.281372][T14600] __kmalloc_noprof+0x25e/0x4c0 [ 284.281442][T14600] ? __register_sysctl_table+0x52/0xbe0 [ 284.281473][T14600] ? __register_sysctl_table+0x52/0xbe0 [ 284.281557][T14600] __register_sysctl_table+0x52/0xbe0 [ 284.281590][T14600] ? __kmalloc_node_track_caller_noprof+0x2e5/0x4e0 [ 284.281628][T14600] ? sctp_sysctl_net_register+0x29/0x4f0 [ 284.281654][T14600] ? sctp_sysctl_net_register+0x29/0x4f0 [ 284.281683][T14600] register_net_sysctl_sz+0x118/0x190 [ 284.281712][T14600] sctp_sysctl_net_register+0x499/0x4f0 [ 284.281817][T14600] sctp_ctrlsock_init+0xa6/0x140 [ 284.281847][T14600] ops_init+0x22a/0x2e0 [ 284.281879][T14600] ? mutex_unlock+0x4e/0x90 [ 284.281942][T14600] setup_net+0x9f/0x230 [ 284.281973][T14600] copy_net_ns+0x31a/0x460 [ 284.282012][T14600] create_new_namespaces+0x1f6/0x420 [ 284.282047][T14600] unshare_nsproxy_namespaces+0x115/0x150 [ 284.282084][T14600] ksys_unshare+0x42b/0x710 [ 284.282135][T14600] __x64_sys_unshare+0x1f/0x30 [ 284.282163][T14600] x64_sys_call+0x1e33/0x2550 [ 284.282191][T14600] do_syscall_64+0x112/0x360 [ 284.282264][T14600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.282289][T14600] RIP: 0033:0x7fa65078e0d9 [ 284.282350][T14600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.282371][T14600] RSP: 002b:00007fa64f1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 284.282394][T14600] RAX: ffffffffffffffda RBX: 00007fa650a15fa0 RCX: 00007fa65078e0d9 [ 284.282410][T14600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 284.282425][T14600] RBP: 00007fa650825024 R08: 0000000000000000 R09: 0000000000000000 [ 284.282505][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.282520][T14600] R13: 00007fa650a16038 R14: 00007fa650a15fa0 R15: 00007fff43b76578 [ 284.282541][T14600] [ 284.291014][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.381957][T14587] 9p: Bad value for 'rfdno' [ 284.389274][T14600] memory: usage 96kB, limit 96kB, failcnt 120 [ 284.429007][T14600] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 284.446446][T14579] EXT4-fs (loop5): 1 truncate cleaned up [ 284.465923][T14600] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 284.465943][T14600] Memory cgroup stats for /syz2/test: [ 284.466136][T14600] cache 0 [ 284.479180][T14579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.504254][T14600] rss 0 [ 284.541685][ T28] audit: type=1400 audit(1787369368.259:1418): avc: denied { read } for pid=14577 comm="syz.5.3101" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.545817][T14600] shmem 0 [ 284.551114][ T28] audit: type=1400 audit(1787369368.259:1419): avc: denied { open } for pid=14577 comm="syz.5.3101" path="/50/file2/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.555739][T14600] mapped_file 0 [ 284.661385][T14600] dirty 0 [ 284.664565][T14600] writeback 0 [ 284.667886][T14600] workingset_refault_anon 0 [ 284.672412][T14600] workingset_refault_file 0 [ 284.677486][T14600] swap 0 [ 284.685832][T14600] swapcached 0 [ 284.689223][T14600] pgpgin 0 [ 284.696412][T14600] pgpgout 0 [ 284.708124][T14600] pgfault 34 [ 284.711690][T14600] pgmajfault 0 [ 284.714722][T14389] veth0_vlan: entered promiscuous mode [ 284.718233][T14600] inactive_anon 0 [ 284.722755][T14389] veth1_vlan: entered promiscuous mode [ 284.725793][T14600] active_anon 0 [ 284.737036][T14600] inactive_file 0 [ 284.741309][T14600] active_file 0 [ 284.745708][T14600] unevictable 0 [ 284.749223][T14600] hierarchical_memory_limit 98304 [ 284.749363][T14605] loop1: detected capacity change from 0 to 512 [ 284.756661][T14600] hierarchical_memsw_limit 9223372036854771712 [ 284.763366][T14389] veth0_macvtap: entered promiscuous mode [ 284.770368][T14600] total_cache 0 [ 284.783600][T14389] veth1_macvtap: entered promiscuous mode [ 284.789668][ T28] audit: type=1400 audit(1787369368.499:1420): avc: denied { write } for pid=14626 comm="syz.5.3101" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.798352][T14600] total_rss 0 [ 284.822406][T14389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.828940][T14600] total_shmem 0 [ 284.833223][T14600] total_mapped_file 0 [ 284.840889][T14389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.859228][T14600] total_dirty 0 [ 284.863233][T14600] total_writeback 0 [ 284.871754][T14605] EXT4-fs (loop1): 1 orphan inode deleted [ 284.878816][ T7191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.890357][T14605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.903194][ T9655] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:22: Failed to release dquot type 1 [ 284.916070][ T9655] loop1: lost filesystem error report for type 5 error -117 [ 284.919309][T14605] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.937649][ T9655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.948640][ T9655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.959423][T14600] total_workingset_refault_anon 0 [ 284.969307][T14600] total_workingset_refault_file 0 [ 284.974457][ T114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.016870][T14600] total_swap 0 [ 285.023244][T14600] total_swapcached 0 [ 285.034428][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.043817][T14600] total_pgpgin 0 [ 285.067112][T14600] total_pgpgout 0 [ 285.078773][T14600] total_pgfault 34 [ 285.092168][T14600] total_pgmajfault 0 [ 285.096927][T14600] total_inactive_anon 0 [ 285.101153][T14600] total_active_anon 0 [ 285.114296][T14600] total_inactive_file 0 [ 285.128844][T14600] total_active_file 0 [ 285.135894][T14600] total_unevictable 0 [ 285.147512][T14600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3103,pid=14599,uid=0 [ 285.166047][T14600] Memory cgroup out of memory: Killed process 14600 (syz.2.3103) total-vm:94056kB, anon-rss:1416kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 285.185174][T14612] syz.0.3105 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 285.202456][T14612] CPU: 1 UID: 0 PID: 14612 Comm: syz.0.3105 Not tainted syzkaller #0 PREEMPT(lazy) [ 285.202483][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.202496][T14612] Call Trace: [ 285.202536][T14612] [ 285.202546][T14612] __dump_stack+0x1d/0x30 [ 285.202574][T14612] dump_stack_lvl+0x95/0xd0 [ 285.202600][T14612] dump_stack+0x15/0x1b [ 285.202623][T14612] dump_header+0x80/0x240 [ 285.202743][T14612] oom_kill_process+0x294/0x420 [ 285.202783][T14612] out_of_memory+0x981/0xbc0 [ 285.202885][T14612] try_charge_memcg+0x624/0xa10 [ 285.202920][T14612] __obj_cgroup_charge+0x105/0x230 [ 285.203138][T14612] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 285.203220][T14612] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 285.203252][T14612] ? __addrconf_sysctl_register+0x60/0x340 [ 285.203315][T14612] ? __addrconf_sysctl_register+0x60/0x340 [ 285.203349][T14612] kmemdup_noprof+0x2b/0x70 [ 285.203386][T14612] __addrconf_sysctl_register+0x60/0x340 [ 285.203427][T14612] addrconf_init_net+0x339/0x450 [ 285.203456][T14612] ? ip6addrlbl_net_init+0x335/0x340 [ 285.203639][T14612] ops_init+0x22a/0x2e0 [ 285.203671][T14612] ? mutex_unlock+0x4e/0x90 [ 285.203757][T14612] setup_net+0x9f/0x230 [ 285.203784][T14612] copy_net_ns+0x31a/0x460 [ 285.203830][T14612] create_new_namespaces+0x1f6/0x420 [ 285.203868][T14612] unshare_nsproxy_namespaces+0x115/0x150 [ 285.203998][T14612] ksys_unshare+0x42b/0x710 [ 285.204027][T14612] __x64_sys_unshare+0x1f/0x30 [ 285.204054][T14612] x64_sys_call+0x1e33/0x2550 [ 285.204079][T14612] do_syscall_64+0x112/0x360 [ 285.204168][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.204190][T14612] RIP: 0033:0x7f0b7541e0d9 [ 285.204207][T14612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.204289][T14612] RSP: 002b:00007f0b73e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 285.204309][T14612] RAX: ffffffffffffffda RBX: 00007f0b756a5fa0 RCX: 00007f0b7541e0d9 [ 285.204323][T14612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 285.204335][T14612] RBP: 00007f0b754b5024 R08: 0000000000000000 R09: 0000000000000000 [ 285.204349][T14612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.204361][T14612] R13: 00007f0b756a6038 R14: 00007f0b756a5fa0 R15: 00007ffd07c705e8 [ 285.204381][T14612] [ 285.210595][T14634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.228316][T14612] memory: usage 92kB, limit 96kB, failcnt 297 [ 285.457391][T14612] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 285.462448][T13254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.465106][T14612] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 285.465122][T14612] Memory cgroup stats for /syz0/test: [ 285.482713][T14612] cache 0 [ 285.491278][T14612] rss 0 [ 285.494123][T14612] shmem 0 [ 285.497100][T14612] mapped_file 0 [ 285.500572][T14612] dirty 0 [ 285.503527][T14612] writeback 0 [ 285.506838][T14612] workingset_refault_anon 12 [ 285.511451][T14612] workingset_refault_file 0 [ 285.516298][T14612] swap 0 [ 285.520457][T14612] swapcached 61440 [ 285.525332][T14612] pgpgin 18 [ 285.528462][T14612] pgpgout 18 [ 285.531669][T14612] pgfault 78 [ 285.534891][T14612] pgmajfault 8 [ 285.542883][T14612] inactive_anon 0 [ 285.549460][T14612] active_anon 0 [ 285.557510][T14612] inactive_file 0 [ 285.566460][T14634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.574159][T14612] active_file 0 [ 285.582739][T14612] unevictable 0 [ 285.587237][T14612] hierarchical_memory_limit 98304 [ 285.599301][T14612] hierarchical_memsw_limit 9223372036854771712 [ 285.605557][T14612] total_cache 0 [ 285.609101][T14612] total_rss 0 [ 285.618300][T14640] syzkaller0: entered promiscuous mode [ 285.623881][T14612] total_shmem 0 [ 285.631032][T14640] syzkaller0: entered allmulticast mode [ 285.633974][T14612] total_mapped_file 0 [ 285.640736][T14612] total_dirty 0 [ 285.644314][T14644] IPVS: length: 247 != 8 [ 285.647646][T14612] total_writeback 0 [ 285.653479][T14634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.661371][T14612] total_workingset_refault_anon 12 [ 285.675827][T14612] total_workingset_refault_file 0 [ 285.687638][T14612] total_swap 0 [ 285.696367][T14647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3111'. [ 285.698717][T14612] total_swapcached 61440 [ 285.709652][T14612] total_pgpgin 18 [ 285.714535][T14612] total_pgpgout 18 [ 285.718406][T14612] total_pgfault 78 [ 285.722171][T14612] total_pgmajfault 8 [ 285.726331][T14612] total_inactive_anon 0 [ 285.730510][T14612] total_active_anon 0 [ 285.734748][T14612] total_inactive_file 0 [ 285.739135][T14612] total_active_file 0 [ 285.745280][T14634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.747787][T14612] total_unevictable 0 [ 285.778289][T14612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.3105,pid=14611,uid=0 [ 285.806720][T14654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3113'. [ 285.814660][T14612] Memory cgroup out of memory: Killed process 14612 (syz.0.3105) total-vm:96104kB, anon-rss:1412kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 285.826069][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3113'. [ 285.855392][ T7191] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.869540][ T7191] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.883295][T14654] netlink: 'syz.5.3113': attribute type 39 has an invalid length. [ 285.885591][ T7191] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.899829][ T7191] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.928306][T14654] device-mapper: ioctl: name not supplied when creating device [ 285.986133][T14663] netlink: 'syz.4.3117': attribute type 9 has an invalid length. [ 286.006355][T14663] netlink: 'syz.4.3117': attribute type 6 has an invalid length. [ 286.021243][T14663] netlink: 'syz.4.3117': attribute type 7 has an invalid length. [ 286.030087][T14663] netlink: 'syz.4.3117': attribute type 8 has an invalid length. [ 286.108592][T14665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3118'. [ 286.118890][T14673] loop1: detected capacity change from 0 to 512 [ 286.150814][T14673] EXT4-fs (loop1): 1 orphan inode deleted [ 286.162003][T14673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.174928][ T7173] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 1 [ 286.188043][ T7173] loop1: lost filesystem error report for type 5 error -117 [ 286.188303][T14673] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.207846][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3121'. [ 286.228744][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.304602][T14688] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 286.311141][T14688] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 286.321379][T14688] vhci_hcd vhci_hcd.0: Device attached [ 286.544224][T14705] syzkaller0: entered promiscuous mode [ 286.549866][T14705] syzkaller0: entered allmulticast mode [ 286.569934][T14705] tipc: Started in network mode [ 286.579984][T14705] tipc: Node identity 665fae85d079, cluster identity 4711 [ 286.594658][ T11] usb 4-1: SetAddress Request (2) to port 0 [ 286.600777][ T11] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 286.600982][T14705] tipc: Enabled bearer , priority 0 [ 286.632244][T14688] loop1: detected capacity change from 0 to 1764 [ 286.647535][T14705] tipc: Resetting bearer [ 286.648395][T14688] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 286.674368][T14704] tipc: Resetting bearer [ 286.687207][T14704] tipc: Disabling bearer [ 286.732632][T14689] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 286.745902][ T7173] vhci_hcd vhci_hcd.1: stop threads [ 286.762426][ T7173] vhci_hcd vhci_hcd.1: release socket [ 286.770962][ T7173] vhci_hcd vhci_hcd.1: disconnect device [ 286.781629][T14695] loop2: detected capacity change from 0 to 1764 [ 286.797158][T14712] netlink: 'syz.0.3130': attribute type 39 has an invalid length. [ 286.811545][T14695] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 286.848356][T14715] device-mapper: ioctl: name not supplied when creating device [ 286.941109][T14718] loop5: detected capacity change from 0 to 512 [ 286.957399][T14718] EXT4-fs (loop5): 1 orphan inode deleted [ 286.963962][T14718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.976965][ T7191] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:20: Failed to release dquot type 1 [ 286.988855][T14718] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.016359][T13254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.282131][T14732] ip_tables: iptables: counters copy to user failed while replacing table [ 287.761740][T14737] futex_wake_op: syz.1.3138 tries to shift op by 144; fix this program [ 287.781861][T14737] futex_wake_op: syz.1.3138 tries to shift op by 144; fix this program [ 287.809834][T14742] syzkaller0: entered promiscuous mode [ 287.819027][T14742] syzkaller0: entered allmulticast mode [ 287.827368][T14742] tipc: Started in network mode [ 287.832908][T14742] tipc: Node identity 9273aab7c845, cluster identity 4711 [ 287.840739][T14742] tipc: Enabled bearer , priority 0 [ 287.857315][T14742] tipc: Resetting bearer [ 287.864881][T14741] tipc: Resetting bearer [ 287.886867][T14741] tipc: Disabling bearer [ 288.098464][T14747] __nla_validate_parse: 6 callbacks suppressed [ 288.098491][T14747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3142'. [ 288.320913][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3146'. [ 288.368740][T14753] loop0: detected capacity change from 0 to 512 [ 288.439827][T14755] 9p: Bad value for 'rfdno' [ 288.496391][T14753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 288.511619][T14762] syzkaller0: entered promiscuous mode [ 288.521217][T14762] syzkaller0: entered allmulticast mode [ 288.534956][T14753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 288.543563][T14753] System zones: 1-12 [ 288.546049][T14762] tipc: Enabled bearer , priority 0 [ 288.573786][T14753] EXT4-fs (loop0): 1 truncate cleaned up [ 288.590801][T14753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.606098][T14762] tipc: Resetting bearer [ 288.630310][T14761] tipc: Resetting bearer [ 288.649947][T14761] tipc: Disabling bearer [ 288.660801][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 288.660814][ T28] audit: type=1400 audit(1787369372.379:1428): avc: denied { write } for pid=14774 comm="syz.0.3144" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.697626][T14764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3149'. [ 288.703622][ T28] audit: type=1400 audit(1787369372.409:1429): avc: denied { write } for pid=14751 comm="syz.0.3144" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.773143][T14778] syzkaller0: entered promiscuous mode [ 288.782001][T14778] syzkaller0: entered allmulticast mode [ 288.808555][T14778] tipc: Enabled bearer , priority 0 [ 288.819366][T14778] tipc: Resetting bearer [ 288.832395][T14784] loop5: detected capacity change from 0 to 512 [ 288.858840][T14777] tipc: Resetting bearer [ 288.873219][T14777] tipc: Disabling bearer [ 288.893830][T14787] loop4: detected capacity change from 0 to 512 [ 288.918620][T14789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3156'. [ 289.084523][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3159'. [ 289.099479][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.243007][T14806] futex_wake_op: syz.2.3161 tries to shift op by 144; fix this program [ 289.289928][T14806] futex_wake_op: syz.2.3161 tries to shift op by 144; fix this program [ 289.337388][T14805] loop1: detected capacity change from 0 to 512 [ 289.381360][T14805] EXT4-fs: Ignoring removed bh option [ 289.397294][T14805] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 289.411113][T14805] EXT4-fs (loop1): 1 truncate cleaned up [ 289.424064][T14805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.509916][ T28] audit: type=1400 audit(1787369373.229:1430): avc: denied { listen } for pid=14804 comm="syz.1.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 289.687917][T14815] loop5: detected capacity change from 0 to 512 [ 289.715875][T14815] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 289.742109][T14815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 289.758532][T14815] System zones: 1-12 [ 289.775730][T14815] EXT4-fs (loop5): 1 truncate cleaned up [ 289.796587][T14815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.892703][ T28] audit: type=1400 audit(1787369373.609:1431): avc: denied { write } for pid=14818 comm="syz.5.3165" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.946320][ T28] audit: type=1400 audit(1787369373.649:1432): avc: denied { write } for pid=14814 comm="syz.5.3165" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.014522][ T28] audit: type=1400 audit(1787369373.669:1433): avc: denied { map } for pid=14819 comm="syz.4.3166" path="socket:[39916]" dev="sockfs" ino=39916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.135416][T14825] loop4: detected capacity change from 0 to 512 [ 290.192788][ T28] audit: type=1400 audit(1787369373.909:1434): avc: denied { bind } for pid=14824 comm="syz.4.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.227379][T14827] loop2: detected capacity change from 0 to 512 [ 290.251047][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.283403][T14830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3169'. [ 290.296986][T14827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.314726][T14827] EXT4-fs (loop2): 1 truncate cleaned up [ 290.320895][T14827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.406896][T13517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.422684][T13254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.461571][T14833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 290.491680][T14833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 290.500631][T14833] System zones: 1-12 [ 290.512660][T14833] EXT4-fs (loop1): 1 truncate cleaned up [ 290.535178][T14833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.557095][T14836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3171'. [ 290.609802][ T28] audit: type=1400 audit(1787369374.329:1435): avc: denied { write } for pid=14841 comm="syz.1.3170" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.679005][ T28] audit: type=1400 audit(1787369374.329:1436): avc: denied { write } for pid=14832 comm="syz.1.3170" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.699519][T14845] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 290.722457][ T28] audit: type=1400 audit(1787369374.399:1437): avc: denied { write } for pid=14843 comm="syz.5.3174" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 290.793339][T14848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3173'. [ 290.862901][T14851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3176'. [ 290.894389][T14858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3180'. [ 291.109454][T14874] ip_tables: iptables: counters copy to user failed while replacing table [ 291.474319][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.592646][T14879] netlink: 'syz.1.3185': attribute type 8 has an invalid length. [ 291.611744][T14881] ip6t_srh: unknown srh invflags 4000 [ 291.624589][T14881] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 291.632778][T14881] SELinux: failed to load policy [ 291.653958][ T11] usb 4-1: device descriptor read/8, error -110 [ 291.661639][T14883] set_capacity_and_notify: 2 callbacks suppressed [ 291.670239][T14883] loop1: detected capacity change from 0 to 512 [ 291.763478][T14890] ip6t_srh: unknown srh invflags 4000 [ 291.764046][ T11] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 291.783669][ T11] usb 4-1: enqueue for inactive port 0 [ 291.792168][T14890] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 291.796359][ T11] usb 4-1: enqueue for inactive port 0 [ 291.809231][T14890] SELinux: failed to load policy [ 291.823702][ T11] usb 4-1: enqueue for inactive port 0 [ 291.945082][T14881] loop2: detected capacity change from 0 to 512 [ 291.966290][T14900] loop4: detected capacity change from 0 to 512 [ 291.989370][T14881] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 292.007882][T14900] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 292.184718][T14899] loop0: detected capacity change from 0 to 512 [ 292.200524][T14899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.212305][T14913] FAULT_INJECTION: forcing a failure. [ 292.212305][T14913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.212343][T14913] CPU: 0 UID: 0 PID: 14913 Comm: syz.4.3199 Not tainted syzkaller #0 PREEMPT(lazy) [ 292.212371][T14913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.212385][T14913] Call Trace: [ 292.212393][T14913] [ 292.212427][T14913] __dump_stack+0x1d/0x30 [ 292.212488][T14913] dump_stack_lvl+0x95/0xd0 [ 292.212512][T14913] dump_stack+0x15/0x1b [ 292.212534][T14913] should_fail_ex+0x262/0x280 [ 292.212567][T14913] should_fail+0xb/0x20 [ 292.212676][T14913] should_fail_usercopy+0x1a/0x20 [ 292.212713][T14913] _copy_from_user+0x1c/0xb0 [ 292.212825][T14913] __sys_bpf+0x1e2/0xc30 [ 292.212850][T14913] ? get_pid_task+0x92/0xc0 [ 292.212933][T14913] ? vfs_write+0x800/0x9a0 [ 292.212964][T14913] __x64_sys_bpf+0x69/0x80 [ 292.213000][T14913] x64_sys_call+0xf26/0x2550 [ 292.213069][T14913] do_syscall_64+0x112/0x360 [ 292.213105][T14913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.213129][T14913] RIP: 0033:0x7f0fa446e0d9 [ 292.213147][T14913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.213169][T14913] RSP: 002b:00007f0fa2ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.213203][T14913] RAX: ffffffffffffffda RBX: 00007f0fa46f6090 RCX: 00007f0fa446e0d9 [ 292.213220][T14913] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 292.213302][T14913] RBP: 00007f0fa2ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.213317][T14913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.213331][T14913] R13: 00007f0fa46f6128 R14: 00007f0fa46f6090 R15: 00007ffd8d8b8218 [ 292.213350][T14913] [ 292.412500][T14899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 292.420982][T14899] System zones: 1-12 [ 292.433364][T14899] EXT4-fs (loop0): 1 truncate cleaned up [ 292.442204][T14899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.490857][T14922] loop2: detected capacity change from 0 to 512 [ 292.669574][T14932] ip_tables: iptables: counters copy to user failed while replacing table [ 292.884002][ T11] usb usb4-port1: attempt power cycle [ 293.140098][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.187457][T14935] __nla_validate_parse: 3 callbacks suppressed [ 293.187479][T14935] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3206'. [ 293.229163][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'. [ 293.247529][T14938] futex_wake_op: syz.1.3205 tries to shift op by 144; fix this program [ 293.319547][T14938] futex_wake_op: syz.1.3205 tries to shift op by 144; fix this program [ 293.378733][T14944] ip6t_srh: unknown srh invflags 4000 [ 293.389051][T14944] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 293.440522][T14944] SELinux: failed to load policy [ 293.469605][T14949] loop4: detected capacity change from 0 to 512 [ 293.500336][T14949] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 293.650611][T14958] syzkaller0: entered promiscuous mode [ 293.664637][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 293.664722][ T28] audit: type=1326 audit(1787369377.379:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.700023][T14958] syzkaller0: entered allmulticast mode [ 293.731895][ T28] audit: type=1326 audit(1787369377.419:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.732863][T14956] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3214'. [ 293.772183][ T28] audit: type=1326 audit(1787369377.419:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.821542][ T28] audit: type=1326 audit(1787369377.429:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.848417][ T28] audit: type=1326 audit(1787369377.429:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.858701][T14942] 9p: Bad value for 'rfdno' [ 293.874373][ T28] audit: type=1326 audit(1787369377.429:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.928057][T14954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.928912][ T28] audit: type=1326 audit(1787369377.429:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.950400][T14954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.967981][ T28] audit: type=1326 audit(1787369377.429:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 293.995602][T14965] 9p: Bad value for 'rfdno' [ 293.999580][ T28] audit: type=1326 audit(1787369377.429:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 294.003150][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 294.029085][ T28] audit: type=1326 audit(1787369377.429:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9614e0d9 code=0x7ffc0000 [ 294.167582][T14968] loop5: detected capacity change from 0 to 512 [ 294.207558][T14968] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 294.254960][T14968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 294.263456][T14968] System zones: 1-12 [ 294.276958][T14968] EXT4-fs (loop5): 1 truncate cleaned up [ 294.287169][T14974] loop4: detected capacity change from 0 to 512 [ 294.289096][T14968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.316391][T14974] EXT4-fs (loop4): 1 orphan inode deleted [ 294.322614][T14974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.335381][ T7173] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 1 [ 294.347147][ T7173] loop4: lost filesystem error report for type 5 error -117 [ 294.347613][T14974] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.436070][T14389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.480539][T14984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3221'. [ 294.511872][T14989] ip6t_srh: unknown srh invflags 4000 [ 294.523291][T14989] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 294.532653][T14989] SELinux: failed to load policy [ 294.547333][T13254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.637205][T14993] syzkaller0: entered promiscuous mode [ 294.652860][T14993] syzkaller0: entered allmulticast mode [ 294.667964][T14993] tipc: Enabled bearer , priority 0 [ 294.702082][T14992] tipc: Resetting bearer [ 294.707718][T15003] FAULT_INJECTION: forcing a failure. [ 294.707718][T15003] name failslab, interval 1, probability 0, space 0, times 0 [ 294.724159][ T11] usb usb4-port1: unable to enumerate USB device [ 294.732119][T14992] tipc: Disabling bearer [ 294.741995][T15003] CPU: 0 UID: 0 PID: 15003 Comm: syz.2.3228 Not tainted syzkaller #0 PREEMPT(lazy) [ 294.742022][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.742035][T15003] Call Trace: [ 294.742045][T15003] [ 294.742053][T15003] __dump_stack+0x1d/0x30 [ 294.742078][T15003] dump_stack_lvl+0x95/0xd0 [ 294.742101][T15003] dump_stack+0x15/0x1b [ 294.742121][T15003] should_fail_ex+0x262/0x280 [ 294.742223][T15003] should_failslab+0x8c/0xb0 [ 294.742246][T15003] kmem_cache_alloc_node_noprof+0x86/0x3f0 [ 294.742271][T15003] ? lockref_put_return+0xf7/0x130 [ 294.742338][T15003] ? dup_task_struct+0x5a/0x750 [ 294.742400][T15003] ? dup_task_struct+0x5a/0x750 [ 294.742431][T15003] dup_task_struct+0x5a/0x750 [ 294.742456][T15003] copy_process+0x5a0/0x2340 [ 294.742552][T15003] ? kstrtoull+0x111/0x140 [ 294.742579][T15003] ? kstrtouint_from_user+0xa8/0xf0 [ 294.742606][T15003] ? __rcu_read_unlock+0x4e/0x70 [ 294.742636][T15003] kernel_clone+0x1c0/0x5f0 [ 294.742664][T15003] __x64_sys_clone+0x143/0x180 [ 294.742752][T15003] x64_sys_call+0x2479/0x2550 [ 294.742786][T15003] do_syscall_64+0x112/0x360 [ 294.742824][T15003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.742848][T15003] RIP: 0033:0x7fa65078e0d9 [ 294.742919][T15003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.742941][T15003] RSP: 002b:00007fa64f1c5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 294.742965][T15003] RAX: ffffffffffffffda RBX: 00007fa650a16090 RCX: 00007fa65078e0d9 [ 294.743049][T15003] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 294.743064][T15003] RBP: 00007fa64f1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.743080][T15003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.743096][T15003] R13: 00007fa650a16128 R14: 00007fa650a16090 R15: 00007fff43b76578 [ 294.743127][T15003] [ 294.951242][T14989] loop4: detected capacity change from 0 to 512 [ 294.977032][T14989] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 295.074727][T15017] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 295.081348][T15017] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 295.090717][T15017] vhci_hcd vhci_hcd.0: Device attached [ 295.099392][T15020] loop4: detected capacity change from 0 to 512 [ 295.363878][ T3372] usb 12-1: SetAddress Request (2) to port 0 [ 295.370023][ T3372] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 295.381012][T15036] IPVS: length: 247 != 8 [ 295.558798][T15027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.580017][T15027] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.3237: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 295.596895][T15046] ip_tables: iptables: counters copy to user failed while replacing table [ 295.606351][T15027] loop4: lost filesystem error report for type 5 error -117 [ 295.623822][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 295.637879][ C1] EXT4-fs (loop4): initial error at time 1787369379: ext4_xattr_inode_iget:473 [ 295.647208][ C1] EXT4-fs (loop4): last error at time 1787369379: ext4_xattr_inode_iget:473 [ 295.707037][T15027] EXT4-fs (loop4): 1 orphan inode deleted [ 295.718600][T15027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.739154][T15017] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 295.836574][T15048] syzkaller0: entered promiscuous mode [ 295.866149][T15048] syzkaller0: entered allmulticast mode [ 295.919183][T15049] tipc: Enabled bearer , priority 0 [ 295.966916][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 296.029047][T15018] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 296.039601][ T7173] vhci_hcd vhci_hcd.5: stop threads [ 296.049086][T15027] batman_adv: batadv0: Adding interface: macvtap1 [ 296.049212][ T7173] vhci_hcd vhci_hcd.5: release socket [ 296.049267][ T7173] vhci_hcd vhci_hcd.5: disconnect device [ 296.084845][T15027] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.111253][T15027] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 296.135878][T15048] tipc: Resetting bearer [ 296.143288][T15047] tipc: Resetting bearer [ 296.150945][T15047] tipc: Disabling bearer [ 296.185796][T14389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.214339][T15043] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 296.407292][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3250'. [ 296.425066][T15075] IPVS: length: 247 != 8 [ 296.597964][T15086] ip_tables: iptables: counters copy to user failed while replacing table [ 296.675002][T15090] syzkaller0: entered promiscuous mode [ 296.690312][T15090] syzkaller0: entered allmulticast mode [ 296.711518][T15090] tipc: Enabled bearer , priority 0 [ 296.712804][T15092] set_capacity_and_notify: 3 callbacks suppressed [ 296.712818][T15092] loop2: detected capacity change from 0 to 512 [ 296.726597][T15090] tipc: Resetting bearer [ 296.783709][T15089] tipc: Resetting bearer [ 296.793838][T15092] EXT4-fs: Mount option(s) incompatible with ext2 [ 296.801280][T15089] tipc: Disabling bearer [ 296.927678][T15101] loop1: detected capacity change from 0 to 512 [ 296.969846][T15092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3261'. [ 296.970178][T15110] ip6t_srh: unknown srh invflags 4000 [ 296.990123][T15101] EXT4-fs (loop1): 1 orphan inode deleted [ 297.007671][T15101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.023754][T15101] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.031844][ T7177] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 1 [ 297.075810][T15110] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 297.090356][T15114] futex_wake_op: syz.0.3268 tries to shift op by 144; fix this program [ 297.106474][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.123455][T15110] SELinux: failed to load policy [ 297.175183][T15121] syzkaller0: entered promiscuous mode [ 297.180994][T15118] loop5: detected capacity change from 0 to 512 [ 297.183645][T15121] syzkaller0: entered allmulticast mode [ 297.208784][T15116] syz.2.3270 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 297.221427][T15116] CPU: 0 UID: 0 PID: 15116 Comm: syz.2.3270 Not tainted syzkaller #0 PREEMPT(lazy) [ 297.221487][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.221502][T15116] Call Trace: [ 297.221509][T15116] [ 297.221518][T15116] __dump_stack+0x1d/0x30 [ 297.221552][T15116] dump_stack_lvl+0x95/0xd0 [ 297.221653][T15116] dump_stack+0x15/0x1b [ 297.221677][T15116] dump_header+0x80/0x240 [ 297.221701][T15116] oom_kill_process+0x294/0x420 [ 297.221739][T15116] out_of_memory+0x981/0xbc0 [ 297.221811][T15116] try_charge_memcg+0x624/0xa10 [ 297.221847][T15116] __obj_cgroup_charge+0x105/0x230 [ 297.221888][T15116] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 297.222073][T15116] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 297.222148][T15116] ? __devinet_sysctl_register+0x5a/0x250 [ 297.222174][T15116] ? __devinet_sysctl_register+0x5a/0x250 [ 297.222202][T15116] kmemdup_noprof+0x2b/0x70 [ 297.222285][T15116] __devinet_sysctl_register+0x5a/0x250 [ 297.222305][T15116] ? neigh_sysctl_register+0x682/0x6d0 [ 297.222439][T15116] ? raw_notifier_call_chain+0x72/0x1a0 [ 297.222466][T15116] ? unshare_nsproxy_namespaces+0x115/0x150 [ 297.222547][T15116] devinet_sysctl_register+0x101/0x150 [ 297.222570][T15116] inetdev_init+0x1de/0x340 [ 297.222593][T15116] inetdev_event+0x3fb/0xb60 [ 297.222738][T15116] ? __pfx_ib_netdevice_event+0x10/0x10 [ 297.222765][T15116] ? ib_netdevice_event+0xeb/0x350 [ 297.222809][T15116] ? __pfx_arp_netdev_event+0x10/0x10 [ 297.222886][T15116] ? __pfx_inetdev_event+0x10/0x10 [ 297.222911][T15116] raw_notifier_call_chain+0x72/0x1a0 [ 297.222938][T15116] ? blake2s_update+0x12b/0x150 [ 297.223043][T15116] call_netdevice_notifiers+0xb5/0x110 [ 297.223077][T15116] register_netdevice+0xfbf/0x11a0 [ 297.223103][T15116] register_netdev+0x3b/0x50 [ 297.223126][T15116] loopback_net_init+0x59/0x100 [ 297.223161][T15116] ops_init+0x22a/0x2e0 [ 297.223194][T15116] ? mutex_unlock+0x4e/0x90 [ 297.223267][T15116] setup_net+0x9f/0x230 [ 297.223295][T15116] copy_net_ns+0x31a/0x460 [ 297.223380][T15116] create_new_namespaces+0x1f6/0x420 [ 297.223423][T15116] unshare_nsproxy_namespaces+0x115/0x150 [ 297.223458][T15116] ksys_unshare+0x42b/0x710 [ 297.223497][T15116] __x64_sys_unshare+0x1f/0x30 [ 297.223546][T15116] x64_sys_call+0x1e33/0x2550 [ 297.223607][T15116] do_syscall_64+0x112/0x360 [ 297.223718][T15116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.223743][T15116] RIP: 0033:0x7fa65078e0d9 [ 297.223776][T15116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.223798][T15116] RSP: 002b:00007fa64f1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 297.223823][T15116] RAX: ffffffffffffffda RBX: 00007fa650a15fa0 RCX: 00007fa65078e0d9 [ 297.223841][T15116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 297.223856][T15116] RBP: 00007fa650825024 R08: 0000000000000000 R09: 0000000000000000 [ 297.223871][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.223936][T15116] R13: 00007fa650a16038 R14: 00007fa650a15fa0 R15: 00007fff43b76578 [ 297.223956][T15116] [ 297.539472][T15116] memory: usage 96kB, limit 96kB, failcnt 171 [ 297.541839][T15118] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 297.545593][T15116] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 297.562972][T15116] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 297.570127][T15116] Memory cgroup stats for /syz2/test: [ 297.570379][T15116] cache 0 [ 297.578987][T15116] rss 0 [ 297.581782][T15116] shmem 0 [ 297.602296][T15116] mapped_file 0 [ 297.609151][T15116] dirty 0 [ 297.612116][T15116] writeback 0 [ 297.620394][T15116] workingset_refault_anon 0 [ 297.627092][T15116] workingset_refault_file 0 [ 297.631606][T15116] swap 0 [ 297.634728][T15116] swapcached 0 [ 297.638150][T15116] pgpgin 0 [ 297.641208][T15116] pgpgout 0 [ 297.645644][T15116] pgfault 41 [ 297.651195][T15116] pgmajfault 0 [ 297.665595][T15116] inactive_anon 0 [ 297.669257][T15116] active_anon 0 [ 297.672781][T15116] inactive_file 0 [ 297.684210][T15116] active_file 0 [ 297.687732][T15116] unevictable 0 [ 297.691264][T15116] hierarchical_memory_limit 98304 [ 297.696284][T15116] hierarchical_memsw_limit 9223372036854771712 [ 297.702449][T15116] total_cache 0 [ 297.705955][T15116] total_rss 0 [ 297.709232][T15116] total_shmem 0 [ 297.712676][T15116] total_mapped_file 0 [ 297.716671][T15116] total_dirty 0 [ 297.720126][T15116] total_writeback 0 [ 297.723931][T15116] total_workingset_refault_anon 0 [ 297.728945][T15116] total_workingset_refault_file 0 [ 297.733962][T15116] total_swap 0 [ 297.737329][T15116] total_swapcached 0 [ 297.741216][T15116] total_pgpgin 0 [ 297.744787][T15116] total_pgpgout 0 [ 297.748403][T15116] total_pgfault 41 [ 297.752188][T15116] total_pgmajfault 0 [ 297.756126][T15116] total_inactive_anon 0 [ 297.760342][T15116] total_active_anon 0 [ 297.764323][T15116] total_inactive_file 0 [ 297.778452][T15116] total_active_file 0 [ 297.782518][T15116] total_unevictable 0 [ 297.790787][T15116] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3270,pid=15115,uid=0 [ 297.807725][T15116] Memory cgroup out of memory: Killed process 15115 (syz.2.3270) total-vm:94056kB, anon-rss:1416kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 297.825120][T15129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 297.831706][T15129] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 297.840247][T15129] vhci_hcd vhci_hcd.0: Device attached [ 297.845898][T15121] tipc: Started in network mode [ 297.850820][T15121] tipc: Node identity 1224856a40da, cluster identity 4711 [ 297.858100][T15121] tipc: Enabled bearer , priority 0 [ 297.868341][T15120] tipc: Resetting bearer [ 297.881438][T15120] tipc: Disabling bearer [ 298.078620][T15129] loop0: detected capacity change from 0 to 1764 [ 298.088754][T15129] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 298.101212][T15130] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 298.128919][ T7191] vhci_hcd vhci_hcd.0: stop threads [ 298.131024][T15151] FAULT_INJECTION: forcing a failure. [ 298.131024][T15151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.134180][ T7191] vhci_hcd vhci_hcd.0: release socket [ 298.134204][ T7191] vhci_hcd vhci_hcd.0: disconnect device [ 298.163330][T15151] CPU: 0 UID: 0 PID: 15151 Comm: syz.1.3280 Not tainted syzkaller #0 PREEMPT(lazy) [ 298.163411][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.163425][T15151] Call Trace: [ 298.163431][T15151] [ 298.163438][T15151] __dump_stack+0x1d/0x30 [ 298.163464][T15151] dump_stack_lvl+0x95/0xd0 [ 298.163492][T15151] dump_stack+0x15/0x1b [ 298.163503][T15151] should_fail_ex+0x262/0x280 [ 298.163522][T15151] should_fail+0xb/0x20 [ 298.163591][T15151] should_fail_usercopy+0x1a/0x20 [ 298.163623][T15151] _copy_from_user+0x1c/0xb0 [ 298.163635][T15151] ___sys_sendmsg+0xc1/0x1e0 [ 298.163656][T15151] __x64_sys_sendmsg+0xd4/0x160 [ 298.163708][T15151] x64_sys_call+0x22ab/0x2550 [ 298.163723][T15151] do_syscall_64+0x112/0x360 [ 298.163743][T15151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.163756][T15151] RIP: 0033:0x7fbf9614e0d9 [ 298.163841][T15151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.163852][T15151] RSP: 002b:00007fbf94ba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.163864][T15151] RAX: ffffffffffffffda RBX: 00007fbf963d5fa0 RCX: 00007fbf9614e0d9 [ 298.163938][T15151] RDX: 000000000000c810 RSI: 0000200000002780 RDI: 0000000000000004 [ 298.163946][T15151] RBP: 00007fbf94ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.163953][T15151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.163960][T15151] R13: 00007fbf963d6038 R14: 00007fbf963d5fa0 R15: 00007ffd0a0646d8 [ 298.163972][T15151] [ 298.330460][ T11] usb 2-1: enqueue for inactive port 0 [ 298.378967][T15159] loop5: detected capacity change from 0 to 164 [ 298.485286][T15167] syzkaller0: entered promiscuous mode [ 298.494054][T15167] syzkaller0: entered allmulticast mode [ 298.507490][T15167] tipc: Started in network mode [ 298.515350][T15167] tipc: Node identity fee4b05c2d2d, cluster identity 4711 [ 298.525664][T15167] tipc: Enabled bearer , priority 0 [ 298.545151][ T11] usb 2-1: enqueue for inactive port 0 [ 298.552539][T15166] tipc: Resetting bearer [ 298.566020][T15166] tipc: Disabling bearer [ 298.630290][T15170] futex_wake_op: syz.1.3287 tries to shift op by 144; fix this program [ 298.650091][T15163] 9p: Bad value for 'rfdno' [ 298.689652][T15172] syzkaller0: entered promiscuous mode [ 298.695232][T15172] syzkaller0: entered allmulticast mode [ 298.706840][T15172] tipc: Started in network mode [ 298.711759][T15172] tipc: Node identity d27253b21438, cluster identity 4711 [ 298.719261][T15172] tipc: Enabled bearer , priority 0 [ 298.756541][T15172] tipc: Resetting bearer [ 298.763233][T15171] tipc: Resetting bearer [ 298.789192][T15171] tipc: Disabling bearer [ 298.889037][T15177] FAULT_INJECTION: forcing a failure. [ 298.889037][T15177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.928983][ T3373] hid-generic 0005:0009:0040.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on syz0 [ 298.945882][T15177] CPU: 0 UID: 0 PID: 15177 Comm: syz.5.3290 Not tainted syzkaller #0 PREEMPT(lazy) [ 298.945910][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.945922][T15177] Call Trace: [ 298.945929][T15177] [ 298.945938][T15177] __dump_stack+0x1d/0x30 [ 298.945965][T15177] dump_stack_lvl+0x95/0xd0 [ 298.946063][T15177] dump_stack+0x15/0x1b [ 298.946091][T15177] should_fail_ex+0x262/0x280 [ 298.946125][T15177] should_fail+0xb/0x20 [ 298.946154][T15177] should_fail_usercopy+0x1a/0x20 [ 298.946188][T15177] _copy_to_user+0x20/0xa0 [ 298.946245][T15177] simple_read_from_buffer+0xb5/0x130 [ 298.946272][T15177] proc_fail_nth_read+0x10e/0x150 [ 298.946304][T15177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.946484][T15177] vfs_read+0x18e/0x7c0 [ 298.946509][T15177] ? kmem_cache_free+0x106/0x3a0 [ 298.946538][T15177] ? putname+0x7c/0xc0 [ 298.946647][T15177] ksys_read+0xdc/0x1a0 [ 298.946673][T15177] __x64_sys_read+0x40/0x50 [ 298.946697][T15177] x64_sys_call+0x2135/0x2550 [ 298.946801][T15177] do_syscall_64+0x112/0x360 [ 298.946834][T15177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.946856][T15177] RIP: 0033:0x7f9c8b54e90e [ 298.946874][T15177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.946937][T15177] RSP: 002b:00007f9c89fe6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.947015][T15177] RAX: ffffffffffffffda RBX: 00007f9c89fe76c0 RCX: 00007f9c8b54e90e [ 298.947032][T15177] RDX: 000000000000000f RSI: 00007f9c89fe70a0 RDI: 0000000000000005 [ 298.947047][T15177] RBP: 00007f9c89fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.947061][T15177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.947075][T15177] R13: 00007f9c8b816038 R14: 00007f9c8b815fa0 R15: 00007ffdf220b9e8 [ 298.947096][T15177] [ 299.201857][ T28] kauditd_printk_skb: 149 callbacks suppressed [ 299.201871][ T28] audit: type=1400 audit(1787369382.919:1649): avc: denied { getopt } for pid=15188 comm="syz.2.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.276521][ T28] audit: type=1326 audit(1787369382.989:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.339128][ T28] audit: type=1326 audit(1787369382.989:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.378358][ T28] audit: type=1326 audit(1787369382.989:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.426460][ T28] audit: type=1326 audit(1787369382.989:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.452959][ T28] audit: type=1326 audit(1787369382.989:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.478952][ T28] audit: type=1326 audit(1787369382.989:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.507302][ T28] audit: type=1326 audit(1787369382.989:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.535189][ T28] audit: type=1326 audit(1787369382.989:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.561045][ T28] audit: type=1326 audit(1787369382.989:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.2.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fa65078e0d9 code=0x7ffc0000 [ 299.595535][T15202] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3298'. [ 299.605427][T15205] syzkaller0: entered promiscuous mode [ 299.611043][T15205] syzkaller0: entered allmulticast mode [ 299.618928][T15205] tipc: Enabled bearer , priority 0 [ 299.627342][T15205] tipc: Resetting bearer [ 299.637471][T15204] tipc: Resetting bearer [ 299.645923][T15204] tipc: Disabling bearer [ 299.656952][T15208] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 299.663504][T15208] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 299.671503][T15208] vhci_hcd vhci_hcd.0: Device attached [ 299.770019][T15222] FAULT_INJECTION: forcing a failure. [ 299.770019][T15222] name failslab, interval 1, probability 0, space 0, times 0 [ 299.783101][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.2.3305 Not tainted syzkaller #0 PREEMPT(lazy) [ 299.783131][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.783146][T15222] Call Trace: [ 299.783153][T15222] [ 299.783161][T15222] __dump_stack+0x1d/0x30 [ 299.783188][T15222] dump_stack_lvl+0x95/0xd0 [ 299.783289][T15222] dump_stack+0x15/0x1b [ 299.783312][T15222] should_fail_ex+0x262/0x280 [ 299.783347][T15222] should_failslab+0x8c/0xb0 [ 299.783443][T15222] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 299.783467][T15222] ? security_file_alloc+0x32/0xf0 [ 299.783526][T15222] ? security_file_alloc+0x32/0xf0 [ 299.783588][T15222] security_file_alloc+0x32/0xf0 [ 299.783611][T15222] init_file+0x5b/0x1b0 [ 299.783641][T15222] alloc_empty_file+0x85/0x1e0 [ 299.783736][T15222] alloc_file_pseudo+0x92/0x120 [ 299.783813][T15222] __shmem_file_setup+0x226/0x260 [ 299.783842][T15222] shmem_file_setup+0x3b/0x50 [ 299.783896][T15222] memfd_alloc_file+0x4e/0x300 [ 299.783921][T15222] __se_sys_memfd_create+0x2e1/0x3b0 [ 299.784019][T15222] __x64_sys_memfd_create+0x31/0x40 [ 299.784114][T15222] x64_sys_call+0x1955/0x2550 [ 299.784142][T15222] do_syscall_64+0x112/0x360 [ 299.784177][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.784203][T15222] RIP: 0033:0x7fa65078e0d9 [ 299.784240][T15222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.784256][T15222] RSP: 002b:00007fa64f1e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 299.784278][T15222] RAX: ffffffffffffffda RBX: 00000000000005fa RCX: 00007fa65078e0d9 [ 299.784302][T15222] RDX: 00007fa64f1e6ee0 RSI: 0000000000000000 RDI: 00007fa650825204 [ 299.784318][T15222] RBP: 0000200000001000 R08: 00000000ffffffff R09: 0000000000000000 [ 299.784333][T15222] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 299.784382][T15222] R13: 00007fa64f1e6ee0 R14: 00007fa64f1e6ea0 R15: 00002000000001c0 [ 299.784401][T15222] [ 300.016077][T15216] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 300.023629][T15216] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 300.052415][T15216] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15216 comm=syz.1.3304 [ 300.072346][T15208] loop0: detected capacity change from 0 to 1764 [ 300.089750][T15208] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 300.102691][ T11] usb 2-1: SetAddress Request (3) to port 0 [ 300.108687][ T11] usb 2-1: new SuperSpeed USB device number 3 using vhci_hcd [ 300.152504][T15209] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 300.166636][ T9655] vhci_hcd vhci_hcd.0: stop threads [ 300.173211][ T9655] vhci_hcd vhci_hcd.0: release socket [ 300.209052][ T9655] vhci_hcd vhci_hcd.0: disconnect device [ 300.280454][T15238] loop5: detected capacity change from 0 to 1024 [ 300.301062][T15234] loop2: detected capacity change from 0 to 512 [ 300.319902][T15247] syzkaller0: entered promiscuous mode [ 300.325400][T15247] syzkaller0: entered allmulticast mode [ 300.328773][T15244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3311'. [ 300.341220][T15247] tipc: Enabled bearer , priority 0 [ 300.349759][T15247] tipc: Resetting bearer [ 300.356782][T15246] tipc: Resetting bearer [ 300.361331][T15234] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.3310: inode has both inline data and extents flags [ 300.378915][T15234] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.380965][T15234] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3310: couldn't read orphan inode 15 (err -117) [ 300.382756][T15246] tipc: Disabling bearer [ 300.398470][T15234] loop2: lost filesystem error report for type 5 error -117 [ 300.402002][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 300.402023][ C1] EXT4-fs (loop2): initial error at time 1787369384: ext4_orphan_get:1403: inode 15 [ 300.402065][ C1] EXT4-fs (loop2): last error at time 1787369384: ext4_orphan_get:1403: inode 15 [ 300.418090][T15238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.428905][T15234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.470138][ T3372] usb 12-1: device descriptor read/8, error -110 [ 300.480733][T13254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.569114][T13517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.583652][ T3372] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 300.623817][ T3372] usb 12-1: enqueue for inactive port 0 [ 300.643492][T15260] ip_tables: iptables: counters copy to user failed while replacing table [ 300.674099][ T3373] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 300.696138][ T3372] usb 12-1: enqueue for inactive port 0 [ 300.732001][ T3372] usb 12-1: enqueue for inactive port 0 [ 300.746772][T15263] loop2: detected capacity change from 0 to 512 [ 300.823522][T15263] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 300.864941][T15264] fido_id[15264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.956267][T15263] EXT4-fs (loop2): 1 truncate cleaned up [ 300.963374][T15263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.032598][T13517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.077434][T15268] futex_wake_op: syz.1.3316 tries to shift op by 144; fix this program [ 301.086149][T15268] futex_wake_op: syz.1.3316 tries to shift op by 144; fix this program [ 301.181433][T15278] FAULT_INJECTION: forcing a failure. [ 301.181433][T15278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.194494][T15278] CPU: 0 UID: 0 PID: 15278 Comm: syz.4.3325 Not tainted syzkaller #0 PREEMPT(lazy) [ 301.194575][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.194588][T15278] Call Trace: [ 301.194594][T15278] [ 301.194602][T15278] __dump_stack+0x1d/0x30 [ 301.194624][T15278] dump_stack_lvl+0x95/0xd0 [ 301.194644][T15278] dump_stack+0x15/0x1b [ 301.194745][T15278] should_fail_ex+0x262/0x280 [ 301.194789][T15278] should_fail+0xb/0x20 [ 301.194814][T15278] should_fail_usercopy+0x1a/0x20 [ 301.194845][T15278] _copy_from_user+0x1c/0xb0 [ 301.194865][T15278] kstrtouint_from_user+0x69/0xf0 [ 301.194935][T15278] ? 0xffffffff81000000 [ 301.195016][T15278] ? avc_policy_seqno+0x15/0x30 [ 301.195049][T15278] proc_fail_nth_write+0x50/0x160 [ 301.195104][T15278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.195203][T15278] vfs_write+0x254/0x9a0 [ 301.195293][T15278] ? __fget_files+0x184/0x1c0 [ 301.195325][T15278] ? mutex_lock+0x57/0x90 [ 301.195354][T15278] ksys_write+0xdc/0x1a0 [ 301.195383][T15278] __x64_sys_write+0x40/0x50 [ 301.195484][T15278] x64_sys_call+0x154e/0x2550 [ 301.195551][T15278] do_syscall_64+0x112/0x360 [ 301.195583][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.195608][T15278] RIP: 0033:0x7f0fa442e90e [ 301.195625][T15278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.195704][T15278] RSP: 002b:00007f0fa2ec6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.195727][T15278] RAX: ffffffffffffffda RBX: 00007f0fa2ec76c0 RCX: 00007f0fa442e90e [ 301.195751][T15278] RDX: 0000000000000001 RSI: 00007f0fa2ec70a0 RDI: 0000000000000004 [ 301.195765][T15278] RBP: 00007f0fa2ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.195783][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.195796][T15278] R13: 00007f0fa46f6038 R14: 00007f0fa46f5fa0 R15: 00007ffd8d8b8218 [ 301.195817][T15278] [ 301.537038][T15276] loop2: detected capacity change from 0 to 1764 [ 301.544354][ T7171] IPVS: starting estimator thread 0... [ 301.564658][T15276] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 301.587860][T15294] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 301.594442][T15294] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 301.621293][T15294] vhci_hcd vhci_hcd.0: Device attached [ 301.628729][T15299] FAULT_INJECTION: forcing a failure. [ 301.628729][T15299] name failslab, interval 1, probability 0, space 0, times 0 [ 301.643414][T15299] CPU: 1 UID: 0 PID: 15299 Comm: syz.1.3331 Not tainted syzkaller #0 PREEMPT(lazy) [ 301.643441][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.643454][T15299] Call Trace: [ 301.643462][T15299] [ 301.643496][T15299] __dump_stack+0x1d/0x30 [ 301.643551][T15299] dump_stack_lvl+0x95/0xd0 [ 301.643576][T15299] dump_stack+0x15/0x1b [ 301.643596][T15299] should_fail_ex+0x262/0x280 [ 301.643655][T15292] IPVS: using max 2400 ests per chain, 120000 per kthread [ 301.643652][T15299] ? __pfx_ingress_init+0x10/0x10 [ 301.643756][T15299] ? ingress_init+0x16c/0x340 [ 301.643789][T15299] should_failslab+0x8c/0xb0 [ 301.643814][T15299] __kmalloc_cache_noprof+0x7b/0x3f0 [ 301.643840][T15299] ? ingress_init+0x16c/0x340 [ 301.643950][T15299] ? __pfx_ingress_init+0x10/0x10 [ 301.643984][T15299] ingress_init+0x16c/0x340 [ 301.644017][T15299] ? __pfx_ingress_init+0x10/0x10 [ 301.644049][T15299] qdisc_create+0x57f/0x9c0 [ 301.644087][T15299] tc_modify_qdisc+0xb12/0x1550 [ 301.644136][T15299] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 301.644157][T15299] rtnetlink_rcv_msg+0x6a7/0x720 [ 301.644189][T15299] netlink_rcv_skb+0x11e/0x220 [ 301.644220][T15299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.644329][T15299] rtnetlink_rcv+0x1c/0x30 [ 301.644548][T15299] netlink_unicast+0x5a9/0x680 [ 301.644711][T15299] netlink_sendmsg+0x5be/0x6f0 [ 301.644746][T15299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.644821][T15299] ____sys_sendmsg+0x532/0x580 [ 301.644848][T15299] ___sys_sendmsg+0x195/0x1e0 [ 301.644907][T15299] __x64_sys_sendmsg+0xd4/0x160 [ 301.644934][T15299] x64_sys_call+0x22ab/0x2550 [ 301.644960][T15299] do_syscall_64+0x112/0x360 [ 301.645023][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.645047][T15299] RIP: 0033:0x7fbf9614e0d9 [ 301.645064][T15299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.645160][T15299] RSP: 002b:00007fbf94ba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.645182][T15299] RAX: ffffffffffffffda RBX: 00007fbf963d5fa0 RCX: 00007fbf9614e0d9 [ 301.645198][T15299] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 301.645212][T15299] RBP: 00007fbf94ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.645226][T15299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.645287][T15299] R13: 00007fbf963d6038 R14: 00007fbf963d5fa0 R15: 00007ffd0a0646d8 [ 301.645308][T15299] [ 301.902492][T15294] loop5: detected capacity change from 0 to 1764 [ 301.911243][T15294] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 301.940817][T15295] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 301.948121][ T3372] usb 12-1: SetAddress Request (3) to port 0 [ 301.954208][ T3372] usb 12-1: new SuperSpeed USB device number 3 using vhci_hcd [ 301.963633][ T7171] vhci_hcd vhci_hcd.5: stop threads [ 301.970353][ T7171] vhci_hcd vhci_hcd.5: release socket [ 301.976720][ T7171] vhci_hcd vhci_hcd.5: disconnect device [ 302.029738][T15317] FAULT_INJECTION: forcing a failure. [ 302.029738][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 302.042813][T15317] CPU: 0 UID: 0 PID: 15317 Comm: syz.1.3335 Not tainted syzkaller #0 PREEMPT(lazy) [ 302.042843][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.042919][T15317] Call Trace: [ 302.042927][T15317] [ 302.042935][T15317] __dump_stack+0x1d/0x30 [ 302.042962][T15317] dump_stack_lvl+0x95/0xd0 [ 302.042986][T15317] dump_stack+0x15/0x1b [ 302.043008][T15317] should_fail_ex+0x262/0x280 [ 302.043055][T15317] should_failslab+0x8c/0xb0 [ 302.043082][T15317] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 302.043110][T15317] ? do_getname+0x2e/0x1c0 [ 302.043167][T15317] ? do_getname+0x2e/0x1c0 [ 302.043224][T15317] do_getname+0x2e/0x1c0 [ 302.043256][T15317] getname_flags+0x1d/0x30 [ 302.043307][T15317] __se_sys_move_mount+0x11e/0x3f0 [ 302.043343][T15317] __x64_sys_move_mount+0x67/0x80 [ 302.043371][T15317] x64_sys_call+0x12b2/0x2550 [ 302.043399][T15317] do_syscall_64+0x112/0x360 [ 302.043432][T15317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.043458][T15317] RIP: 0033:0x7fbf9614e0d9 [ 302.043475][T15317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.043513][T15317] RSP: 002b:00007fbf94ba7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 302.043532][T15317] RAX: ffffffffffffffda RBX: 00007fbf963d5fa0 RCX: 00007fbf9614e0d9 [ 302.043568][T15317] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 302.043581][T15317] RBP: 00007fbf94ba7090 R08: 0000000000000001 R09: 0000000000000000 [ 302.043593][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.043635][T15317] R13: 00007fbf963d6038 R14: 00007fbf963d5fa0 R15: 00007ffd0a0646d8 [ 302.043654][T15317] [ 302.263555][T15325] syzkaller0: entered promiscuous mode [ 302.273131][T15325] syzkaller0: entered allmulticast mode [ 302.287433][T15325] tipc: Enabled bearer , priority 0 [ 302.297026][T15325] tipc: Resetting bearer [ 302.313915][T15324] tipc: Resetting bearer [ 302.321869][T15331] IPVS: length: 247 != 8 [ 302.332251][T15324] tipc: Disabling bearer [ 302.476442][T15333] loop2: detected capacity change from 0 to 512 [ 302.490169][T15333] EXT4-fs: Ignoring removed bh option [ 302.510180][T15333] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 302.557746][T15333] EXT4-fs (loop2): 1 truncate cleaned up [ 302.583066][T15333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.652253][T15346] ip_tables: iptables: counters copy to user failed while replacing table [ 303.202153][T15350] loop1: detected capacity change from 0 to 1764 [ 303.212540][T15348] loop4: detected capacity change from 0 to 1764 [ 303.230255][T15348] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 303.247697][T15337] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 303.428534][T13517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.513804][T15371] UDC core: g1: couldn't find an available UDC or it's busy [ 303.537680][T15374] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3354'. [ 303.680299][T15386] loop4: detected capacity change from 0 to 512 [ 303.883738][T15397] FAULT_INJECTION: forcing a failure. [ 303.883738][T15397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.897283][T15397] CPU: 1 UID: 0 PID: 15397 Comm: syz.5.3361 Not tainted syzkaller #0 PREEMPT(lazy) [ 303.897309][T15397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.897388][T15397] Call Trace: [ 303.897396][T15397] [ 303.897404][T15397] __dump_stack+0x1d/0x30 [ 303.897429][T15397] dump_stack_lvl+0x95/0xd0 [ 303.897452][T15397] dump_stack+0x15/0x1b [ 303.897470][T15397] should_fail_ex+0x262/0x280 [ 303.897562][T15397] should_fail+0xb/0x20 [ 303.897591][T15397] should_fail_usercopy+0x1a/0x20 [ 303.897702][T15397] _copy_from_iter+0xcc/0xe70 [ 303.897734][T15397] ? __alloc_skb+0x516/0x6f0 [ 303.897771][T15397] ? __alloc_skb+0x209/0x6f0 [ 303.897812][T15397] netlink_sendmsg+0x4a4/0x6f0 [ 303.897890][T15397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.897920][T15397] ____sys_sendmsg+0x532/0x580 [ 303.897943][T15397] ___sys_sendmsg+0x195/0x1e0 [ 303.898051][T15397] __x64_sys_sendmsg+0xd4/0x160 [ 303.898083][T15397] x64_sys_call+0x22ab/0x2550 [ 303.898176][T15397] do_syscall_64+0x112/0x360 [ 303.898212][T15397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.898258][T15397] RIP: 0033:0x7f9c8b58e0d9 [ 303.898306][T15397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.898324][T15397] RSP: 002b:00007f9c89fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.898346][T15397] RAX: ffffffffffffffda RBX: 00007f9c8b815fa0 RCX: 00007f9c8b58e0d9 [ 303.898363][T15397] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 303.898457][T15397] RBP: 00007f9c89fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.898471][T15397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.898483][T15397] R13: 00007f9c8b816038 R14: 00007f9c8b815fa0 R15: 00007ffdf220b9e8 [ 303.898501][T15397] [ 304.167379][T15401] loop5: detected capacity change from 0 to 512 [ 304.197855][T15401] EXT4-fs: Ignoring removed bh option [ 304.209146][T15401] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 304.224968][T15401] EXT4-fs (loop5): 1 truncate cleaned up [ 304.239366][T15401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.268206][T15406] syzkaller0: entered promiscuous mode [ 304.279041][T15406] syzkaller0: entered allmulticast mode [ 304.286885][T15406] tipc: Enabled bearer , priority 0 [ 304.287342][T13254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.295650][T15406] tipc: Resetting bearer [ 304.312533][T15405] tipc: Resetting bearer [ 304.330164][T15405] tipc: Disabling bearer [ 304.352454][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 304.352469][ T28] audit: type=1400 audit(1787369388.069:1786): avc: denied { unmount } for pid=13517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 304.389656][ T28] audit: type=1400 audit(1787369388.109:1787): avc: denied { listen } for pid=15409 comm="syz.5.3367" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.412396][T15410] loop5: detected capacity change from 0 to 128 [ 304.459311][T15410] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.471641][T15410] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.511961][ T28] audit: type=1400 audit(1787369388.229:1788): avc: denied { write } for pid=15409 comm="syz.5.3367" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.549790][ T28] audit: type=1400 audit(1787369388.229:1789): avc: denied { read } for pid=15409 comm="syz.5.3367" path="/114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 304.594697][ T28] audit: type=1400 audit(1787369388.229:1790): avc: denied { read write } for pid=15409 comm="syz.5.3367" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.618453][ T28] audit: type=1400 audit(1787369388.229:1791): avc: denied { open } for pid=15409 comm="syz.5.3367" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.643012][T15418] 9p: Bad value for 'rfdno' [ 304.677930][T13254] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.693393][ T28] audit: type=1400 audit(1787369388.409:1792): avc: denied { create } for pid=15421 comm="syz.4.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 304.722138][T15417] loop1: detected capacity change from 0 to 512 [ 304.756403][T15417] EXT4-fs (loop1): 1 orphan inode deleted [ 304.768876][T15417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.787177][ T7171] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.799769][ T7171] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 1 [ 304.806279][T15417] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.832597][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.896797][T15433] loop1: detected capacity change from 0 to 512 [ 304.905272][T15433] EXT4-fs: Ignoring removed bh option [ 304.917644][T15433] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 304.927393][T15433] EXT4-fs (loop1): 1 truncate cleaned up [ 304.933431][T15433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.955327][T15436] loop4: detected capacity change from 0 to 1024 [ 304.975954][T15436] EXT4-fs: Ignoring removed bh option [ 304.995286][T15441] ip_tables: iptables: counters copy to user failed while replacing table [ 305.050657][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.064928][T15436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 305.077149][T15436] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.094751][ T28] audit: type=1400 audit(1787369388.789:1793): avc: denied { listen } for pid=15421 comm="syz.4.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 305.129226][ T28] audit: type=1400 audit(1787369388.839:1794): avc: denied { write } for pid=15421 comm="syz.4.3372" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.173956][ T11] usb 2-1: device descriptor read/8, error -110 [ 305.283954][ T11] usb 2-1: new SuperSpeed USB device number 3 using vhci_hcd [ 305.295022][T15446] ip6t_srh: unknown srh invflags 4000 [ 305.304656][T15446] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 305.312725][T15446] SELinux: failed to load policy [ 305.318200][ T11] usb 2-1: enqueue for inactive port 0 [ 305.325089][ T11] usb 2-1: enqueue for inactive port 0 [ 305.330667][ T11] usb 2-1: enqueue for inactive port 0 [ 305.387867][T15449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3378'. [ 305.408582][T15446] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 305.503162][ T11] usb usb2-port1: attempt power cycle [ 305.546074][T14389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.561392][T15458] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 305.595189][T15458] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3382'. [ 305.855577][T15465] EXT4-fs (loop4): 1 orphan inode deleted [ 305.861834][T15465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.874426][ T9655] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:22: Failed to release dquot type 1 [ 305.886544][ T9655] loop4: lost filesystem error report for type 5 error -117 [ 305.886771][T15465] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.948282][T14389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.066031][T15478] 9p: Bad value for 'rfdno' [ 306.151059][T15486] syz.5.3393 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.173843][T15486] sctp: [Deprecated]: syz.5.3393 (pid 15486) Use of int in max_burst socket option deprecated. [ 306.173843][T15486] Use struct sctp_assoc_value instead [ 306.230836][T15494] FAULT_INJECTION: forcing a failure. [ 306.230836][T15494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.245844][T15494] CPU: 1 UID: 0 PID: 15494 Comm: syz.4.3396 Not tainted syzkaller #0 PREEMPT(lazy) [ 306.245875][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.245890][T15494] Call Trace: [ 306.245898][T15494] [ 306.245905][T15494] __dump_stack+0x1d/0x30 [ 306.245953][T15494] dump_stack_lvl+0x95/0xd0 [ 306.245972][T15494] dump_stack+0x15/0x1b [ 306.245990][T15494] should_fail_ex+0x262/0x280 [ 306.246026][T15494] should_fail_alloc_page+0xf2/0x100 [ 306.246078][T15494] __alloc_frozen_pages_noprof+0x157/0x400 [ 306.246143][T15494] alloc_pages_mpol+0xaf/0x1d0 [ 306.246177][T15494] alloc_pages_noprof+0x94/0x140 [ 306.246320][T15494] __pud_alloc+0x47/0x460 [ 306.246351][T15494] handle_mm_fault+0x2a85/0x3ae0 [ 306.246385][T15494] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 306.246454][T15494] do_user_addr_fault+0x404/0x1060 [ 306.246488][T15494] exc_page_fault+0x62/0xa0 [ 306.246516][T15494] asm_exc_page_fault+0x26/0x30 [ 306.246537][T15494] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 306.246640][T15494] Code: 23 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 306.246682][T15494] RSP: 0018:ffffc90001bfbcd0 EFLAGS: 00050202 [ 306.246697][T15494] RAX: ffff888101d33f00 RBX: 0000000000000110 RCX: 0000000000000110 [ 306.246710][T15494] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: ffff88811ce2c000 [ 306.246725][T15494] RBP: 0000000000000110 R08: 000000000000086b R09: 0000000000000000 [ 306.246738][T15494] R10: 000188811ce2c000 R11: 000188811ce2c10f R12: 0000000000000000 [ 306.246821][T15494] R13: 0000200000000c00 R14: ffff88811ce2c000 R15: 0000200000000c00 [ 306.246839][T15494] _copy_from_user+0x6f/0xb0 [ 306.246858][T15494] ip_set_mcast_msfilter+0x112/0x280 [ 306.246884][T15494] do_ip_setsockopt+0x1720/0x22f0 [ 306.246908][T15494] ip_setsockopt+0x58/0x110 [ 306.246968][T15494] udp_setsockopt+0x89/0xa0 [ 306.246986][T15494] sock_common_setsockopt+0x69/0x80 [ 306.247013][T15494] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 306.247111][T15494] __sys_setsockopt+0x184/0x200 [ 306.247132][T15494] __x64_sys_setsockopt+0x64/0x80 [ 306.247152][T15494] x64_sys_call+0x248f/0x2550 [ 306.247173][T15494] do_syscall_64+0x112/0x360 [ 306.247240][T15494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.247264][T15494] RIP: 0033:0x7f0fa446e0d9 [ 306.247281][T15494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.247299][T15494] RSP: 002b:00007f0fa2ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.247317][T15494] RAX: ffffffffffffffda RBX: 00007f0fa46f5fa0 RCX: 00007f0fa446e0d9 [ 306.247361][T15494] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 306.247419][T15494] RBP: 00007f0fa2ec7090 R08: 0000000000000110 R09: 0000000000000000 [ 306.247507][T15494] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000001 [ 306.247560][T15494] R13: 00007f0fa46f6038 R14: 00007f0fa46f5fa0 R15: 00007ffd8d8b8218 [ 306.247582][T15494] [ 306.589577][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3397'. [ 306.727258][T15510] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 306.732437][T15513] 9p: Bad value for 'rfdno' [ 306.747811][T15510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 306.755803][T15510] System zones: 1-12 [ 306.762881][T15510] EXT4-fs (loop1): 1 truncate cleaned up [ 306.775672][T15510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.835697][T15519] vxcan0: tx address claim with different name [ 306.919972][T13886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.988409][T15522] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3405'. [ 307.013622][ T3372] usb 12-1: device descriptor read/8, error -110 [ 307.091921][T15528] set_capacity_and_notify: 6 callbacks suppressed [ 307.091938][T15528] loop5: detected capacity change from 0 to 512 [ 307.105388][T15528] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 307.118134][T15528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 307.126057][T15528] System zones: 1-12 [ 307.130343][T15528] EXT4-fs (loop5): 1 truncate cleaned up [ 307.136394][T15528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.149208][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3407'. [ 307.201967][ T3372] usb 12-1: new SuperSpeed USB device number 3 using vhci_hcd [ 307.225209][T13254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.234294][ T3372] usb 12-1: enqueue for inactive port 0 [ 307.234360][T15534] loop1: detected capacity change from 0 to 512 [ 307.239964][ T3372] usb 12-1: enqueue for inactive port 0 [ 307.252278][ T3372] usb 12-1: enqueue for inactive port 0 [ 307.282281][T15536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3410'. [ 307.365275][ T3372] usb usb12-port1: attempt power cycle [ 307.393899][ T11] usb usb2-port1: unable to enumerate USB device [ 307.483474][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3415'. [ 307.761267][T15571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3422'. [ 307.795302][T15569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3421'. [ 307.816400][T15575] syzkaller0: entered promiscuous mode [ 307.822089][T15575] syzkaller0: entered allmulticast mode [ 307.831226][T15575] tipc: Enabled bearer , priority 0 [ 307.840121][T15575] tipc: Resetting bearer [ 307.847480][T15574] tipc: Resetting bearer [ 307.857443][T15574] tipc: Disabling bearer [ 308.040785][T15585] 9p: Bad value for 'rfdno' [ 308.248936][T15589] ip6erspan0: entered promiscuous mode [ 308.258585][T15589] ip6erspan0: entered allmulticast mode [ 308.286726][T15593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.298198][T15593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.307898][T15593] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 308.327019][T15593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.344134][T15593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.351338][T15593] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 308.363298][T15593] bond1: (slave gre1): Error -95 calling set_mac_address [ 308.395069][T15594] gretap1: entered promiscuous mode [ 308.402306][T15594] bond1: (slave gretap1): making interface the new active one [ 308.410243][T15594] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 308.427404][T15593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.435778][T15593] bond1: (slave bond2): Enslaving as an active interface with a down link [ 308.446414][T15594] bond1 (unregistering): (slave gretap1): Releasing active interface [ 308.456165][T15594] bond1 (unregistering): (slave bond2): Releasing active interface [ 308.472796][T15594] bond1 (unregistering): Released all slaves [ 308.572115][T15601] pimreg: tun_chr_ioctl cmd 1074812118 [ 308.591112][T15601] loop2: detected capacity change from 0 to 1024 [ 308.605171][T15601] journal_path: Non-blockdev passed as './file1' [ 308.619149][T15601] EXT4-fs: error: could not find journal device path [ 308.688973][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'. [ 308.717951][T15605] loop4: detected capacity change from 0 to 512 [ 308.735232][T15605] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.750771][T15605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 308.759451][T15605] System zones: 1-12 [ 308.773214][T15605] EXT4-fs (loop4): 1 truncate cleaned up [ 308.783238][T15605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.871978][T14389] ================================================================== [ 308.880087][T14389] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 308.887445][T14389] [ 308.889745][T14389] read-write to 0xffff888106efdb48 of 8 bytes by interrupt on cpu 1: [ 308.897799][T14389] __xa_clear_mark+0xf5/0x1e0 [ 308.902456][T14389] __folio_end_writeback+0xe7/0x530 [ 308.907660][T14389] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 308.913907][T14389] folio_end_writeback+0x1c/0x70 [ 308.918829][T14389] ext4_finish_bio+0x454/0x770 [ 308.923579][T14389] ext4_end_bio+0x281/0x3a0 [ 308.928091][T14389] bio_endio+0x390/0x570 [ 308.932312][T14389] blk_update_request+0x33a/0x710 [ 308.937324][T14389] blk_mq_end_request+0x26/0x50 [ 308.942161][T14389] lo_complete_rq+0x98/0x130 [ 308.946731][T14389] blk_done_softirq+0x77/0xb0 [ 308.951395][T14389] handle_softirqs+0xcc/0x2a0 [ 308.956064][T14389] run_ksoftirqd+0x1c/0x30 [ 308.960482][T14389] smpboot_thread_fn+0x32f/0x520 [ 308.965398][T14389] kthread+0x223/0x270 [ 308.969463][T14389] ret_from_fork+0x146/0x330 [ 308.974037][T14389] ret_from_fork_asm+0x1a/0x30 [ 308.978789][T14389] [ 308.981096][T14389] read to 0xffff888106efdb48 of 8 bytes by task 14389 on cpu 0: [ 308.988717][T14389] xas_find_marked+0x211/0x650 [ 308.993474][T14389] filemap_get_folios_tag+0xf7/0x400 [ 308.998743][T14389] filemap_fdatawait_keep_errors+0x6c/0x190 [ 309.004624][T14389] sync_inodes_sb+0x424/0x4d0 [ 309.009300][T14389] sync_filesystem+0x108/0x190 [ 309.014050][T14389] generic_shutdown_super+0x4c/0x220 [ 309.019313][T14389] kill_block_super+0x2d/0xb0 [ 309.023970][T14389] ext4_kill_sb+0x42/0x80 [ 309.028280][T14389] deactivate_locked_super+0x75/0x200 [ 309.033655][T14389] deactivate_super+0x9a/0xb0 [ 309.038312][T14389] cleanup_mnt+0x2c3/0x340 [ 309.042707][T14389] __cleanup_mnt+0x19/0x20 [ 309.047099][T14389] task_work_run+0x130/0x1a0 [ 309.051669][T14389] exit_to_user_mode_loop+0x1e4/0x8c0 [ 309.057024][T14389] do_syscall_64+0x212/0x360 [ 309.061612][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.067501][T14389] [ 309.069805][T14389] value changed: 0x0000007ff000ff00 -> 0x0000007f0000ff00 [ 309.076887][T14389] [ 309.079190][T14389] Reported by Kernel Concurrency Sanitizer on: [ 309.085322][T14389] CPU: 0 UID: 0 PID: 14389 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 309.094858][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.104893][T14389] ================================================================== [ 309.115868][T14389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.313961][ T3372] usb usb12-port1: unable to enumerate USB device