last executing test programs: 7m3.023639944s ago: executing program 3 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0xc8}}, 0x0) socket$inet(0x2, 0xa, 0x400) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0xae582, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0xb) socket$inet6(0xa, 0x805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = getpid() r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000200), 0x0) 7m2.677640085s ago: executing program 3 (id=130): r0 = socket(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@mblk_io_submit}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000440)=ANY=[@ANYBLOB="24bdd86e8a49997be29b6ac82fafa538000001", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r6, @ANYBLOB="1c002d80050004000100000008000300040000000800020003000000"], 0x38}}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x7c, r11, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x31, 0x4, 0xf691}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0xc5e3d0502424878b, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000000) shmdt(0x0) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=@gettaction={0xd0, 0x32, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) sendfile(r14, r14, 0x0, 0xb) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x28, 0x14, 0x0, 0x0) 7m1.183798899s ago: executing program 3 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000680)=[{0x6, 0x8, 0xb, 0x40}]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3e0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x0, 0x5180, 0x5, 0x3ff, 0xb, "6c4b4b0986fbfe53e923b45c545ac95ca5085c"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)=ANY=[@ANYBLOB="00fb9f01001130315fce7f50ab7ea925a764d20111750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe17d5f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc9017861"], 0x9f, 0x3) ptrace$peekuser(0x3, r0, 0x1000000000000) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4a018400}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x28000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e50002800000000000e500fcff00000000850000e0ad00e8af9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 7m0.283805195s ago: executing program 3 (id=140): semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x4, 0x1000}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x448c0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@block_validity}]}, 0x1, 0x5d4, &(0x7f00000015c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r5, &(0x7f0000000140), 0x0, 0xe7c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @local}, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000a800000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x8000000, 0x1, 0x1, 0x2, 0x0, 0x97}, 0x20) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC=r6], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) 6m59.763558271s ago: executing program 3 (id=147): unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 6m57.615786384s ago: executing program 3 (id=160): semget$private(0x0, 0x0, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prctl$PR_GET_FP_MODE(0x2e) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 6m56.954608384s ago: executing program 32 (id=160): semget$private(0x0, 0x0, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prctl$PR_GET_FP_MODE(0x2e) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 4m48.340054576s ago: executing program 5 (id=820): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@private1, 0x1fffd}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf25060000002800018014000200da977468315f746f5f68737200000000080003000200000008000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x40) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000980)={0x0, 0x1, 0x8001, 0x2, 0x3, 0x101}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000d40)=@assoc_id=r6, &(0x7f0000000d80)=0x4) stat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000ec0)) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000780)='./bus/file0\x00', &(0x7f00000007c0)='gfs2meta\x00', 0x1000400, &(0x7f0000000940)='CONNMARK\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="3c000000f6577e2d57e92383db8345f7a7804641f5437dc94923c8b38aae10f18ef483b0af71a4ec5c464c305d30e606c3ab6bac", @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000500050000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 4m47.84632681s ago: executing program 5 (id=823): open(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)="de3d4041c162665d8c5e2864d21781c49918bc33189cef4a90db0c8e465837c4fa4f9dc7a27fd037bf6576e19a3a", 0x2e}], 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004011}, 0x48050) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000340), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x362, @time={0xbec, 0x9}, 0x3, {0x0, 0xfc}}) ioctl$TCXONC(r2, 0x540a, 0x81418965af9db932) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010027bd700402d4df2500000000", @ANYRES32=r10, @ANYBLOB="984e0600c16a010024001280110001006272696467e52df31e617665000000000cebd936e1f800058005001c0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x2002, &(0x7f0000000100)=0x9, 0x6fb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 4m46.16106917s ago: executing program 5 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x800}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) r4 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000180)={{0x33, @loopback, 0x4e24, 0x1, 'fo\x00', 0x22, 0x4, 0x68}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e22, 0x10000, 0x328a, 0x539c, 0xffff}}, 0x44) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) close_range(r9, 0xffffffffffffffff, 0x0) recvmmsg(r8, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x10100, 0x0) 4m44.208785238s ago: executing program 5 (id=859): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0xc4}, 0x1, 0x1000000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x375, 0x3) fdatasync(r2) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2) 4m43.571817537s ago: executing program 5 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1", 0x13}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 4m41.347501583s ago: executing program 5 (id=869): mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e000000180100002020753100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) (fail_nth: 2) 4m41.291774714s ago: executing program 33 (id=869): mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e000000180100002020753100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) (fail_nth: 2) 10.169790759s ago: executing program 1 (id=2855): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x3]}, &(0x7f0000000240)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x40040) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40"], 0xf4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x9, 0x2, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="00171a7e892b5ad8425a1b000000", @ANYRES16=r7, @ANYBLOB="372d29bd7000fedbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c0001800800010003000000"], 0x40}}, 0x4) 9.387163031s ago: executing program 1 (id=2855): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x3]}, &(0x7f0000000240)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x40040) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40"], 0xf4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x9, 0x2, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="00171a7e892b5ad8425a1b000000", @ANYRES16=r7, @ANYBLOB="372d29bd7000fedbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c0001800800010003000000"], 0x40}}, 0x4) 8.524049757s ago: executing program 2 (id=2887): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x20000040) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x20040080, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000001c0)={0x6, 0x7, 0x601, 0xffff, 0x1b, '\x00\b\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x39c}, 0x1, 0x0, 0x0, 0x8000}, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000200)={@any, 0xffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x9) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) connect$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x4}}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x5, 0x57c}, 0x302cc, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4000400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES64=r6, @ANYBLOB, @ANYRESOCT=r1], 0x84}, 0x1, 0x0, 0x0, 0x20040400}, 0x20008040) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_perm_addr={0x28}}) 8.407627701s ago: executing program 2 (id=2889): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r3, &(0x7f00000000c0)=""/39, 0x27) socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x68}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x47f5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x5452, &(0x7f0000001300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 8.07878225s ago: executing program 2 (id=2892): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) syz_clone(0x2a004000, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 7.467957319s ago: executing program 1 (id=2855): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x3]}, &(0x7f0000000240)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x40040) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40"], 0xf4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x9, 0x2, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="00171a7e892b5ad8425a1b000000", @ANYRES16=r7, @ANYBLOB="372d29bd7000fedbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c0001800800010003000000"], 0x40}}, 0x4) 5.844118827s ago: executing program 1 (id=2855): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x3]}, &(0x7f0000000240)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x40040) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40"], 0xf4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x9, 0x2, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="00171a7e892b5ad8425a1b000000", @ANYRES16=r7, @ANYBLOB="372d29bd7000fedbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c0001800800010003000000"], 0x40}}, 0x4) 5.156122517s ago: executing program 2 (id=2895): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) 4.929635663s ago: executing program 1 (id=2855): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x3]}, &(0x7f0000000240)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x40040) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40"], 0xf4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x9, 0x2, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="00171a7e892b5ad8425a1b000000", @ANYRES16=r7, @ANYBLOB="372d29bd7000fedbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c0001800800010003000000"], 0x40}}, 0x4) 3.221625334s ago: executing program 2 (id=2897): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800"], 0xa4}}, 0x40810) getpgid(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) 3.207758844s ago: executing program 4 (id=2900): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0xfffffcb4, &(0x7f0000002680)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f0000001540)=""/36, 0x24}, {&(0x7f00000014c0)=""/79, 0x4f}, {&(0x7f00000025c0)=""/80, 0x50}, {&(0x7f0000002640)=""/54, 0x36}], 0x6}, 0x40000300) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x8000) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0x81, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6}) 3.02383649s ago: executing program 0 (id=2901): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14112, &(0x7f0000000040)=ANY=[], 0xfb, 0x1209, &(0x7f0000002480)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000001c0)={@any, 0x40}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, 0xffffffffffffffff, 0x0) 3.02234802s ago: executing program 6 (id=2902): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x33e000, 0x1000}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x6, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003640)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) brk(0x81) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x3}, 0x8) ppoll(&(0x7f0000000080)=[{r1, 0x1}, {r4, 0x70b}], 0x2, &(0x7f0000000200), &(0x7f0000000240), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)={0xc5, 0x29, 0x2, {0x8, [{{0x40, 0x1, 0x4}, 0x7fa, 0x8, 0x7, './file0'}, {{0x40, 0x0, 0x8}, 0x3, 0x8, 0x7, './file0'}, {{0x80, 0x1, 0x3}, 0x1b, 0x60, 0x7, './file0'}, {{0x4, 0x0, 0x4}, 0x9, 0x3, 0x7, './file0'}, {{0x56, 0x2, 0x8}, 0x2, 0x2, 0x7, './file0'}, {{0x2, 0x3, 0x8}, 0x7, 0x5, 0x7, './file0'}]}}, 0xc5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) 2.970527101s ago: executing program 4 (id=2903): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) syz_clone(0x2a004000, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 2.739624608s ago: executing program 0 (id=2904): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x200000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[], 0xa, 0x2e6, &(0x7f0000000780)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioperm(0x3, 0x5, 0x7) gettid() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioperm(0x5, 0x5, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x10}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2.511613705s ago: executing program 6 (id=2905): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000005c0), &(0x7f0000000600)={'L+', 0x14f}, 0x16, 0x5) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.154149726s ago: executing program 6 (id=2906): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r3, &(0x7f00000000c0)=""/39, 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x68}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x47f5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x5452, &(0x7f0000001300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 1.887842933s ago: executing program 0 (id=2907): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x33e000, 0x1000}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x6, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003640)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) brk(0x81) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x3}, 0x8) ppoll(&(0x7f0000000080)=[{r1, 0x1}, {r4, 0x70b}], 0x2, &(0x7f0000000200), &(0x7f0000000240), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)={0xc5, 0x29, 0x2, {0x8, [{{0x40, 0x1, 0x4}, 0x7fa, 0x8, 0x7, './file0'}, {{0x40, 0x0, 0x8}, 0x3, 0x8, 0x7, './file0'}, {{0x80, 0x1, 0x3}, 0x1b, 0x60, 0x7, './file0'}, {{0x4, 0x0, 0x4}, 0x9, 0x3, 0x7, './file0'}, {{0x56, 0x2, 0x8}, 0x2, 0x2, 0x7, './file0'}, {{0x2, 0x3, 0x8}, 0x7, 0x5, 0x7, './file0'}]}}, 0xc5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) 1.31177516s ago: executing program 0 (id=2908): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) pipe2$9p(0x0, 0x800) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x83, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x6, 0x1000, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x1000000000000099) epoll_create1(0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001814010000000000000000000800010001000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000090) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885fec2e72c56542d8a7a3c63e598a354755c27793f2bc59c65980a0ddaf01b51253cf82ae7a3db51d1b962ffbd9cfd36b0036b550f6b441727d3030fe5b798f065f694619e1fb1d2da023cb6e46edfeb4255bc72922ce24f86bcfe2c8b4d5496060de", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "05bef2a0ba57e8c1", "6dae7fd38fb2a187322e750f0c24a985", "9b99a3c8", "d3b30d165d678510"}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x4e24, @empty}}, 0xe, 0x38f}, &(0x7f0000000340)=0x90) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ee, &(0x7f0000000000)) 1.204141974s ago: executing program 0 (id=2909): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101402, 0x15) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0x70bd2b, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x23) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10000, 0x115) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[], 0xf6, 0xa19, &(0x7f0000000d00)="$eJzs3c1vHGdcB/DvbOzEcas0bUMJUdtsUqV1W+PYDk0U9UATe524+AXZjtQIUFM1CYpiUdSC1FYcUglxoqJCCAm4oB45VSoHekG5wZETByTof4AqLoQDLNrZdbKO9yV2N3YIn89qMm+/521ndp7senee8H9ZvV4vpx2uX/mb3awsT56Lsz9++93XjemrO9mffXmn+LtkJEk1Gfrv8lwZnpldWV7sk9Ht5FqSu0mR5ECa8y4Oblq7luJP8uyD9bsp/ipHOyQb2Wbj6KvO/2t7ff4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATaWZ2cnKqyML80pUPqt2VQ4D32L+R3Q/lqN/FD/2KLZKiMWVkZGOo76NHHux+qfHPybzcXHu5OfL3SL585qXD7744VNlI36NCu+KzL768/dH6+o1PH2wa7hg41GpXY/nArlXv0e3fWbJLtaX51eX5xQuXatX51eXq+bNnJ09fnlutzs2ntnp1da22WJ1ZqV1YW16pjs28WZ06f/5MtTZxdfnK0qXZiYXaxsZzvzw9OXm2+v7Er9curKwuL51+f2J15vL8wsL80qUyprG7EXOucSL+2vxada12YbFavXlr/caZfpVsBE113FNsDprul9P05PT01NT09NTZd86/c25ycmjLhsmHZEvE3p+07J2/Hei1G36mSqv/z0Lms5Qr+SDVjo+ZzGYly1nssr9lo/8/dbrWs9z2/n+jlz/6YPexlP3/q821V7v1/13q0v9Rrzdz3mn6jcdn+SJf5nY+ynrWcyOf/uwctzz+a0D5VH9+a7c+LqWWpcxnNcuZz2IulFuqrS3VnM/ZnM1kPszlzGU11cxlPgupZTVXs5q11MozaiYrqeVC1rKclVQzlpm8mWqmcj7ncybV1DKRq1nOlSzlUmZzoczlZm6Vz/uZHnW8HzT1KEHTPYIG3P/Xn8T/CfK4DfwaDjtVb/X/+7sG1DeWxmZ2rVYAAADAIP3SP+bQkRf+4V+T4bxSfi4/N79Qm9zragEAAAADVH5d7+XGbLix9EoK7/8BAADgaVOUv7ErkozmeHOp+UuoffEhAAAAADwlyr//v9qYjTaWjqe4fyeUa3tdNwAAAGAw+t9jv29EMb5x+9/q9eb8eiuidZ/f0bn5hdrEzPLCu1N5vbzLQPlLgy257UuK4fLnB2/lRDPqxGhzPro5x5FG1NTEu1N5KydbDRl7rTF7baxD5HQz8o1m5Bs9Is80IgHgaXeyR3/8qP3/WxlvRowfG9qfZOhYh551Us8KAE+K/mPs9I0ofuXB+//hVrab+v8XcvM/m18pmMjH+STruZ7x8tcG5TcONuX6m9+0PjO4/zWEyYz3+TRgI/afzlUy3ufzgNG2gV7G+3wi0IzNbyVnHv+BAIBddLJLP7yd/n+87f1/tr7/vz+00A0/KQSAJ8L9EewHuvDcppz3uo0AwGZ6aQAAAAAAAAAAAAAAAAAAAAAAAAAAABi8gd72f2SHyf+tNa7foIch6LNwsPUc7DyfP02ye3UuBlxWZQD51JPs1vHavYUcTnb8rHY8jfcn2ft29V0Yar0kbn+0vldXJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHZTkezrtL2SHEgymeT07tfq8bmz1xXYfb/avlLcy718nkN7Vx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdT6/7/lTTnzzQ3ZaiSnEpyLclv7HUdB+neXldgQA7uMF3b/f8bxzz1IkPNw55ieGZ2ZXmxcfjLsR8qP3773deNqS35gUctpwysPDS4RKuEh2P/+tmNpefLVKOzNz67/Xuf/G519mIq2Z+La3MLs4uXVt57kOSl4vukmua0YaO+f3Dq77/p0PLvGy3t7OFy58onZ3Zrub/YKXXvcnu5tX5julHSWu2Dtd//nVuft+16ISeS18aSsc0l/XZj6lLSiQz3Kq34qfij4lD+PNfK4994Nop60ThEz5XtP3jz1vqNiY8/Wb/epU6HczzJ9WSkd52+att9vLyedFSedZXhRqmTZVDjnyN92thTW45TXdrwfHnKjLbasL9rG9pVO7Thf+r1+sZy2/Ne6VStZo3OdKnRi3m9w5GuH0i61+j13ke6s+Kn4l+Ky/nn/GHb+B+VxvE/le6vzs1ZlJFtZ0rXyEozsmz5dPuODx+O/Pe/eKTadxymhu36400v3krb9b91rAZ0PaoXPa9HbSVu73XRVmJl61nR43VR9khHHkrRuvp0S9Oq55FmVJd6/kLeToaO9boqbumt3+5+Vdyc/r3Ou3f6+v/LYiz/kTvG/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ58RbKv0/ZKcirJ4Y31alLfRrYHuu2ojBbbreJA3bn/z1Ohst0Exb3cy+c59HiqAwAAAAAAAMBuuzj747fffd2YioOtTa2/71eToSSHiz87mNmV5cU+GQ0n15LcbSyPdNjf48/9jXR59sH63cba0e22BAB4VP8bAAD//2vcY1k=") execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x20000d}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_open_pts(r1, 0x80) r4 = dup3(r3, r1, 0x80000) read(r4, &(0x7f0000000100)=""/213, 0xd5) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x290, 0x5802, 0x294, 0x0, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x228, 0x290, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x20}}}, @common=@unspec=@realm={{0x30}, {0xb, 0x8000, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfffffffd, 0xffff, 0x2000, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 733.479358ms ago: executing program 4 (id=2910): unshare(0x24020400) r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) fcntl$lock(r0, 0x410, 0x0) (fail_nth: 1) 699.623859ms ago: executing program 6 (id=2911): setresgid(0xee00, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket(0x11, 0x800000003, 0x0) r2 = gettid() capget(&(0x7f00000008c0)={0x19980330, r2}, &(0x7f0000000900)={0x5, 0x6, 0x4, 0x0, 0x800, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x85, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x7, 0x7, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x300}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x7a00}, 0x0) r7 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32], 0xfb, 0x2b1, &(0x7f0000000100)="$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") r8 = getpgrp(r2) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r9) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c72713d30783030303030303030303030303030301b2c72713d3078666666666666666666666666666666612c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB=',seclabel,smackfshat=\x00,defcontext=root,\x00']) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000000)=[r11]) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000940)={r8, r9, r11}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0xee00, 0xffffffffffffffff}}, './file4\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, r12}}, './file4\x00'}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 331.966499ms ago: executing program 4 (id=2912): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x122, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) 163.075194ms ago: executing program 6 (id=2913): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0xfffffcb4, &(0x7f0000002680)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f0000001540)=""/36, 0x24}, {&(0x7f00000014c0)=""/79, 0x4f}, {&(0x7f00000025c0)=""/80, 0x50}, {&(0x7f0000002640)=""/54, 0x36}], 0x6}, 0x40000300) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x8000) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0x81, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6}) 159.201264ms ago: executing program 2 (id=2897): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800"], 0xa4}}, 0x40810) getpgid(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) 64.297247ms ago: executing program 0 (id=2914): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14112, &(0x7f0000000040)=ANY=[], 0xfb, 0x1209, &(0x7f0000002480)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000001c0)={@any, 0x40}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, 0xffffffffffffffff, 0x0) 63.431887ms ago: executing program 6 (id=2915): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x33e000, 0x1000}, 0x20) r1 = openat(0xffffffffffffff9c, 0x0, 0x400000, 0x80) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x6, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003640)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r3 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) brk(0x81) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x3}, 0x8) ppoll(&(0x7f0000000080)=[{r2, 0x1}, {r5, 0x70b}], 0x2, &(0x7f0000000200), &(0x7f0000000240), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) write$P9_RREADDIR(r1, &(0x7f0000000100)={0xc5, 0x29, 0x2, {0x8, [{{0x40, 0x1, 0x4}, 0x7fa, 0x8, 0x7, './file0'}, {{0x40, 0x0, 0x8}, 0x3, 0x8, 0x7, './file0'}, {{0x80, 0x1, 0x3}, 0x1b, 0x60, 0x7, './file0'}, {{0x4, 0x0, 0x4}, 0x9, 0x3, 0x7, './file0'}, {{0x56, 0x2, 0x8}, 0x2, 0x2, 0x7, './file0'}, {{0x2, 0x3, 0x8}, 0x7, 0x5, 0x7, './file0'}]}}, 0xc5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) 63.029158ms ago: executing program 4 (id=2916): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000005c0), &(0x7f0000000600)={'L+', 0x14f}, 0x16, 0x5) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14.659329ms ago: executing program 4 (id=2917): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_mount_image$msdos(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='nodots,errors=continue,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYBLOB="8ecedd8cf39c24718ebf010323e52b879e3a17352e4d52d8528ad2d48da67fc022803a82eda55c7cd74db17e28e49a570684bd65002387768b679cdf0a8ba4d18d6de5325289ca4c48fd83978cc993883604f61107ee2961c9b459e66d6be8056323b1b5e098aece5ac5cd70343eb94665951d7ca30c5cf399d27353bed3af05cec797c4347942191ff76743c02146b2bf39c5a6ce9e578bd19245d781e44fee9cc108c69e133d61d20df228f590f928be8e650a7663b10000000000000000004c81f408eaa781c519170101fe7a11e6662023ff936cabaa33fa8a3df5dae44380c65b5ab4b3a17f1332103f0e705c55ec5df7ba3d44700c609e18163555d0eaa03931079227c88da97ad430014247437f37873c34426a05f33349da7c86e190e4baf8f69cd026842677cd08630fe63111520c841041fda3dbc4a7000000000000", @ANYRESDEC], 0x0, 0x267, &(0x7f0000000980)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) 0s ago: executing program 1 (id=2855): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x3]}, &(0x7f0000000240)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7, 0x1000, 0x0, 0x4, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x40040) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40"], 0xf4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x9, 0x2, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="00171a7e892b5ad8425a1b000000", @ANYRES16=r7, @ANYBLOB="372d29bd7000fedbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c0001800800010003000000"], 0x40}}, 0x4) kernel console output (not intermixed with test programs): lid length. [ 404.987926][T10523] netlink: 'syz.2.1980': attribute type 3 has an invalid length. [ 405.018026][T10523] netlink: 'syz.2.1980': attribute type 10 has an invalid length. [ 405.056093][T10523] bond0: (slave dummy0): Releasing backup interface [ 405.066004][T10523] dummy0: left promiscuous mode [ 405.071900][T10526] netlink: 'syz.2.1980': attribute type 10 has an invalid length. [ 405.084877][T10523] team0: Port device dummy0 added [ 405.095395][T10526] team0: Port device dummy0 removed [ 405.107264][T10526] dummy0: entered promiscuous mode [ 405.119980][T10526] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 405.179507][T10530] netlink: 'syz.2.1982': attribute type 10 has an invalid length. [ 405.200511][T10530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.209209][T10530] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 405.252635][T10530] team0: Failed to send options change via netlink (err -105) [ 405.285733][T10530] team0: Port device netdevsim2 added [ 405.320398][T10534] loop6: detected capacity change from 0 to 4096 [ 405.329731][T10538] netlink: 'syz.4.1985': attribute type 5 has an invalid length. [ 405.338394][T10534] ext3: Unknown parameter 'noacl' [ 405.667688][T10554] Failed to initialize the IGMP autojoin socket (err -2) [ 405.980028][ T29] audit: type=1400 audit(1780918364.145:2352): avc: denied { setopt } for pid=10547 comm="syz.1.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 406.405402][ T29] audit: type=1400 audit(1780918364.335:2353): avc: denied { setopt } for pid=10564 comm="syz.2.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 406.600144][ T29] audit: type=1400 audit(1780918364.555:2354): avc: denied { create } for pid=10564 comm="syz.2.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 406.789359][T10582] netem: change failed [ 406.825548][T10585] tmpfs: Too small a size for current use [ 406.904645][T10588] __nla_validate_parse: 3 callbacks suppressed [ 406.904662][T10588] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1998'. [ 407.069969][T10588] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 407.176237][T10594] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2000'. [ 407.373166][ T29] audit: type=1107 audit(1780918365.535:2355): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 407.392683][T10594] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2000'. [ 407.889565][T10604] netlink: 'syz.6.2003': attribute type 7 has an invalid length. [ 408.549802][T10604] loop6: detected capacity change from 0 to 512 [ 408.598311][T10617] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2008'. [ 408.661873][T10617] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 408.688224][T10619] netem: change failed [ 408.702792][T10604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.731168][T10604] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.752113][ T29] audit: type=1400 audit(1780918366.895:2356): avc: denied { write } for pid=10600 comm="syz.6.2003" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.774245][ T29] audit: type=1400 audit(1780918366.895:2357): avc: denied { write } for pid=10600 comm="syz.6.2003" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.803064][T10611] netlink: 'syz.6.2003': attribute type 1 has an invalid length. [ 408.930998][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.455298][T10637] netlink: 'syz.2.2014': attribute type 10 has an invalid length. [ 409.495793][T10639] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2015'. [ 409.544657][T10643] loop6: detected capacity change from 0 to 512 [ 409.589526][T10645] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2017'. [ 409.596962][T10639] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 409.607079][T10645] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2017'. [ 409.627857][T10643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.662752][T10643] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.699749][ T29] audit: type=1107 audit(1780918367.825:2358): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 410.023609][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.194218][T10664] tmpfs: Too small a size for current use [ 411.934596][T10685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2030'. [ 411.947231][ T29] audit: type=1400 audit(1780918370.095:2359): avc: denied { bind } for pid=10684 comm="syz.2.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.052227][T10693] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2034'. [ 412.069519][T10693] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 412.088246][T10695] netlink: 1472 bytes leftover after parsing attributes in process `syz.4.2033'. [ 412.142746][T10695] netlink: 1472 bytes leftover after parsing attributes in process `syz.4.2033'. [ 412.168455][ T29] audit: type=1107 audit(1780918370.285:2360): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 412.193047][T10697] tmpfs: Too small a size for current use [ 412.288132][T10704] netem: change failed [ 412.292217][T10702] FAULT_INJECTION: forcing a failure. [ 412.292217][T10702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.373968][T10702] CPU: 1 UID: 0 PID: 10702 Comm: syz.0.2036 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 412.374010][T10702] Tainted: [W]=WARN [ 412.374019][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.374115][T10702] Call Trace: [ 412.374125][T10702] [ 412.374136][T10702] __dump_stack+0x1d/0x30 [ 412.374168][T10702] dump_stack_lvl+0x95/0xd0 [ 412.374195][T10702] dump_stack+0x15/0x1b [ 412.374221][T10702] should_fail_ex+0x263/0x280 [ 412.374255][T10702] should_fail+0xb/0x20 [ 412.374355][T10702] should_fail_usercopy+0x1a/0x20 [ 412.374385][T10702] _copy_from_user+0x1c/0xb0 [ 412.374417][T10702] do_handle_open+0x40b/0x7b0 [ 412.374531][T10702] __x64_sys_open_by_handle_at+0x44/0x50 [ 412.374594][T10702] x64_sys_call+0x153d/0x3020 [ 412.374661][T10702] do_syscall_64+0x12c/0x3b0 [ 412.374696][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.374721][T10702] RIP: 0033:0x7f116fcace59 [ 412.374742][T10702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.374856][T10702] RSP: 002b:00007f116e6ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 412.374885][T10702] RAX: ffffffffffffffda RBX: 00007f116ff25fa0 RCX: 00007f116fcace59 [ 412.374903][T10702] RDX: 0000000000000000 RSI: 0000200000002580 RDI: 0000000000000004 [ 412.374920][T10702] RBP: 00007f116e6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 412.374936][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.375018][T10702] R13: 00007f116ff26038 R14: 00007f116ff25fa0 R15: 00007ffdf6ade4a8 [ 412.375046][T10702] [ 412.573214][T10706] loop6: detected capacity change from 0 to 128 [ 412.671635][T10709] Failed to initialize the IGMP autojoin socket (err -2) [ 412.744709][T10706] bio_check_eod: 110 callbacks suppressed [ 412.744732][T10706] syz.6.2038: attempt to access beyond end of device [ 412.744732][T10706] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 412.790178][T10706] syz.6.2038: attempt to access beyond end of device [ 412.790178][T10706] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 412.829129][T10706] syz.6.2038: attempt to access beyond end of device [ 412.829129][T10706] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 412.863912][T10706] syz.6.2038: attempt to access beyond end of device [ 412.863912][T10706] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 412.908479][T10706] syz.6.2038: attempt to access beyond end of device [ 412.908479][T10706] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 412.997958][T10706] syz.6.2038: attempt to access beyond end of device [ 412.997958][T10706] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 413.119944][T10706] syz.6.2038: attempt to access beyond end of device [ 413.119944][T10706] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 413.143639][T10709] netlink: 'syz.2.2039': attribute type 10 has an invalid length. [ 413.170187][T10706] syz.6.2038: attempt to access beyond end of device [ 413.170187][T10706] loop6: rw=2049, sector=257, nr_sectors = 16 limit=128 [ 413.170283][T10706] syz.6.2038: attempt to access beyond end of device [ 413.170283][T10706] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 413.170327][T10706] syz.6.2038: attempt to access beyond end of device [ 413.170327][T10706] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 413.556391][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2046'. [ 413.565909][T10738] loop6: detected capacity change from 0 to 512 [ 413.694576][T10744] netlink: 'syz.4.2049': attribute type 27 has an invalid length. [ 413.703231][T10744] netlink: 'syz.4.2049': attribute type 3 has an invalid length. [ 413.726106][T10736] tmpfs: Too small a size for current use [ 413.744156][T10744] netlink: 'syz.4.2049': attribute type 10 has an invalid length. [ 413.769554][T10738] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2048: bg 0: block 104: invalid block bitmap [ 413.782857][T10738] loop6: lost filesystem error report for type 5 error -117 [ 413.785120][T10738] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 413.795694][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 413.795901][ C1] EXT4-fs (loop6): initial error at time 1780918371: ext4_validate_block_bitmap:432 [ 413.796053][ C1] EXT4-fs (loop6): last error at time 1780918371: ext4_validate_block_bitmap:432 [ 413.801329][T10747] netlink: 'syz.4.2049': attribute type 10 has an invalid length. [ 413.811022][T10738] loop6: lost filesystem error report for type 5 error -117 [ 413.847731][T10738] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2048: invalid indirect mapped block 1 (level 1) [ 413.871609][T10738] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 413.887165][T10744] bond0: (slave dummy0): Releasing backup interface [ 413.891242][T10738] EXT4-fs (loop6): 1 truncate cleaned up [ 413.910686][T10738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.932667][T10744] team0: Port device dummy0 added [ 414.012969][T10752] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2051'. [ 414.022484][T10752] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 414.048756][T10747] team0: Port device dummy0 removed [ 414.078307][T10747] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 414.250517][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.400855][T10769] loop6: detected capacity change from 0 to 512 [ 414.454889][T10769] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 414.513559][T10769] EXT4-fs (loop6): orphan cleanup on readonly fs [ 414.520707][T10769] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2056: Block bitmap for bg 0 marked uninitialized [ 414.534607][T10769] loop6: lost filesystem error report for type 5 error -117 [ 414.575806][T10769] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 414.593772][T10769] loop6: lost filesystem error report for type 5 error -117 [ 414.594690][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 414.610387][ C0] EXT4-fs (loop6): initial error at time 1780918372: ext4_read_block_bitmap_nowait:517 [ 414.621022][ C0] EXT4-fs (loop6): last error at time 1780918372: ext4_mb_clear_bb:6679 [ 414.635291][T10769] EXT4-fs (loop6): 1 orphan inode deleted [ 414.653260][T10769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 414.904444][ T29] audit: type=1400 audit(1780918373.035:2361): avc: denied { mount } for pid=10791 comm="syz.4.2068" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 415.047186][T10797] Failed to initialize the IGMP autojoin socket (err -2) [ 415.079319][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.109195][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 415.124261][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 415.171476][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.174462][T10809] loop6: detected capacity change from 0 to 1024 [ 415.220216][T10809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.239949][T10809] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.264672][T10806] bridge_slave_0 (unregistering): left allmulticast mode [ 415.314160][T10797] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 415.367781][T10806] bridge_slave_0 (unregistering): left promiscuous mode [ 415.376936][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.600115][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 415.709834][T10822] loop6: detected capacity change from 0 to 1024 [ 415.813136][T10822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.826669][T10822] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.866748][T10828] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2080'. [ 415.877716][T10828] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 415.895208][ T29] audit: type=1400 audit(1780918374.055:2362): avc: denied { write } for pid=10821 comm="syz.6.2078" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.895724][T10829] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2078: bg 0: block 112: padding at end of block bitmap is not set [ 416.065087][T10844] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2078: lblock 0 mapped to illegal pblock 0 (length 1) [ 416.101456][T10844] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2078: lblock 0 mapped to illegal pblock 0 (length 1) [ 416.118497][T10844] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.2078: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 416.232771][T10853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5131 sclass=netlink_tcpdiag_socket pid=10853 comm=syz.2.2087 [ 416.305433][T10854] Failed to initialize the IGMP autojoin socket (err -2) [ 416.497328][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 416.505370][T10870] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 416.553727][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 416.624553][T10880] netlink: 'syz.1.2094': attribute type 27 has an invalid length. [ 416.632810][T10880] netlink: 'syz.1.2094': attribute type 3 has an invalid length. [ 416.642759][T10880] netlink: 'syz.1.2094': attribute type 10 has an invalid length. [ 416.666770][T10880] team0: Port device dummy0 added [ 416.685960][T10880] netlink: 'syz.1.2094': attribute type 10 has an invalid length. [ 416.700544][T10880] team0: Port device dummy0 removed [ 416.709257][T10880] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 416.810059][T10888] FAULT_INJECTION: forcing a failure. [ 416.810059][T10888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.823649][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.6.2098 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 416.823692][T10888] Tainted: [W]=WARN [ 416.823701][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.823718][T10888] Call Trace: [ 416.823727][T10888] [ 416.823738][T10888] __dump_stack+0x1d/0x30 [ 416.823808][T10888] dump_stack_lvl+0x95/0xd0 [ 416.823835][T10888] dump_stack+0x15/0x1b [ 416.823859][T10888] should_fail_ex+0x263/0x280 [ 416.823887][T10888] should_fail+0xb/0x20 [ 416.823909][T10888] should_fail_usercopy+0x1a/0x20 [ 416.823965][T10888] _copy_to_user+0x20/0xa0 [ 416.823998][T10888] simple_read_from_buffer+0xb5/0x130 [ 416.824104][T10888] proc_fail_nth_read+0x10e/0x150 [ 416.824159][T10888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.824226][T10888] vfs_read+0x1ab/0x7f0 [ 416.824260][T10888] ? __rcu_read_unlock+0x4e/0x70 [ 416.824282][T10888] ? __fget_files+0x184/0x1c0 [ 416.824330][T10888] ? mutex_lock+0x57/0x90 [ 416.824365][T10888] ksys_read+0xdc/0x1a0 [ 416.824442][T10888] __x64_sys_read+0x40/0x50 [ 416.824473][T10888] x64_sys_call+0x2886/0x3020 [ 416.824497][T10888] do_syscall_64+0x12c/0x3b0 [ 416.824552][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.824575][T10888] RIP: 0033:0x7f038b4ad68e [ 416.824626][T10888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 416.824646][T10888] RSP: 002b:00007f0389f46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.824666][T10888] RAX: ffffffffffffffda RBX: 00007f0389f476c0 RCX: 00007f038b4ad68e [ 416.824733][T10888] RDX: 000000000000000f RSI: 00007f0389f470a0 RDI: 0000000000000003 [ 416.824772][T10888] RBP: 00007f0389f47090 R08: 0000000000000000 R09: 0000000000000000 [ 416.824789][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.824805][T10888] R13: 00007f038b766038 R14: 00007f038b765fa0 R15: 00007ffc9802a788 [ 416.824829][T10888] [ 417.143599][T10900] loop6: detected capacity change from 0 to 512 [ 417.150412][T10900] EXT4-fs: dax option not supported [ 417.167566][T10900] loop6: detected capacity change from 0 to 128 [ 417.175743][T10900] vfat: Unknown parameter '1844674407370955161500000000000000000000µ‚³zXDb„&·™Så!²|:]¼ŽĶdN' [ 417.384136][T10904] __nla_validate_parse: 2 callbacks suppressed [ 417.384177][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 417.401332][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 417.424930][T10906] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2104'. [ 417.434580][T10906] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2104'. [ 417.446373][ T29] audit: type=1107 audit(1780918375.615:2363): pid=10905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 417.608151][T10911] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2106'. [ 417.617556][T10911] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 417.764025][T10920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2110'. [ 417.940542][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2116'. [ 417.958134][T10934] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2116'. [ 418.600538][T10924] syz.4.2112 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 418.618389][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.4.2112 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 418.618445][T10924] Tainted: [W]=WARN [ 418.618454][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.618473][T10924] Call Trace: [ 418.618480][T10924] [ 418.618489][T10924] __dump_stack+0x1d/0x30 [ 418.618568][T10924] dump_stack_lvl+0x95/0xd0 [ 418.618590][T10924] dump_stack+0x15/0x1b [ 418.618610][T10924] dump_header+0x80/0x240 [ 418.618641][T10924] oom_kill_process+0x295/0x350 [ 418.618754][T10924] out_of_memory+0x97d/0xb80 [ 418.618830][T10924] try_charge_memcg+0x62f/0xa10 [ 418.618868][T10924] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 418.618913][T10924] __alloc_frozen_pages_noprof+0x18a/0x350 [ 418.619009][T10924] alloc_pages_mpol+0xb3/0x260 [ 418.619040][T10924] alloc_pages_noprof+0x8f/0x140 [ 418.619103][T10924] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 418.619162][T10924] __kvmalloc_node_noprof+0x3d4/0x640 [ 418.619191][T10924] ? futex_hash_allocate+0x190/0x9a0 [ 418.619229][T10924] ? futex_hash_allocate+0x190/0x9a0 [ 418.619276][T10924] futex_hash_allocate+0x190/0x9a0 [ 418.619332][T10924] ? cap_task_prctl+0x13f/0x6b0 [ 418.619358][T10924] futex_hash_prctl+0xd8/0xf0 [ 418.619456][T10924] __se_sys_prctl+0x4f4/0x1400 [ 418.619553][T10924] __x64_sys_prctl+0x67/0x80 [ 418.619587][T10924] x64_sys_call+0x2533/0x3020 [ 418.619622][T10924] do_syscall_64+0x12c/0x3b0 [ 418.619715][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.619765][T10924] RIP: 0033:0x7f8fe3fdce59 [ 418.619788][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.619876][T10924] RSP: 002b:00007f8fe2a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 418.619897][T10924] RAX: ffffffffffffffda RBX: 00007f8fe4255fa0 RCX: 00007f8fe3fdce59 [ 418.619911][T10924] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 418.619926][T10924] RBP: 00007f8fe4072d6f R08: 0000000000000000 R09: 0000000000000000 [ 418.619952][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.619970][T10924] R13: 00007f8fe4256038 R14: 00007f8fe4255fa0 R15: 00007fff36370a38 [ 418.620060][T10924] [ 418.620069][T10924] memory: usage 307200kB, limit 307200kB, failcnt 147 [ 418.705192][T10955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2124'. [ 418.715893][T10924] memory+swap: usage 301460kB, limit 9007199254740988kB, failcnt 0 [ 418.878135][T10924] kmem: usage 300948kB, limit 9007199254740988kB, failcnt 0 [ 418.885967][T10924] Memory cgroup stats for /syz4: [ 418.886337][T10924] cache 1048576 [ 418.893634][T10957] SELinux: syz.2.2125 (10957) wrote to checkreqprot. This is no longer supported. [ 418.895522][T10924] rss 114688 [ 418.920213][T10924] shmem 0 [ 418.923235][T10924] mapped_file 69632 [ 418.925814][T10957] futex_wake_op: syz.2.2125 tries to shift op by 32; fix this program [ 418.951303][T10924] dirty 8192 [ 418.951320][T10924] writeback 0 [ 418.951329][T10924] workingset_refault_anon 25 [ 418.951348][T10924] workingset_refault_file 640 [ 418.951359][T10924] swap 143360 [ 418.951369][T10924] swapcached 364544 [ 418.951380][T10924] pgpgin 377559 [ 418.951389][T10924] pgpgout 377274 [ 418.951400][T10924] pgfault 301339 [ 418.951407][T10924] pgmajfault 25 [ 418.951416][T10924] inactive_anon 16384 [ 418.951426][T10924] active_anon 102400 [ 418.951437][T10924] inactive_file 0 [ 418.951447][T10924] active_file 1048576 [ 418.951499][T10924] unevictable 0 [ 418.951510][T10924] hierarchical_memory_limit 314572800 [ 418.951522][T10924] hierarchical_memsw_limit 9223372036854771712 [ 418.951536][T10924] total_cache 1048576 [ 418.951546][T10924] total_rss 114688 [ 418.951554][T10924] total_shmem 0 [ 418.951564][T10924] total_mapped_file 69632 [ 418.951574][T10924] total_dirty 8192 [ 418.951583][T10924] total_writeback 0 [ 418.951593][T10924] total_workingset_refault_anon 25 [ 418.951638][T10924] total_workingset_refault_file 640 [ 418.951650][T10924] total_swap 143360 [ 418.951661][T10924] total_swapcached 364544 [ 418.951671][T10924] total_pgpgin 377559 [ 418.951713][T10924] total_pgpgout 377274 [ 418.951724][T10924] total_pgfault 301339 [ 418.951735][T10924] total_pgmajfault 25 [ 418.951745][T10924] total_inactive_anon 16384 [ 418.951756][T10924] total_active_anon 102400 [ 418.951765][T10924] total_inactive_file 0 [ 418.951787][T10924] total_active_file 1048576 [ 418.951799][T10924] total_unevictable 0 [ 418.951810][T10924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2112,pid=10923,uid=0 [ 418.951916][T10924] Memory cgroup out of memory: Killed process 10924 (syz.4.2112) total-vm:94168kB, anon-rss:1340kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 419.234339][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2130'. [ 419.295032][ T29] audit: type=1400 audit(1780918377.445:2364): avc: denied { setopt } for pid=10974 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.315370][ T29] audit: type=1400 audit(1780918377.445:2365): avc: denied { write } for pid=10974 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.358015][T10985] FAULT_INJECTION: forcing a failure. [ 419.358015][T10985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.402852][T10985] CPU: 0 UID: 0 PID: 10985 Comm: syz.6.2137 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 419.402948][T10985] Tainted: [W]=WARN [ 419.403031][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 419.403048][T10985] Call Trace: [ 419.403055][T10985] [ 419.403062][T10985] __dump_stack+0x1d/0x30 [ 419.403086][T10985] dump_stack_lvl+0x95/0xd0 [ 419.403110][T10985] dump_stack+0x15/0x1b [ 419.403135][T10985] should_fail_ex+0x263/0x280 [ 419.403237][T10985] should_fail+0xb/0x20 [ 419.403259][T10985] should_fail_usercopy+0x1a/0x20 [ 419.403282][T10985] _copy_from_user+0x1c/0xb0 [ 419.403367][T10985] do_sys_poll+0x140/0xc00 [ 419.403398][T10985] ? avc_has_perm_noaudit+0xab/0x130 [ 419.403437][T10985] ? avc_has_perm+0x101/0x190 [ 419.403509][T10985] __se_sys_ppoll+0x1e2/0x220 [ 419.403537][T10985] __x64_sys_ppoll+0x67/0x80 [ 419.403557][T10985] x64_sys_call+0x28d3/0x3020 [ 419.403661][T10985] do_syscall_64+0x12c/0x3b0 [ 419.403702][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.403724][T10985] RIP: 0033:0x7f038b4ece59 [ 419.403772][T10985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.403794][T10985] RSP: 002b:00007f0389f47028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 419.403815][T10985] RAX: ffffffffffffffda RBX: 00007f038b765fa0 RCX: 00007f038b4ece59 [ 419.403830][T10985] RDX: 0000200000000300 RSI: 20000000000000e0 RDI: 0000200000000d40 [ 419.403845][T10985] RBP: 00007f0389f47090 R08: 0000000000000000 R09: 0000000000000000 [ 419.403861][T10985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.403889][T10985] R13: 00007f038b766038 R14: 00007f038b765fa0 R15: 00007ffc9802a788 [ 419.403916][T10985] [ 419.591076][ T29] audit: type=1400 audit(1780918377.445:2366): avc: denied { read } for pid=10974 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.670687][T10992] netlink: 'syz.6.2139': attribute type 10 has an invalid length. [ 419.687763][ T29] audit: type=1400 audit(1780918377.825:2367): avc: denied { getopt } for pid=10993 comm="syz.0.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.031056][T11033] netlink: 'syz.0.2152': attribute type 29 has an invalid length. [ 420.039656][T11033] netlink: 'syz.0.2152': attribute type 29 has an invalid length. [ 420.048525][T11033] unsupported nla_type 58 [ 420.089068][T11037] netlink: 'syz.0.2153': attribute type 10 has an invalid length. [ 420.097570][ T29] audit: type=1400 audit(1780918378.255:2368): avc: denied { listen } for pid=11034 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.251354][ T29] audit: type=1326 audit(1780918378.405:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.300068][ T29] audit: type=1326 audit(1780918378.405:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.326608][ T29] audit: type=1326 audit(1780918378.405:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.359721][ T29] audit: type=1326 audit(1780918378.405:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.386147][ T29] audit: type=1326 audit(1780918378.405:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.413106][ T29] audit: type=1326 audit(1780918378.405:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.439905][ T29] audit: type=1326 audit(1780918378.405:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.466326][ T29] audit: type=1326 audit(1780918378.405:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.492617][ T29] audit: type=1326 audit(1780918378.405:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11044 comm="syz.1.2158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b562bce59 code=0x7ffc0000 [ 420.525876][T11055] IPVS: persistence engine module ip_vs_pe_€ not found [ 420.587866][T11064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.595129][T11064] IPv6: NLM_F_CREATE should be set when creating new route [ 420.602361][T11064] IPv6: NLM_F_CREATE should be set when creating new route [ 421.031215][T11072] netlink: 'syz.0.2165': attribute type 10 has an invalid length. [ 421.067649][T11074] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 421.488108][T11077] 9pnet_fd: Insufficient options for proto=fd [ 421.749764][T11093] loop6: detected capacity change from 0 to 512 [ 421.849578][T11093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.866713][T11093] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.906240][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.054296][T11107] netlink: 'syz.6.2176': attribute type 10 has an invalid length. [ 422.829676][T11128] netlink: 'syz.0.2184': attribute type 27 has an invalid length. [ 422.837541][T11128] netlink: 'syz.0.2184': attribute type 3 has an invalid length. [ 422.887926][T11128] netlink: 'syz.0.2184': attribute type 10 has an invalid length. [ 422.917424][T11128] bond0: (slave dummy0): Releasing backup interface [ 422.940284][T11133] netlink: 'syz.0.2184': attribute type 10 has an invalid length. [ 422.977303][T11128] team0: Port device dummy0 added [ 423.032634][T11133] team0: Port device dummy0 removed [ 423.040788][T11133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 423.100344][T11136] __nla_validate_parse: 6 callbacks suppressed [ 423.100365][T11136] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2187'. [ 423.128605][T11136] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 423.145475][T11138] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2188'. [ 423.625630][T11170] Failed to initialize the IGMP autojoin socket (err -2) [ 423.638440][T11168] loop6: detected capacity change from 0 to 512 [ 423.761126][T11168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.775410][T11174] bond0: (slave dummy0): Releasing backup interface [ 423.785934][T11174] team0: Port device dummy0 added [ 423.796839][T11174] team0: Port device dummy0 removed [ 423.804996][T11174] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 423.875243][T11189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2204'. [ 423.905879][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.922330][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 424.005961][T11200] tmpfs: Too small a size for current use [ 424.290166][T11224] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2218'. [ 424.334913][T11224] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 424.677227][T11229] tmpfs: Too small a size for current use [ 424.722845][T11231] loop6: detected capacity change from 0 to 128 [ 424.769038][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2220'. [ 425.663040][T11259] netem: change failed [ 425.982329][T11269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2231'. [ 426.158464][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 426.158481][ T29] audit: type=1400 audit(1780918384.315:2400): avc: denied { getopt } for pid=11276 comm="syz.1.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.206027][T11281] tmpfs: Too small a size for current use [ 426.332656][T11277] netlink: 79568 bytes leftover after parsing attributes in process `syz.1.2235'. [ 426.367763][T11277] netlink: zone id is out of range [ 426.390134][T11277] netlink: zone id is out of range [ 426.407382][T11277] netlink: zone id is out of range [ 426.438689][T11277] netlink: zone id is out of range [ 426.598057][T11277] netlink: zone id is out of range [ 426.607560][T11277] netlink: zone id is out of range [ 426.614349][T11277] netlink: zone id is out of range [ 426.640437][T11277] netlink: zone id is out of range [ 426.645602][T11277] netlink: zone id is out of range [ 426.650861][T11277] netlink: zone id is out of range [ 427.085188][T11308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2244'. [ 427.179325][T11296] netem: change failed [ 427.407224][T11315] validate_nla: 11 callbacks suppressed [ 427.407240][T11315] netlink: 'syz.0.2247': attribute type 27 has an invalid length. [ 427.559123][T11315] netlink: 'syz.0.2247': attribute type 3 has an invalid length. [ 427.714238][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 427.908467][T11322] tmpfs: Too small a size for current use [ 427.930279][T11325] tmpfs: Too small a size for current use [ 428.043930][T11329] Failed to initialize the IGMP autojoin socket (err -2) [ 428.057087][ T29] audit: type=1107 audit(1780918386.215:2401): pid=11326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 428.534030][T11330] netlink: 'syz.4.2252': attribute type 10 has an invalid length. [ 428.930245][T11344] __nla_validate_parse: 2 callbacks suppressed [ 428.930471][T11344] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2257'. [ 429.033930][T11351] netlink: 'syz.6.2259': attribute type 27 has an invalid length. [ 429.106401][T11351] netlink: 'syz.6.2259': attribute type 3 has an invalid length. [ 429.159056][T11356] netem: change failed [ 429.223019][T11360] tmpfs: Too small a size for current use [ 429.342380][T11363] tmpfs: Too small a size for current use [ 429.666904][ T29] audit: type=1400 audit(1780918387.775:2402): avc: denied { mount } for pid=11383 comm="syz.2.2273" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 429.693322][T11390] netlink: 'syz.6.2274': attribute type 27 has an invalid length. [ 429.701878][T11390] netlink: 'syz.6.2274': attribute type 3 has an invalid length. [ 429.773618][T11393] netem: change failed [ 430.344033][ T29] audit: type=1400 audit(1780918388.495:2403): avc: denied { getopt } for pid=11423 comm="syz.4.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 430.523834][T11437] netlink: 'syz.6.2291': attribute type 27 has an invalid length. [ 430.539851][T11437] netlink: 'syz.6.2291': attribute type 3 has an invalid length. [ 430.571993][T11437] netlink: 'syz.6.2291': attribute type 10 has an invalid length. [ 430.613093][T11441] netem: change failed [ 430.696803][T11437] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 430.914889][T11459] Failed to initialize the IGMP autojoin socket (err -2) [ 431.457228][ T29] audit: type=1400 audit(1780918389.615:2404): avc: denied { execute } for pid=11464 comm="syz.4.2300" path="/file1" dev="ramfs" ino=34497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 431.595708][T11482] FAULT_INJECTION: forcing a failure. [ 431.595708][T11482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.757398][T11482] CPU: 0 UID: 0 PID: 11482 Comm: syz.2.2306 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 431.757443][T11482] Tainted: [W]=WARN [ 431.757452][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.757470][T11482] Call Trace: [ 431.757479][T11482] [ 431.757489][T11482] __dump_stack+0x1d/0x30 [ 431.757592][T11482] dump_stack_lvl+0x95/0xd0 [ 431.757620][T11482] dump_stack+0x15/0x1b [ 431.757644][T11482] should_fail_ex+0x263/0x280 [ 431.757665][T11482] should_fail+0xb/0x20 [ 431.757742][T11482] should_fail_usercopy+0x1a/0x20 [ 431.757773][T11482] _copy_from_user+0x1c/0xb0 [ 431.757799][T11482] __sys_bpf+0x183/0x7e0 [ 431.757841][T11482] __x64_sys_bpf+0x41/0x50 [ 431.757885][T11482] x64_sys_call+0x10cb/0x3020 [ 431.757909][T11482] do_syscall_64+0x12c/0x3b0 [ 431.757948][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.758013][T11482] RIP: 0033:0x7f4a4703ce59 [ 431.758033][T11482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.758058][T11482] RSP: 002b:00007f4a45a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.758133][T11482] RAX: ffffffffffffffda RBX: 00007f4a472b5fa0 RCX: 00007f4a4703ce59 [ 431.758147][T11482] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 431.758217][T11482] RBP: 00007f4a45a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 431.758234][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.758250][T11482] R13: 00007f4a472b6038 R14: 00007f4a472b5fa0 R15: 00007ffd7f368fc8 [ 431.758345][T11482] [ 432.025261][T11485] tmpfs: Too few inodes for current use [ 432.062968][T11459] veth0_macvtap: left promiscuous mode [ 432.319577][T11488] bond0: (slave dummy0): Releasing backup interface [ 432.332611][T11488] dummy0: left promiscuous mode [ 432.340042][T11488] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 432.367083][T11488] team0: Failed to send options change via netlink (err -105) [ 432.385401][T11488] team0: Port device dummy0 added [ 432.404491][T11493] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 432.422846][T11493] team0: Failed to send options change via netlink (err -105) [ 432.430644][T11493] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 432.442641][T11493] team0: Port device dummy0 removed [ 432.455380][T11493] dummy0: entered promiscuous mode [ 432.465921][T11493] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 432.634336][T11500] netem: change failed [ 432.704190][T11514] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.2316'. [ 432.725764][T11514] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.2316'. [ 432.809746][ T29] audit: type=1107 audit(1780918390.965:2405): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 435.188535][T11539] validate_nla: 7 callbacks suppressed [ 435.188560][T11539] netlink: 'syz.2.2325': attribute type 27 has an invalid length. [ 435.202428][T11539] netlink: 'syz.2.2325': attribute type 3 has an invalid length. [ 435.211830][T11539] netlink: 'syz.2.2325': attribute type 10 has an invalid length. [ 435.263584][T11542] netlink: 'syz.2.2325': attribute type 10 has an invalid length. [ 435.303017][T11539] bond0: (slave dummy0): Releasing backup interface [ 435.326141][T11539] dummy0: left promiscuous mode [ 435.350654][T11539] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 435.389832][T11539] team0: Failed to send options change via netlink (err -105) [ 435.407773][T11539] team0: Port device dummy0 added [ 435.418934][T11541] Failed to initialize the IGMP autojoin socket (err -2) [ 435.440249][T11548] netem: change failed [ 435.450756][T11542] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 435.504319][T11542] team0: Failed to send options change via netlink (err -105) [ 435.512390][T11542] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 435.526665][T11542] team0: Port device dummy0 removed [ 435.545097][T11552] netlink: 'syz.1.2326': attribute type 10 has an invalid length. [ 435.653161][T11542] dummy0: entered promiscuous mode [ 435.659241][T11542] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 436.159878][T11562] loop6: detected capacity change from 0 to 512 [ 436.166495][T11562] vfat: Unknown parameter '00000000000000000000004' [ 436.510954][ T29] audit: type=1400 audit(1780918394.565:2406): avc: denied { connect } for pid=11571 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 436.889112][T11586] loop6: detected capacity change from 0 to 1024 [ 437.061865][T11591] netem: change failed [ 437.086950][T11593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5131 sclass=netlink_tcpdiag_socket pid=11593 comm=syz.1.2343 [ 437.232668][T11586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 437.282416][T11586] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.346885][T11605] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2347'. [ 437.356405][T11605] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2347'. [ 437.366861][ T29] audit: type=1107 audit(1780918395.525:2407): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 437.771056][T11608] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2348'. [ 437.869304][T11608] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2348'. [ 438.009967][ T29] audit: type=1107 audit(1780918396.165:2408): pid=11607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 438.110801][T11600] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 438.208951][T11614] rdma_rxe: Failed to create IPv4 UDP tunnel [ 438.279448][T11609] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2340: lblock 0 mapped to illegal pblock 0 (length 1) [ 438.324389][T11609] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2340: lblock 0 mapped to illegal pblock 0 (length 1) [ 438.387181][T11609] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.2340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 438.527583][T11629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5131 sclass=netlink_tcpdiag_socket pid=11629 comm=syz.1.2355 [ 438.582988][T11633] Failed to initialize the IGMP autojoin socket (err -2) [ 438.599576][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 438.615249][T11635] netlink: 1472 bytes leftover after parsing attributes in process `syz.4.2358'. [ 438.627064][T11635] netlink: 1472 bytes leftover after parsing attributes in process `syz.4.2358'. [ 438.665205][ T29] audit: type=1107 audit(1780918396.815:2409): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 438.723984][T11645] loop6: detected capacity change from 0 to 1024 [ 438.766280][T11646] vhci_hcd vhci_hcd.0: invalid port number 0 [ 438.807798][T11645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 438.891642][T11645] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.316997][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 439.389065][T11659] netlink: 'syz.6.2364': attribute type 10 has an invalid length. [ 439.404524][T11659] bond0: (slave dummy0): Releasing backup interface [ 439.433259][T11659] netlink: 'syz.6.2364': attribute type 10 has an invalid length. [ 439.443261][T11659] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 439.531388][ T29] audit: type=1400 audit(1780918397.695:2410): avc: denied { mount } for pid=11668 comm="syz.1.2368" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 439.577441][T11671] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2369'. [ 439.593578][T11671] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2369'. [ 439.605825][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2367'. [ 439.616612][ T29] audit: type=1107 audit(1780918397.785:2411): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 439.657210][T11673] loop6: detected capacity change from 0 to 8192 [ 439.718495][T11681] Failed to initialize the IGMP autojoin socket (err -2) [ 439.736771][T11673] bio_check_eod: 101 callbacks suppressed [ 439.736843][T11673] syz.6.2370: attempt to access beyond end of device [ 439.736843][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.756772][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.765722][T11673] syz.6.2370: attempt to access beyond end of device [ 439.765722][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.792491][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.802063][T11673] syz.6.2370: attempt to access beyond end of device [ 439.802063][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.819363][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.839015][T11673] syz.6.2370: attempt to access beyond end of device [ 439.839015][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.863727][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.872421][T11673] syz.6.2370: attempt to access beyond end of device [ 439.872421][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.886645][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.895388][T11673] syz.6.2370: attempt to access beyond end of device [ 439.895388][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.909206][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.917866][T11673] syz.6.2370: attempt to access beyond end of device [ 439.917866][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.932454][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.941103][T11673] syz.6.2370: attempt to access beyond end of device [ 439.941103][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.955736][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.964459][T11673] syz.6.2370: attempt to access beyond end of device [ 439.964459][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.979085][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 439.990088][T11673] syz.6.2370: attempt to access beyond end of device [ 439.990088][T11673] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 439.991558][T11681] netlink: 'syz.2.2372': attribute type 10 has an invalid length. [ 440.009310][T11673] Buffer I/O error on dev loop6, logical block 57847, async page read [ 440.308083][T11692] netem: change failed [ 441.543609][ T3414] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec [ 442.288800][T11722] Failed to initialize the IGMP autojoin socket (err -2) [ 442.406834][T11725] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2387'. [ 442.502463][T11725] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2387'. [ 442.536040][ T29] audit: type=1107 audit(1780918400.695:2412): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 442.608101][T11729] netem: change failed [ 442.706660][T11737] loop6: detected capacity change from 0 to 1024 [ 442.870274][T11737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 442.907789][T11737] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.008506][T11746] Failed to initialize the IGMP autojoin socket (err -2) [ 443.049367][T11747] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2391: bg 0: block 112: padding at end of block bitmap is not set [ 443.064733][ T29] audit: type=1400 audit(1780918401.205:2413): avc: denied { write } for pid=11736 comm="syz.6.2391" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.069003][T11749] tmpfs: Too few inodes for current use [ 443.145889][T11753] netlink: 'syz.0.2396': attribute type 10 has an invalid length. [ 443.168119][T11753] bond0: (slave dummy0): Releasing backup interface [ 443.204762][T11753] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 443.213652][T11753] team0: Failed to send options change via netlink (err -105) [ 443.244575][T11753] team0: Port device dummy0 added [ 443.259580][T11756] netlink: 'syz.0.2396': attribute type 10 has an invalid length. [ 443.261766][T11747] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2391: lblock 0 mapped to illegal pblock 0 (length 1) [ 443.278282][T11756] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 443.298393][T11747] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2391: lblock 0 mapped to illegal pblock 0 (length 1) [ 443.312375][T11747] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.2391: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 443.312997][T11756] team0: Failed to send options change via netlink (err -105) [ 443.345370][T11746] netlink: 'syz.1.2394': attribute type 10 has an invalid length. [ 443.353308][T11756] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 443.362423][T11756] team0: Port device dummy0 removed [ 443.369973][T11756] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 445.188976][T11774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 445.221699][T11774] block device autoloading is deprecated and will be removed. [ 445.281229][ T29] audit: type=1400 audit(1780918403.345:2414): avc: denied { listen } for pid=11773 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 445.494918][T11781] tmpfs: Too few inodes for current use [ 445.577487][T11785] Failed to initialize the IGMP autojoin socket (err -2) [ 445.602566][T11786] Failed to initialize the IGMP autojoin socket (err -2) [ 445.636245][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 445.834993][T11793] loop6: detected capacity change from 0 to 512 [ 445.841886][T11793] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 445.856800][T11793] EXT4-fs (loop6): 1 truncate cleaned up [ 445.863065][T11793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.876165][ T29] audit: type=1400 audit(1780918404.035:2415): avc: denied { write } for pid=11791 comm="syz.6.2410" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.976953][T11800] Failed to initialize the IGMP autojoin socket (err -2) [ 446.016728][T11804] Failed to initialize the IGMP autojoin socket (err -2) [ 446.134034][T11812] FAULT_INJECTION: forcing a failure. [ 446.134034][T11812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.153851][T11812] CPU: 1 UID: 0 PID: 11812 Comm: syz.2.2416 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 446.153913][T11812] Tainted: [W]=WARN [ 446.153921][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.153938][T11812] Call Trace: [ 446.153947][T11812] [ 446.153997][T11812] __dump_stack+0x1d/0x30 [ 446.154023][T11812] dump_stack_lvl+0x95/0xd0 [ 446.154049][T11812] dump_stack+0x15/0x1b [ 446.154073][T11812] should_fail_ex+0x263/0x280 [ 446.154096][T11812] should_fail+0xb/0x20 [ 446.154178][T11812] should_fail_usercopy+0x1a/0x20 [ 446.154202][T11812] _copy_from_user+0x1c/0xb0 [ 446.154226][T11812] ___sys_recvmsg+0xaa/0x3b0 [ 446.154268][T11812] do_recvmmsg+0x1ef/0x560 [ 446.154400][T11812] ? fput+0x8f/0xc0 [ 446.154422][T11812] __x64_sys_recvmmsg+0xe5/0x170 [ 446.154461][T11812] x64_sys_call+0x80f/0x3020 [ 446.154493][T11812] do_syscall_64+0x12c/0x3b0 [ 446.154662][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.154688][T11812] RIP: 0033:0x7f4a4703ce59 [ 446.154704][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.154723][T11812] RSP: 002b:00007f4a45a8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 446.154782][T11812] RAX: ffffffffffffffda RBX: 00007f4a472b5fa0 RCX: 00007f4a4703ce59 [ 446.154797][T11812] RDX: 00000000040002ce RSI: 0000200000000c40 RDI: 0000000000000006 [ 446.154813][T11812] RBP: 00007f4a45a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.154830][T11812] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 446.154847][T11812] R13: 00007f4a472b6038 R14: 00007f4a472b5fa0 R15: 00007ffd7f368fc8 [ 446.154874][T11812] [ 446.366866][T11800] netlink: 'syz.1.2411': attribute type 10 has an invalid length. [ 446.367781][T11811] netlink: 'syz.4.2414': attribute type 10 has an invalid length. [ 446.490938][T11816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2417'. [ 446.553568][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.682950][T11840] Failed to initialize the IGMP autojoin socket (err -2) [ 448.863272][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2426'. [ 448.883474][ T29] audit: type=1400 audit(1780918407.045:2416): avc: denied { search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 448.922383][ T29] audit: type=1400 audit(1780918407.045:2417): avc: denied { search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.024471][ T29] audit: type=1400 audit(1780918407.045:2418): avc: denied { read } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.057974][T11846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2427'. [ 449.060424][ T29] audit: type=1400 audit(1780918407.045:2419): avc: denied { read open } for pid=11843 comm="syz.6.2426" path="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.109854][ T29] audit: type=1400 audit(1780918407.045:2420): avc: denied { search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.136175][ T29] audit: type=1400 audit(1780918407.045:2421): avc: denied { search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.158687][ T29] audit: type=1400 audit(1780918407.045:2422): avc: denied { write search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.184562][ T29] audit: type=1400 audit(1780918407.075:2423): avc: denied { search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.195831][T11852] autofs: Unknown parameter 'no9į ‘żPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠĒŖčEeÕ¬( IrŻ\•žu}ibˆŒŽźT0;“Œmy“[GcÆī#Ļ>QkĻübYü&“ąĢ#“w„@/VV¼Lė~1ƒ2§÷l’h–O„h'®ČūrK1‚\kU{!e½śó¬Üš7»ßß [ 449.195831][T11852] ÄUśeā[¦ÓĪ%#s' [ 449.207111][ T29] audit: type=1400 audit(1780918407.075:2424): avc: denied { search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.252791][ T29] audit: type=1400 audit(1780918407.075:2425): avc: denied { search } for pid=11843 comm="syz.6.2426" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.290722][T11846] vhci_hcd vhci_hcd.0: invalid port number 0 [ 449.361956][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 449.424605][T11860] netem: change failed [ 449.498199][T11865] Failed to initialize the IGMP autojoin socket (err -2) [ 449.902856][T11865] netlink: 'syz.6.2435': attribute type 10 has an invalid length. [ 451.939902][T11892] netlink: 'syz.6.2444': attribute type 2 has an invalid length. [ 451.991317][T11894] loop6: detected capacity change from 0 to 1024 [ 452.024671][T11898] Failed to initialize the IGMP autojoin socket (err -2) [ 452.032548][T11894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 452.044915][T11894] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.162474][T11905] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2445: bg 0: block 112: padding at end of block bitmap is not set [ 452.240731][T11909] netlink: 'syz.2.2449': attribute type 10 has an invalid length. [ 452.579820][T11905] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2445: lblock 0 mapped to illegal pblock 0 (length 1) [ 452.595164][T11905] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2445: lblock 0 mapped to illegal pblock 0 (length 1) [ 452.608842][T11905] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.2445: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 453.334147][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 453.626031][T11952] netlink: 399 bytes leftover after parsing attributes in process `syz.6.2463'. [ 453.648010][T11952] net_ratelimit: 26 callbacks suppressed [ 453.648027][T11952] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 453.787726][T11957] loop6: detected capacity change from 0 to 1024 [ 453.818880][T11959] Failed to initialize the IGMP autojoin socket (err -2) [ 453.926427][T11957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 453.958759][T11957] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.029325][T11972] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2465: bg 0: block 112: padding at end of block bitmap is not set [ 454.043734][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 454.043754][ T29] audit: type=1400 audit(1780918412.185:2438): avc: denied { write } for pid=11956 comm="syz.6.2465" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.273547][T11975] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2465: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.309584][T11987] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2474'. [ 454.318667][T11987] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 454.342289][T11975] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2465: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.371259][T11975] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.2465: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 457.400614][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 457.741527][T12025] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2487'. [ 457.773631][T12025] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2487'. [ 457.802795][ T29] audit: type=1400 audit(1780918415.965:2439): avc: denied { nlmsg_write } for pid=12024 comm="syz.2.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 457.898596][ T29] audit: type=1107 audit(1780918415.965:2440): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 458.066688][T12051] vhci_hcd vhci_hcd.0: invalid port number 0 [ 458.100606][T12051] loop6: detected capacity change from 0 to 256 [ 459.240974][T12060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12060 comm=syz.0.2496 [ 460.005364][ T29] audit: type=1400 audit(1780918418.165:2441): avc: denied { map } for pid=12059 comm="syz.0.2496" path="/467/file1" dev="tmpfs" ino=2572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 460.247267][ T29] audit: type=1400 audit(1780918418.165:2442): avc: denied { execute } for pid=12059 comm="syz.0.2496" path="/467/file1" dev="tmpfs" ino=2572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 460.376548][T12068] program syz.2.2497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.010602][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.021338][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.035232][T12076] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.046284][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.057473][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.067694][T12076] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.078209][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.089603][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.099525][T12076] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.108949][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 462.562206][ T29] audit: type=1107 audit(1780918420.725:2443): pid=12085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 462.996794][T12095] Failed to initialize the IGMP autojoin socket (err -2) [ 463.292646][T12098] loop6: detected capacity change from 0 to 512 [ 463.341493][T12098] vfat: Unknown parameter '00000000000000000000004' [ 463.401453][T12096] netlink: 'syz.4.2508': attribute type 10 has an invalid length. [ 463.782194][T12102] loop6: detected capacity change from 0 to 128 [ 465.050961][T12142] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 465.111683][T12142] bond0: (slave dummy0): Releasing backup interface [ 465.121553][T12142] team0: Port device dummy0 added [ 465.128930][T12142] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 465.140007][T12142] team0: Port device dummy0 removed [ 465.147666][T12142] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 466.559068][ T29] audit: type=1107 audit(1780918424.715:2444): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 467.957261][T12176] Failed to initialize the IGMP autojoin socket (err -2) [ 468.081429][T12183] netlink: 'syz.0.2535': attribute type 10 has an invalid length. [ 468.125735][T12183] bond0: (slave dummy0): Releasing backup interface [ 468.132678][T12187] netlink: 'syz.0.2535': attribute type 10 has an invalid length. [ 468.167181][T12183] team0: Port device dummy0 added [ 468.241800][T12187] team0: Port device dummy0 removed [ 468.255503][T12187] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.465235][T12202] netem: change failed [ 468.709651][T12207] __nla_validate_parse: 24 callbacks suppressed [ 468.709671][T12207] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2543'. [ 468.740364][T12207] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2543'. [ 468.767981][ T29] audit: type=1107 audit(1780918426.925:2445): pid=12206 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 468.895478][T12213] Failed to initialize the IGMP autojoin socket (err -2) [ 469.369417][T12237] netlink: 'syz.1.2551': attribute type 10 has an invalid length. [ 469.514391][T12237] bond0: (slave dummy0): Releasing backup interface [ 469.521400][T12245] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2555'. [ 469.536774][T12240] netlink: 'syz.1.2551': attribute type 10 has an invalid length. [ 469.545049][T12245] netlink: 1472 bytes leftover after parsing attributes in process `syz.2.2555'. [ 469.568087][ T29] audit: type=1107 audit(1780918427.685:2446): pid=12244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 469.629255][T12237] team0: Port device dummy0 added [ 469.659057][T12240] team0: Port device dummy0 removed [ 469.668127][T12240] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 469.747903][T12253] tmpfs: Bad value for 'size' [ 469.789359][T12260] tmpfs: Too few inodes for current use [ 470.386455][T12286] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 470.412991][T12286] bond0: (slave dummy0): Releasing backup interface [ 470.440519][T12287] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 470.582157][T12269] vhci_hcd vhci_hcd.0: invalid port number 0 [ 470.607522][T12286] team0: Port device dummy0 added [ 470.706567][T12287] team0: Port device dummy0 removed [ 470.781072][T12269] loop6: detected capacity change from 0 to 256 [ 470.792905][T12287] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 471.178879][T12293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2570'. [ 471.920148][T12309] tmpfs: Bad value for 'size' [ 472.203747][T12311] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2576'. [ 472.235953][T12320] netlink: 'syz.4.2581': attribute type 10 has an invalid length. [ 472.289903][T12324] netlink: 'syz.4.2581': attribute type 10 has an invalid length. [ 472.403884][T12320] bond0: (slave dummy0): Releasing backup interface [ 472.455543][T12336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12336 comm=syz.2.2582 [ 472.465412][T12320] team0: Port device dummy0 added [ 472.492564][T12324] team0: Port device dummy0 removed [ 472.502480][T12324] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 474.802997][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2596'. [ 476.098056][T12393] tmpfs: Bad value for 'size' [ 476.907169][T12402] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2604'. [ 477.042546][T12402] vhci_hcd vhci_hcd.0: invalid port number 0 [ 477.468044][T12443] veth0_vlan: entered allmulticast mode [ 477.560487][T12445] syzkaller0: entered promiscuous mode [ 477.583310][T12445] syzkaller0: entered allmulticast mode [ 477.725615][ T29] audit: type=1400 audit(1780918435.845:2447): avc: denied { relabelfrom } for pid=12444 comm="syz.0.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 477.758473][ T29] audit: type=1400 audit(1780918435.845:2448): avc: denied { relabelto } for pid=12444 comm="syz.0.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 477.764294][T12462] syzkaller0: entered promiscuous mode [ 477.784212][T12462] syzkaller0: entered allmulticast mode [ 477.833418][T12468] Failed to initialize the IGMP autojoin socket (err -2) [ 477.959298][T12476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2633'. [ 477.968983][T12476] netem: change failed [ 478.062982][T12484] Failed to initialize the IGMP autojoin socket (err -2) [ 478.115292][T12488] netlink: 'syz.2.2640': attribute type 10 has an invalid length. [ 478.125346][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.138289][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.220073][ T68] team0: Port device netdevsim2 removed [ 478.229564][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.240031][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.257948][T12499] veth0_vlan: left promiscuous mode [ 478.263294][T12499] veth0_vlan: entered allmulticast mode [ 478.269427][T12499] veth0_vlan: entered promiscuous mode [ 478.283269][T12499] sit0: entered allmulticast mode [ 478.306154][T12493] Failed to initialize the IGMP autojoin socket (err -2) [ 478.341941][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.356992][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.420511][T12484] netlink: 'syz.6.2637': attribute type 10 has an invalid length. [ 478.660671][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.690562][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.844568][ T29] audit: type=1400 audit(1780918437.005:2449): avc: denied { write } for pid=12528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.954342][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.961611][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.969363][T12493] bridge_slave_0: entered allmulticast mode [ 478.978391][T12493] bridge_slave_0: entered promiscuous mode [ 479.003031][T12557] Failed to initialize the IGMP autojoin socket (err -2) [ 479.011671][ T29] audit: type=1400 audit(1780918437.165:2450): avc: denied { write } for pid=12555 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.040204][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.072689][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.086199][T12493] bridge_slave_1: entered allmulticast mode [ 479.100825][T12493] bridge_slave_1: entered promiscuous mode [ 479.136033][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.212353][T12565] vhci_hcd vhci_hcd.0: invalid port number 0 [ 479.224290][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.300050][ T68] bridge_slave_1: left promiscuous mode [ 479.305963][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.556013][T12574] loop6: detected capacity change from 0 to 1024 [ 479.569227][ T68] batman_adv: batadv0: Interface deactivated: gretap1 [ 479.608943][T12574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 479.634285][T12574] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.743278][T12574] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2655: bg 0: block 112: padding at end of block bitmap is not set [ 479.744132][ T29] audit: type=1400 audit(1780918437.905:2451): avc: denied { write } for pid=12573 comm="syz.6.2655" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.805716][ T68] batman_adv: batadv0: Removing interface: gretap1 [ 479.814288][T12574] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2655: lblock 0 mapped to illegal pblock 0 (length 1) [ 479.844475][T12574] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.2655: lblock 0 mapped to illegal pblock 0 (length 1) [ 479.877898][T12574] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.2655: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 480.005310][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.015823][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.029663][ T68] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 480.039275][ T68] bond0 (unregistering): Released all slaves [ 480.101181][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 480.114488][T12493] team0: Port device team_slave_0 added [ 480.152644][T12493] team0: Port device team_slave_1 added [ 480.163025][ T68] tipc: Disabling bearer [ 480.191512][ T68] tipc: Disabling bearer [ 480.196910][ T68] tipc: Disabling bearer [ 480.216495][ T68] tipc: Left network mode [ 480.278511][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.294007][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.306835][T12587] loop6: detected capacity change from 0 to 1024 [ 480.354476][T12591] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2661'. [ 480.363684][T12591] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2661'. [ 480.369130][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.407766][ T29] audit: type=1107 audit(1780918438.565:2452): pid=12590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 480.418246][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.423363][T12587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 480.439894][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.468792][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.540813][T12493] hsr_slave_0: entered promiscuous mode [ 480.549525][T12493] hsr_slave_1: entered promiscuous mode [ 480.552070][T12587] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.558078][T12493] debugfs: 'hsr0' already exists in 'hsr' [ 480.574825][T12493] Cannot create hsr debugfs directory [ 480.623939][ T68] hsr_slave_0: left promiscuous mode [ 480.629906][ T68] hsr_slave_1: left promiscuous mode [ 480.635536][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.643097][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.650717][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.658104][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.667392][ T68] veth1_vlan: left promiscuous mode [ 480.706534][ T68] pim6reg (unregistering): left allmulticast mode [ 480.753707][ T68] team0 (unregistering): Port device team_slave_1 removed [ 480.767754][ T68] team0 (unregistering): Port device team_slave_0 removed [ 480.851740][T12598] syzkaller0: entered promiscuous mode [ 480.857331][T12598] syzkaller0: entered allmulticast mode [ 480.923912][T12605] syzkaller0: entered promiscuous mode [ 480.929432][T12605] syzkaller0: entered allmulticast mode [ 481.083075][T12610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12610 comm=syz.0.2666 [ 481.096589][T12608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2665'. [ 481.106957][T12608] vhci_hcd vhci_hcd.0: invalid port number 0 [ 481.125451][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 481.159885][T12612] netlink: 'syz.6.2667': attribute type 10 has an invalid length. [ 481.252291][T12616] syzkaller0: entered promiscuous mode [ 481.257885][T12616] syzkaller0: entered allmulticast mode [ 481.290140][T12618] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2670'. [ 481.339541][T12618] netem: change failed [ 481.371587][T12622] Failed to initialize the IGMP autojoin socket (err -2) [ 481.421600][T12627] Failed to initialize the IGMP autojoin socket (err -2) [ 481.547084][T12493] netdevsim netdevsim4 netdevsim0: renamed from eth9 [ 481.556218][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.564100][T12493] netdevsim netdevsim4 netdevsim1: renamed from eth10 [ 481.573218][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.581098][T12493] netdevsim netdevsim4 netdevsim2: renamed from eth11 [ 481.592216][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.600883][T12493] netdevsim netdevsim4 netdevsim3: renamed from eth12 [ 481.615042][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.644516][T12633] Failed to initialize the IGMP autojoin socket (err -2) [ 481.668107][T12641] netlink: 'syz.0.2677': attribute type 10 has an invalid length. [ 481.719229][T12639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2678'. [ 481.849163][T12493] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.879871][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.887012][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.912017][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.919194][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.039246][T12664] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 482.071004][T12666] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2689'. [ 482.084078][T12666] netem: change failed [ 482.096131][T12668] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2690'. [ 482.118179][T12668] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2690'. [ 482.316853][T12493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.405183][T12699] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.2696'. [ 482.414576][T12699] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.2696'. [ 482.427135][ T29] audit: type=1107 audit(1780918440.595:2453): pid=12698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 484.285890][T12724] netem: change failed [ 484.382674][T12728] netlink: 'syz.6.2700': attribute type 10 has an invalid length. [ 484.451431][ T29] audit: type=1400 audit(1780918442.615:2454): avc: denied { write } for pid=12701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.547439][ T29] audit: type=1400 audit(1780918442.665:2455): avc: denied { write } for pid=12736 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.756122][T12748] syzkaller0: entered promiscuous mode [ 484.761968][T12748] syzkaller0: entered allmulticast mode [ 484.792068][T12756] netlink: 'syz.6.2707': attribute type 10 has an invalid length. [ 484.820178][T12493] veth0_vlan: entered promiscuous mode [ 484.840955][T12756] bond0: (slave dummy0): Releasing backup interface [ 484.857805][T12493] veth1_vlan: entered promiscuous mode [ 484.862488][T12756] netlink: 'syz.6.2707': attribute type 10 has an invalid length. [ 484.894824][T12756] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 484.910141][ T29] audit: type=1400 audit(1780918443.065:2456): avc: denied { write } for pid=12750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.991486][ T29] audit: type=1400 audit(1780918443.155:2457): avc: denied { write } for pid=12768 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.053819][T12772] loop6: detected capacity change from 0 to 1024 [ 485.075072][T12493] veth0_macvtap: entered promiscuous mode [ 485.096234][T12772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 485.120712][T12772] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.135392][T12778] netlink: 'syz.1.2710': attribute type 10 has an invalid length. [ 485.152970][T12493] veth1_macvtap: entered promiscuous mode [ 485.274575][T12493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.286824][T12493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.300688][T12493] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 485.329754][T12786] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2709: bg 0: block 112: padding at end of block bitmap is not set [ 485.344641][ T29] audit: type=1400 audit(1780918443.485:2458): avc: denied { write } for pid=12771 comm="syz.6.2709" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.368203][T12493] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 485.386316][T12493] wireguard: wg0: Could not create IPv4 socket [ 485.429071][T12493] wireguard: wg1: Could not create IPv4 socket [ 485.440744][T12493] wireguard: wg2: Could not create IPv4 socket [ 485.632548][ T29] audit: type=1400 audit(1780918443.725:2459): avc: denied { write } for pid=12809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.702815][T12812] Failed to initialize the IGMP autojoin socket (err -2) [ 485.725417][ T29] audit: type=1400 audit(1780918443.885:2460): avc: denied { write } for pid=12828 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.797176][T12842] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 485.813204][T12842] Failed to initialize the IGMP autojoin socket (err -2) [ 485.902920][ T29] audit: type=1400 audit(1780918444.065:2461): avc: denied { write } for pid=12843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.927254][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 485.977140][ T29] audit: type=1400 audit(1780918444.135:2462): avc: denied { write } for pid=12860 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.148491][T12871] loop4: detected capacity change from 0 to 1024 [ 486.150647][T12875] __nla_validate_parse: 1 callbacks suppressed [ 486.150698][T12875] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2729'. [ 486.156033][T12871] EXT4-fs: Ignoring removed bh option [ 486.161716][ T29] audit: type=1400 audit(1780918444.315:2463): avc: denied { mounton } for pid=12870 comm="syz.4.2730" path="/2/file1" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 486.253820][T12871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.316001][T12871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.338466][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2729'. [ 486.409625][T12897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2737'. [ 486.429582][T12897] vhci_hcd vhci_hcd.0: invalid port number 0 [ 486.477677][T12909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12909 comm=syz.4.2740 [ 486.521700][T12910] Failed to initialize the IGMP autojoin socket (err -2) [ 486.891670][T12948] syzkaller0: entered promiscuous mode [ 486.959603][T12948] syzkaller0: entered allmulticast mode [ 489.169453][T12981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12981 comm=syz.2.2758 [ 489.232799][T12988] netlink: 'syz.6.2760': attribute type 10 has an invalid length. [ 489.424564][T12996] loop6: detected capacity change from 0 to 8192 [ 489.566486][T12996] bio_check_eod: 5925 callbacks suppressed [ 489.566504][T12996] syz.6.2762: attempt to access beyond end of device [ 489.566504][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.587151][T12996] buffer_io_error: 5925 callbacks suppressed [ 489.587215][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.608533][T12996] syz.6.2762: attempt to access beyond end of device [ 489.608533][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.622089][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.630494][T12996] syz.6.2762: attempt to access beyond end of device [ 489.630494][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.675362][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.683724][T12996] syz.6.2762: attempt to access beyond end of device [ 489.683724][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.697145][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.705636][T12996] syz.6.2762: attempt to access beyond end of device [ 489.705636][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.719484][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.727813][T12996] syz.6.2762: attempt to access beyond end of device [ 489.727813][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.742091][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.750907][T12996] syz.6.2762: attempt to access beyond end of device [ 489.750907][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.780326][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.802215][T12996] syz.6.2762: attempt to access beyond end of device [ 489.802215][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.824169][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.833705][T12996] syz.6.2762: attempt to access beyond end of device [ 489.833705][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.867817][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.878034][T12996] syz.6.2762: attempt to access beyond end of device [ 489.878034][T12996] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 489.913440][T12996] Buffer I/O error on dev loop6, logical block 57847, async page read [ 489.950231][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 489.950270][ T29] audit: type=1400 audit(1780918447.864:2472): avc: denied { write } for pid=13011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.982828][T13027] Failed to initialize the IGMP autojoin socket (err -2) [ 490.089181][ T29] audit: type=1400 audit(1780918447.902:2473): avc: denied { write } for pid=13034 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.297256][ T29] audit: type=1326 audit(1780918448.154:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.327943][ T29] audit: type=1326 audit(1780918448.154:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.353718][ T29] audit: type=1326 audit(1780918448.154:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.473707][ T29] audit: type=1326 audit(1780918448.154:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.503586][ T29] audit: type=1326 audit(1780918448.154:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.532871][T13048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13048 comm=syz.6.2771 [ 490.547516][ T29] audit: type=1326 audit(1780918448.154:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.583786][ T29] audit: type=1326 audit(1780918448.154:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.615800][ T29] audit: type=1326 audit(1780918448.154:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.0.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f116fcace59 code=0x7ffc0000 [ 490.688653][T13053] netlink: 'syz.0.2772': attribute type 10 has an invalid length. [ 490.775850][T13062] netlink: 'syz.6.2775': attribute type 1 has an invalid length. [ 490.816865][T13062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.883914][T13067] bond3: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 490.938072][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2775'. [ 490.950350][T13028] syz.2.2770 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 491.097470][T13028] CPU: 0 UID: 0 PID: 13028 Comm: syz.2.2770 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 491.097548][T13028] Tainted: [W]=WARN [ 491.097558][T13028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.097575][T13028] Call Trace: [ 491.097594][T13028] [ 491.097603][T13028] __dump_stack+0x1d/0x30 [ 491.097636][T13028] dump_stack_lvl+0x95/0xd0 [ 491.097843][T13028] dump_stack+0x15/0x1b [ 491.097868][T13028] dump_header+0x80/0x240 [ 491.097892][T13028] oom_kill_process+0x295/0x350 [ 491.097965][T13028] out_of_memory+0x97d/0xb80 [ 491.098008][T13028] try_charge_memcg+0x62f/0xa10 [ 491.098046][T13028] ? radix_tree_lookup+0xfa/0x140 [ 491.098095][T13028] charge_memcg+0x6d/0x120 [ 491.098132][T13028] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 491.098168][T13028] __swap_cache_prepare_and_add+0x69/0x4a0 [ 491.098260][T13028] ? alloc_pages_mpol+0x217/0x260 [ 491.098300][T13028] swap_cache_alloc_folio+0xa2/0x120 [ 491.098335][T13028] swap_cluster_readahead+0x25f/0x3c0 [ 491.098413][T13028] swapin_readahead+0xde/0x840 [ 491.098444][T13028] ? _raw_spin_unlock+0x9/0x30 [ 491.098468][T13028] ? swap_put_entries_cluster+0x46c/0x490 [ 491.098504][T13028] ? __entry_text_end+0x1d908/0x102179 [ 491.098642][T13028] ? __rcu_read_unlock+0x4e/0x70 [ 491.098670][T13028] ? swap_cache_get_folio+0x1e0/0x1f0 [ 491.098922][T13028] do_swap_page+0x31e/0x2180 [ 491.098960][T13028] ? __css_rstat_updated+0xbb/0x280 [ 491.098991][T13028] ? __rcu_read_lock+0x36/0x50 [ 491.099028][T13028] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 491.099069][T13028] handle_mm_fault+0xb30/0x2e70 [ 491.099105][T13028] ? vma_start_read+0x1c7/0x2c0 [ 491.099158][T13028] do_user_addr_fault+0x62f/0x1050 [ 491.099199][T13028] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 491.099270][T13028] ? trace_page_fault_user+0x1f/0xa0 [ 491.099312][T13028] exc_page_fault+0x62/0xa0 [ 491.099351][T13028] asm_exc_page_fault+0x26/0x30 [ 491.099493][T13028] RIP: 0033:0x7f4a46f0a84f [ 491.099516][T13028] Code: b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 76 d5 3a 00 85 c0 0f 8e 53 fd ff ff e8 9d 7f fe ff 49 39 c4 73 88 48 8d 1d 51 b7 3a 00 <83> 3d 56 d5 3a 00 00 48 8d ab 00 1e 00 00 0f 8e 2e fd ff ff 66 66 [ 491.099541][T13028] RSP: 002b:00007ffd7f369130 EFLAGS: 00010283 [ 491.099564][T13028] RAX: 0000000000077ba6 RBX: 00007f4a472b5fa0 RCX: 0000000000077a10 [ 491.099590][T13028] RDX: 0000000000000196 RSI: 00007ffd7f369110 RDI: 0000000000000001 [ 491.099652][T13028] RBP: 00007f4a472b7da0 R08: 000000001835cd75 R09: 3fffffffffffffff [ 491.099671][T13028] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000077b9a [ 491.099690][T13028] R13: 00007f4a472b5fac R14: 0000000000077972 R15: 00007f4a472b5fa0 [ 491.099716][T13028] [ 491.131468][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2779'. [ 491.160138][T13028] memory: usage 285360kB, limit 307200kB, failcnt 2984 [ 491.196896][T13085] vhci_hcd vhci_hcd.0: invalid port number 0 [ 491.336130][T13028] memory+swap: usage 249808kB, limit 9007199254740988kB, failcnt 0 [ 491.486383][T13092] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2780'. [ 491.490089][T13085] loop6: detected capacity change from 0 to 256 [ 491.520029][T13092] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.2780'. [ 491.530932][T13028] kmem: usage 166624kB, limit 9007199254740988kB, failcnt 0 [ 491.572426][T13028] Memory cgroup stats for /syz2: [ 491.572815][T13028] cache 0 [ 491.605415][T13028] rss 53248 [ 491.618030][T13028] shmem 0 [ 491.628471][T13028] mapped_file 0 [ 491.644262][T13028] dirty 0 [ 491.657634][T13028] writeback 8192 [ 491.671395][T13028] workingset_refault_anon 2079 [ 491.689575][T13028] workingset_refault_file 17 [ 491.711150][T13028] swap 335872 [ 491.724417][T13028] swapcached 21225472 [ 491.736360][T13028] pgpgin 552406 [ 491.750224][T13028] pgpgout 552389 [ 491.761549][T13028] pgfault 366240 [ 491.781878][T13028] pgmajfault 287 [ 491.788960][T13028] inactive_anon 8192 [ 491.806094][T13028] active_anon 53248 [ 491.810077][T13028] inactive_file 0 [ 491.817118][T13028] active_file 0 [ 491.823722][T13028] unevictable 8192 [ 491.834915][T13028] hierarchical_memory_limit 314572800 [ 491.845665][T13028] hierarchical_memsw_limit 9223372036854771712 [ 491.874974][T13028] total_cache 0 [ 491.880373][T13028] total_rss 53248 [ 491.888677][T13028] total_shmem 0 [ 491.899937][T13028] total_mapped_file 0 [ 491.911786][T13028] total_dirty 0 [ 491.921954][T13028] total_writeback 8192 [ 491.952165][T13028] total_workingset_refault_anon 2079 [ 491.975999][T13028] total_workingset_refault_file 17 [ 491.997829][T13028] total_swap 335872 [ 492.014473][T13028] total_swapcached 21225472 [ 492.031557][T13028] total_pgpgin 552406 [ 492.041318][T13028] total_pgpgout 552389 [ 492.049921][T13028] total_pgfault 366240 [ 492.057123][T13028] total_pgmajfault 287 [ 492.064735][T13028] total_inactive_anon 8192 [ 492.073875][T13028] total_active_anon 53248 [ 492.087745][T13028] total_inactive_file 0 [ 492.096816][T13028] total_active_file 0 [ 492.102960][T13028] total_unevictable 8192 [ 492.107327][T13028] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2770,pid=13028,uid=0 [ 492.132811][T13028] Memory cgroup out of memory: Killed process 13028 (syz.2.2770) total-vm:94300kB, anon-rss:1276kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 492.229531][T13130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13130 comm=syz.2.2784 [ 492.254822][T13133] netlink: 'syz.6.2785': attribute type 10 has an invalid length. [ 492.269894][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 492.978550][T13166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 492.985211][T13166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.112696][T13166] vhci_hcd vhci_hcd.0: Device attached [ 493.360383][T13169] vhci_hcd: connection closed [ 493.360771][ T182] vhci_hcd vhci_hcd.0: stop threads [ 493.392175][ T182] vhci_hcd vhci_hcd.0: release socket [ 493.397809][ T3365] usb 2-1: SetAddress Request (2) to port 0 [ 493.410283][ T3365] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 493.428769][ T182] vhci_hcd vhci_hcd.0: disconnect device [ 493.451898][T13164] team0: entered promiscuous mode [ 493.458455][ T3365] usb 2-1: enqueue for inactive port 0 [ 493.471681][T13164] team_slave_0: entered promiscuous mode [ 493.479191][ T3365] usb 2-1: enqueue for inactive port 0 [ 493.495740][ T3365] usb 2-1: enqueue for inactive port 0 [ 493.503770][T13164] team_slave_1: entered promiscuous mode [ 493.521103][T13164] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 493.564340][T13164] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 493.631199][ T3365] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 493.662583][ T3365] usb 2-1: enqueue for inactive port 0 [ 493.671367][ T3365] usb 2-1: enqueue for inactive port 0 [ 493.688315][ T3365] usb 2-1: enqueue for inactive port 0 [ 493.998858][T13202] netlink: 'syz.0.2796': attribute type 10 has an invalid length. [ 494.063146][T13204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13204 comm=syz.0.2797 [ 494.547050][T13216] loop6: detected capacity change from 0 to 512 [ 494.562456][T13214] loop4: detected capacity change from 0 to 128 [ 494.569316][T13216] vfat: Unknown parameter '00000000000000000000004' [ 494.614097][T13218] syzkaller0: entered promiscuous mode [ 494.635067][T13218] syzkaller0: entered allmulticast mode [ 494.825320][T13230] loop6: detected capacity change from 0 to 8192 [ 494.970886][T13230] bio_check_eod: 6819 callbacks suppressed [ 494.971076][T13230] syz.6.2806: attempt to access beyond end of device [ 494.971076][T13230] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 495.773291][T13230] buffer_io_error: 6819 callbacks suppressed [ 495.773321][T13230] Buffer I/O error on dev loop6, logical block 57847, async page read [ 496.009151][ T3365] usb usb2-port1: attempt power cycle [ 496.061258][T13230] syz.6.2806: attempt to access beyond end of device [ 496.061258][T13230] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 496.857321][T13230] Buffer I/O error on dev loop6, logical block 57847, async page read [ 496.881631][T13242] netlink: 'syz.4.2807': attribute type 10 has an invalid length. [ 496.929100][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 496.929120][ T29] audit: type=1400 audit(1780918454.403:2536): avc: denied { write } for pid=13231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.037553][ T29] audit: type=1400 audit(1780918454.487:2537): avc: denied { write } for pid=13251 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.269775][T13276] vhci_hcd vhci_hcd.0: invalid port number 0 [ 497.374971][ T29] audit: type=1400 audit(1780918454.721:2538): avc: denied { write } for pid=13261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.405043][ T29] audit: type=1400 audit(1780918454.852:2539): avc: denied { write } for pid=13284 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.450737][T13288] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.486685][T13288] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.516745][ T29] audit: type=1107 audit(1780918454.945:2540): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 497.671152][T13301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13301 comm=syz.0.2810 [ 497.686318][T13298] syzkaller0: entered promiscuous mode [ 497.692707][T13298] syzkaller0: entered allmulticast mode [ 497.718831][T13277] loop4: detected capacity change from 0 to 4096 [ 497.829621][T13277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.869205][ T29] audit: type=1400 audit(1780918455.282:2541): avc: denied { write } for pid=13260 comm="syz.4.2813" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 497.928342][ T29] audit: type=1400 audit(1780918455.301:2542): avc: denied { write } for pid=13290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.015512][T13318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.024055][T13318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.029831][ T29] audit: type=1400 audit(1780918455.338:2543): avc: denied { write } for pid=13315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.056310][ T29] audit: type=1326 audit(1780918455.394:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.6.2823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038b4ece59 code=0x7ffc0000 [ 498.092472][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2821'. [ 498.101907][ T29] audit: type=1326 audit(1780918455.394:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.6.2823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038b4ece59 code=0x7ffc0000 [ 498.136916][T13317] vhci_hcd vhci_hcd.0: invalid port number 0 [ 498.417756][T13344] netem: change failed [ 498.435632][T13343] vhci_hcd vhci_hcd.0: invalid port number 0 [ 498.537009][ T3365] usb usb2-port1: unable to enumerate USB device [ 498.603207][T13363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2830'. [ 498.769503][T13374] syzkaller0: entered promiscuous mode [ 498.775125][T13374] syzkaller0: entered allmulticast mode [ 498.874504][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 498.900728][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2835'. [ 499.076769][T13404] vhci_hcd vhci_hcd.0: invalid port number 0 [ 499.146790][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 499.156669][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2835'. [ 499.271301][T13404] loop6: detected capacity change from 0 to 256 [ 499.783377][T13417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2844'. [ 499.795516][T12493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.796399][T13431] loop6: detected capacity change from 0 to 512 [ 501.877029][T13431] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 501.991643][T13470] Failed to initialize the IGMP autojoin socket (err -2) [ 502.051677][T13482] netlink: 'syz.6.2856': attribute type 10 has an invalid length. [ 502.098408][T13487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13487 comm=syz.0.2858 [ 502.217575][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2859'. [ 502.277198][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.308528][T13502] Failed to initialize the IGMP autojoin socket (err -2) [ 502.326294][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 502.326391][ T29] audit: type=1400 audit(1780918459.444:2678): avc: denied { write } for pid=13483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.374789][ T39] team0: Port device netdevsim2 removed [ 502.399154][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.414887][ T29] audit: type=1400 audit(1780918459.529:2679): avc: denied { write } for pid=13507 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.437195][T13509] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 502.500354][T13467] loop4: detected capacity change from 0 to 4096 [ 502.505477][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.585657][T13467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.604497][ T29] audit: type=1400 audit(1780918459.706:2680): avc: denied { write } for pid=13456 comm="syz.4.2853" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.750984][T13503] Failed to initialize the IGMP autojoin socket (err -2) [ 502.781877][ T39] batman_adv: batadv0: Interface deactivated: gretap1 [ 502.887717][ T29] audit: type=1400 audit(1780918459.978:2681): avc: denied { write } for pid=13520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.037445][ T29] audit: type=1400 audit(1780918460.052:2682): avc: denied { write } for pid=13547 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.162377][ T39] batman_adv: batadv0: Removing interface: gretap1 [ 505.135226][T13569] netlink: 'syz.6.2869': attribute type 10 has an invalid length. [ 505.237140][ T29] audit: type=1400 audit(1780918462.166:2683): avc: denied { write } for pid=13550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.266137][ T39] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 505.287579][ T39] bond0 (unregistering): Released all slaves [ 505.311536][ T39] bond1 (unregistering): Released all slaves [ 505.343212][ T29] audit: type=1400 audit(1780918462.269:2684): avc: denied { write } for pid=13573 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.425570][ T39] tipc: Disabling bearer [ 505.442493][ T39] tipc: Disabling bearer [ 505.468988][ T39] tipc: Disabling bearer [ 505.489275][ T39] tipc: Left network mode [ 505.542008][T13581] loop6: detected capacity change from 0 to 1024 [ 505.563569][T13581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 505.593900][ T39] hsr_slave_0: left promiscuous mode [ 505.635955][ T39] hsr_slave_1: left promiscuous mode [ 505.669772][T13581] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.692050][ T39] veth1_macvtap: left promiscuous mode [ 505.706214][ T29] audit: type=1400 audit(1780918462.606:2685): avc: denied { write } for pid=13579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.719762][ T39] veth1_vlan: left promiscuous mode [ 505.759390][ T29] audit: type=1400 audit(1780918462.662:2686): avc: denied { write } for pid=13597 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.799755][T13599] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2872: bg 0: block 112: padding at end of block bitmap is not set [ 505.837937][ T29] audit: type=1400 audit(1780918462.700:2687): avc: denied { write } for pid=13580 comm="syz.6.2872" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.008902][ T39] pim6reg (unregistering): left allmulticast mode [ 506.320288][T13632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13632 comm=syz.2.2870 [ 506.416441][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 506.427733][T13601] Failed to initialize the IGMP autojoin socket (err -2) [ 506.570776][T13657] loop6: detected capacity change from 0 to 1024 [ 506.613896][T13657] EXT4-fs: dax option not supported [ 506.632217][T12493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.951087][T13678] Failed to initialize the IGMP autojoin socket (err -2) [ 507.066288][T13699] netlink: 'syz.0.2881': attribute type 10 has an invalid length. [ 507.281237][T13710] loop6: detected capacity change from 0 to 1024 [ 507.290462][T13710] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 507.419708][T13710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.981036][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 507.981052][ T29] audit: type=1400 audit(1780918464.739:2698): avc: denied { write } for pid=13702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.047804][ T29] audit: type=1400 audit(1780918464.795:2699): avc: denied { write } for pid=13729 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.182408][ T29] audit: type=1400 audit(1780918464.926:2700): avc: denied { write } for pid=13732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.237488][T13745] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2886'. [ 508.274063][T13745] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 508.309243][ T29] audit: type=1400 audit(1780918465.029:2701): avc: denied { connect } for pid=13747 comm="syz.2.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 508.338743][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 508.416107][T13753] netlink: 'syz.4.2888': attribute type 3 has an invalid length. [ 508.499051][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 508.525475][ T29] audit: type=1400 audit(1780918465.244:2702): avc: denied { recv } for pid=13746 comm="syz.4.2888" saddr=fe80::1f daddr=ff02::1 netif=syz_tun scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 508.568716][T13748] hsr_slave_1 (unregistering): left promiscuous mode [ 508.582334][T13761] Failed to initialize the IGMP autojoin socket (err -2) [ 508.647563][T13756] Failed to initialize the IGMP autojoin socket (err -2) [ 508.869860][ T29] audit: type=1400 audit(1780918465.571:2703): avc: denied { write } for pid=13772 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.057726][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.360318][ T29] audit: type=1400 audit(1780918466.881:2704): avc: denied { write } for pid=13780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.398978][ T29] audit: type=1400 audit(1780918466.918:2705): avc: denied { write } for pid=13791 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.525189][ T29] audit: type=1400 audit(1780918467.115:2706): avc: denied { write } for pid=13797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.586645][ T29] audit: type=1400 audit(1780918467.171:2707): avc: denied { write } for pid=13808 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.870622][T13818] Failed to initialize the IGMP autojoin socket (err -2) [ 511.738254][T13908] Failed to initialize the IGMP autojoin socket (err -2) [ 511.797370][T13907] netlink: 'syz.0.2894': attribute type 10 has an invalid length. [ 511.818339][T13923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13923 comm=syz.2.2895 [ 511.947598][T13925] loop6: detected capacity change from 0 to 1024 [ 511.958305][T13925] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 512.047268][T13925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.086675][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): left promiscuous mode [ 513.117890][ T39] team0: Port device netdevsim2 removed [ 513.142092][T13972] Failed to initialize the IGMP autojoin socket (err -2) [ 513.364885][ T39] batadv1: left allmulticast mode [ 513.376885][ T39] batadv1: left promiscuous mode [ 513.391414][ T39] bridge0: port 3(batadv1) entered disabled state [ 513.409081][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 513.409097][ T29] audit: type=1400 audit(1780918469.818:2729): avc: denied { write } for pid=14000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.450880][ T39] bridge_slave_1: left promiscuous mode [ 513.468751][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.491385][ T39] bridge_slave_0: left allmulticast mode [ 513.506888][ T29] audit: type=1400 audit(1780918469.912:2730): avc: denied { write } for pid=14011 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.531108][ T39] bridge_slave_0: left promiscuous mode [ 513.539217][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.600440][T14018] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2900'. [ 513.675673][T14018] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 513.761919][ T6871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.007603][ T29] audit: type=1400 audit(1780918470.342:2731): avc: denied { write } for pid=14020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.172468][T14048] loop4: detected capacity change from 0 to 1024 [ 514.181699][T14048] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 514.199867][ T29] audit: type=1400 audit(1780918470.398:2732): avc: denied { write } for pid=14046 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.319156][T14048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.462062][ T29] audit: type=1400 audit(1780918470.725:2733): avc: denied { write } for pid=14053 comm="syz.4.2903" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 514.602513][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 515.351249][ T39] batman_adv: batadv0: Removing interface: gretap1 [ 515.410721][ T29] audit: type=1400 audit(1780918471.689:2734): avc: denied { write } for pid=14062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.515158][ T29] audit: type=1400 audit(1780918471.782:2735): avc: denied { write } for pid=14074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.616284][ T39] bond0 (unregistering): left promiscuous mode [ 515.624028][ T39] bond_slave_0: left promiscuous mode [ 515.639130][ T39] bond_slave_1: left promiscuous mode [ 515.664925][ T39] dummy0: left promiscuous mode [ 515.683665][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.716510][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.739596][ T39] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 515.756180][ T39] bond0 (unregistering): Released all slaves [ 515.770000][ T39] bond1 (unregistering): Released all slaves [ 515.869719][ T29] audit: type=1400 audit(1780918472.119:2736): avc: denied { write } for pid=14081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.929962][ T29] audit: type=1400 audit(1780918472.166:2737): avc: denied { write } for pid=14093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.044607][T12493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.117392][T14114] FAULT_INJECTION: forcing a failure. [ 516.117392][T14114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.131111][ T39] tipc: Disabling bearer [ 516.139424][ T39] tipc: Disabling bearer [ 516.151031][ T39] tipc: Left network mode [ 516.159781][T14026] Failed to initialize the IGMP autojoin socket (err -2) [ 516.171671][T14114] CPU: 1 UID: 0 PID: 14114 Comm: syz.4.2910 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 516.171714][T14114] Tainted: [W]=WARN [ 516.171725][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.171820][T14114] Call Trace: [ 516.171830][T14114] [ 516.171842][T14114] __dump_stack+0x1d/0x30 [ 516.171942][T14114] dump_stack_lvl+0x95/0xd0 [ 516.171966][T14114] dump_stack+0x15/0x1b [ 516.171985][T14114] should_fail_ex+0x263/0x280 [ 516.172006][T14114] should_fail+0xb/0x20 [ 516.172028][T14114] should_fail_usercopy+0x1a/0x20 [ 516.172072][T14114] _copy_from_user+0x1c/0xb0 [ 516.172101][T14114] do_fcntl+0x44b/0xf80 [ 516.172139][T14114] __se_sys_fcntl+0xb1/0x120 [ 516.172173][T14114] __x64_sys_fcntl+0x43/0x50 [ 516.172231][T14114] x64_sys_call+0x2844/0x3020 [ 516.172354][T14114] do_syscall_64+0x12c/0x3b0 [ 516.172398][T14114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.172483][T14114] RIP: 0033:0x7fa5c3b3ce59 [ 516.172502][T14114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.172526][T14114] RSP: 002b:00007fa5c258f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 516.172552][T14114] RAX: ffffffffffffffda RBX: 00007fa5c3db5fa0 RCX: 00007fa5c3b3ce59 [ 516.172575][T14114] RDX: 0000000000000000 RSI: 0000000000000410 RDI: 0000000000000003 [ 516.172592][T14114] RBP: 00007fa5c258f090 R08: 0000000000000000 R09: 0000000000000000 [ 516.172649][T14114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.172687][T14114] R13: 00007fa5c3db6038 R14: 00007fa5c3db5fa0 R15: 00007ffd6b456ee8 [ 516.172714][T14114] [ 516.351403][ T29] audit: type=1400 audit(1780918472.568:2738): avc: denied { write } for pid=14096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.379385][ T39] batadv0: left promiscuous mode [ 516.396125][ T39] hsr_slave_0: left promiscuous mode [ 516.402975][ T39] hsr_slave_1: left promiscuous mode [ 516.408822][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.416260][T14109] loop6: detected capacity change from 0 to 128 [ 516.423709][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.433086][ T39] veth0_vlan: left promiscuous mode [ 516.455412][T14126] netlink: 'syz.4.2912': attribute type 10 has an invalid length. [ 516.502405][ T39] team_slave_1 (unregistering): left promiscuous mode [ 516.509897][ T39] team0 (unregistering): Port device team_slave_1 removed [ 516.519901][ T39] team_slave_0 (unregistering): left promiscuous mode [ 516.527145][ T39] team0 (unregistering): Port device team_slave_0 removed [ 516.578569][ T11] lo speed is unknown, defaulting to 1000 [ 516.585166][ T11] infiniband syś2: ib_query_port failed (-19) [ 516.629091][T14144] netlink: 399 bytes leftover after parsing attributes in process `syz.6.2913'. [ 516.649159][T14144] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 516.676682][T14022] Failed to initialize the IGMP autojoin socket (err -2) [ 516.776873][T14157] loop4: detected capacity change from 0 to 128 [ 517.033189][ T39] IPVS: stop unused estimator thread 0... [ 517.074882][T14165] ================================================================== [ 517.083036][T14165] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 517.090203][T14165] [ 517.092561][T14165] write to 0xffff888107ee9c4c of 4 bytes by task 14157 on cpu 0: [ 517.100315][T14165] xas_set_mark+0x12b/0x140 [ 517.104901][T14165] __folio_start_writeback+0x17b/0x370 [ 517.110423][T14165] __block_write_full_folio+0x53a/0x8f0 [ 517.116028][T14165] block_write_full_folio+0x2c1/0x2e0 [ 517.121458][T14165] __mpage_writepages+0x763/0x1390 [ 517.126630][T14165] fat_writepages+0x26/0x30 [ 517.131199][T14165] do_writepages+0x1c6/0x310 [ 517.135848][T14165] file_write_and_wait_range+0x178/0x2f0 [ 517.141516][T14165] mmb_fsync_noflush+0x48/0x140 [ 517.146390][T14165] fat_file_fsync+0x98/0x110 [ 517.151003][T14165] vfs_fsync_range+0xc5/0xe0 [ 517.155621][T14165] generic_file_write_iter+0x1ba/0x310 [ 517.161111][T14165] iter_file_splice_write+0x6c4/0xa80 [ 517.166620][T14165] direct_splice_actor+0x156/0x2a0 [ 517.171768][T14165] splice_direct_to_actor+0x311/0x670 [ 517.177179][T14165] do_splice_direct+0x119/0x1a0 [ 517.182117][T14165] do_sendfile+0x382/0x650 [ 517.186555][T14165] __x64_sys_sendfile64+0x105/0x150 [ 517.191774][T14165] x64_sys_call+0x2dc4/0x3020 [ 517.196477][T14165] do_syscall_64+0x12c/0x3b0 [ 517.201105][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.207023][T14165] [ 517.209366][T14165] read to 0xffff888107ee9c4c of 4 bytes by task 14165 on cpu 1: [ 517.217010][T14165] xas_find_marked+0x5d7/0x620 [ 517.221811][T14165] filemap_get_folios_tag+0xfa/0x430 [ 517.227131][T14165] writeback_iter+0x4bb/0x800 [ 517.231834][T14165] __mpage_writepages+0x8a/0x1390 [ 517.236888][T14165] fat_writepages+0x26/0x30 [ 517.241420][T14165] do_writepages+0x1c6/0x310 [ 517.246033][T14165] file_write_and_wait_range+0x178/0x2f0 [ 517.251730][T14165] mmb_fsync_noflush+0x48/0x140 [ 517.256602][T14165] fat_file_fsync+0x98/0x110 [ 517.261220][T14165] vfs_fsync_range+0xc5/0xe0 [ 517.265834][T14165] generic_file_write_iter+0x1ba/0x310 [ 517.271317][T14165] iter_file_splice_write+0x6c4/0xa80 [ 517.276813][T14165] direct_splice_actor+0x156/0x2a0 [ 517.281972][T14165] splice_direct_to_actor+0x311/0x670 [ 517.287387][T14165] do_splice_direct+0x119/0x1a0 [ 517.292289][T14165] do_sendfile+0x382/0x650 [ 517.296735][T14165] __x64_sys_sendfile64+0x105/0x150 [ 517.301952][T14165] x64_sys_call+0x2dc4/0x3020 [ 517.306654][T14165] do_syscall_64+0x12c/0x3b0 [ 517.311276][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.317190][T14165] [ 517.319550][T14165] value changed: 0x0a000021 -> 0x04000021 [ 517.325282][T14165] [ 517.327619][T14165] Reported by Kernel Concurrency Sanitizer on: [ 517.333798][T14165] CPU: 1 UID: 0 PID: 14165 Comm: syz.4.2917 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 517.344764][T14165] Tainted: [W]=WARN [ 517.348589][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.358727][T14165] ================================================================== [ 517.369517][T14171] syz.4.2917: attempt to access beyond end of device [ 517.369517][T14171] loop4: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 517.383424][T14171] syz.4.2917: attempt to access beyond end of device [ 517.383424][T14171] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 517.399836][T14171] syz.4.2917: attempt to access beyond end of device [ 517.399836][T14171] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 517.413476][T14171] syz.4.2917: attempt to access beyond end of device [ 517.413476][T14171] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 517.436496][T14171] syz.4.2917: attempt to access beyond end of device [ 517.436496][T14171] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 517.450133][T14171] syz.4.2917: attempt to access beyond end of device [ 517.450133][T14171] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 517.477656][T14162] Failed to initialize the IGMP autojoin socket (err -2) [ 517.501970][T14171] syz.4.2917: attempt to access beyond end of device [ 517.501970][T14171] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 517.520685][T14171] syz.4.2917: attempt to access beyond end of device [ 517.520685][T14171] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 517.581926][T14171] syz.4.2917: attempt to access beyond end of device [ 517.581926][T14171] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 517.598910][T14171] syz.4.2917: attempt to access beyond end of device [ 517.598910][T14171] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 517.867652][ T3706] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.934784][ T3706] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.006066][ T3706] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.112719][ T3706] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.202220][ T3706] bridge_slave_1: left allmulticast mode [ 518.208000][ T3706] bridge_slave_1: left promiscuous mode [ 518.213871][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.223431][ T3706] bridge_slave_0: left allmulticast mode [ 518.229332][ T3706] bridge_slave_0: left promiscuous mode [ 518.235080][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.433589][ T3706] batman_adv: batadv0: Interface deactivated: gretap1 [ 518.515801][ T3706] batman_adv: batadv0: Removing interface: gretap1 [ 518.605177][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.619464][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.638021][ T3706] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 518.646597][ T3706] bond0 (unregistering): Released all slaves [ 518.700685][ T3706] tipc: Disabling bearer [ 518.705956][ T3706] tipc: Disabling bearer [ 518.712255][ T3706] tipc: Left network mode [ 518.719004][ T3706] hsr_slave_0: left promiscuous mode [ 518.724979][ T3706] hsr_slave_1: left promiscuous mode [ 518.730724][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.738243][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.746028][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.753663][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.762953][ T3706] veth1_macvtap: left promiscuous mode [ 518.768630][ T3706] veth1_vlan: left promiscuous mode [ 518.773943][ T3706] veth0_vlan: left promiscuous mode [ 518.845450][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 518.855740][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 519.161957][ T3706] IPVS: stop unused estimator thread 0... [ 519.190946][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 519.190963][ T29] audit: type=1400 audit(1780918475.225:2759): avc: denied { write } for pid=14284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.226594][ T3706] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.238097][ T29] audit: type=1400 audit(1780918475.271:2760): avc: denied { write } for pid=14295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.326788][ T29] audit: type=1400 audit(1780918475.346:2761): avc: denied { write } for pid=14297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.352716][ T3706] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.366734][ T29] audit: type=1400 audit(1780918475.393:2762): avc: denied { write } for pid=14308 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.407589][ T3706] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.465075][ T29] audit: type=1400 audit(1780918475.477:2763): avc: denied { write } for pid=14310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.492258][ T3706] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.505838][ T29] audit: type=1400 audit(1780918475.515:2764): avc: denied { write } for pid=14321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.590241][ T3706] bridge_slave_1: left allmulticast mode [ 519.595976][ T3706] bridge_slave_1: left promiscuous mode [ 519.602016][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.610126][ T3706] bridge_slave_0: left allmulticast mode [ 519.615846][ T3706] bridge_slave_0: left promiscuous mode [ 519.622017][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.634308][ T3706] batman_adv: batadv0: Interface deactivated: gretap1 [ 519.641378][ T29] audit: type=1400 audit(1780918475.636:2765): avc: denied { write } for pid=14323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.701936][ T29] audit: type=1400 audit(1780918475.674:2766): avc: denied { write } for pid=14334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.785649][ T29] audit: type=1400 audit(1780918475.777:2767): avc: denied { write } for pid=14336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.827756][ T29] audit: type=1400 audit(1780918475.805:2768): avc: denied { write } for pid=14347 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.870537][ T3706] batman_adv: batadv0: Removing interface: gretap1 [ 519.930681][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.940911][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.951027][ T3706] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 519.959657][ T3706] bond0 (unregistering): Released all slaves [ 519.968081][ T3706] bond1 (unregistering): Released all slaves [ 519.977905][ T3706] bond2 (unregistering): Released all slaves [ 519.987672][ T3706] bond3 (unregistering): (slave veth1_to_team): Releasing backup interface [ 519.997746][ T3706] bond3 (unregistering): Released all slaves [ 520.038325][ T3706] tipc: Disabling bearer [ 520.043628][ T3706] tipc: Disabling bearer [ 520.049935][ T3706] tipc: Left network mode [ 520.058459][ T3706] hsr_slave_0: left promiscuous mode [ 520.064243][ T3706] hsr_slave_1: left promiscuous mode [ 520.070159][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.077569][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.085365][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.093367][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.102323][ T3706] veth1_macvtap: left promiscuous mode [ 520.107960][ T3706] veth1_vlan: left promiscuous mode [ 524.629465][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 524.629489][ T29] audit: type=1400 audit(1780918480.304:2841): avc: denied { write } for pid=14899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.666154][ T29] audit: type=1400 audit(1780918480.351:2842): avc: denied { write } for pid=14910 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.777480][ T29] audit: type=1400 audit(1780918480.444:2843): avc: denied { write } for pid=14913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.810583][ T29] audit: type=1400 audit(1780918480.482:2844): avc: denied { write } for pid=14924 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.925338][ T29] audit: type=1400 audit(1780918480.585:2845): avc: denied { write } for pid=14927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.959507][ T29] audit: type=1400 audit(1780918480.622:2846): avc: denied { write } for pid=14938 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.070578][ T29] audit: type=1400 audit(1780918480.725:2847): avc: denied { write } for pid=14941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.104247][ T29] audit: type=1400 audit(1780918480.762:2848): avc: denied { write } for pid=14952 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.213850][ T29] audit: type=1400 audit(1780918480.856:2849): avc: denied { write } for pid=14955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.246948][ T29] audit: type=1400 audit(1780918480.884:2850): avc: denied { write } for pid=14966 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1