last executing test programs: 4m6.221084841s ago: executing program 3 (id=300): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x7c9d, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) inotify_init1(0x80000) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff02000000"], 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000010200"], 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000240)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@errors_remount}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xfffffdef}}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=r3], 0x30}}, 0x41) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x2e, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e8721b8ac2e30000ff5ee018d48c7c3b54f8dbdeee0aab7d3d8edaf144e5d52400000000000069"}}) 4m5.60912658s ago: executing program 3 (id=304): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab", 0x141}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3", 0x3e}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xe062, 0x3, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0x7}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x5, 0xb01, &(0x7f0000001fc0)={{0x12, 0x1, 0x250, 0x69, 0x34, 0x1f, 0x8, 0xdda, 0x1, 0x12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaef, 0x2, 0xab, 0xfc, 0x90, 0x61, "", [{{0x9, 0x4, 0x15, 0x40, 0xb, 0x3c, 0x90, 0x9c, 0xd0, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0xfc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x1, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0xfffe}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x0, 0xf7, 0x0, [@generic={0xaf, 0xa, "11dab96d3b2b3ae53373296a41f7afe2309ea9d37e4fee3e1b217a6f6cede49fcd0944ed2a828d53cf8756cae4dca3211ce554890659d4d98ea1a4f30c1db3d5526901d48431abffa52d40f1de39f5ec2445f9d35d97f9316f8beca7d1f4899f8dd8b5adf500165f3cad2b340156dc929ea5cbbd3bc8e759f3882d6471e32ad38576bfbc08fcfc2e27825b64683fd7548c9da8b87ccedae1887ce54499d3fdf205cd84c666f19f314b871e10df"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x9, 0xc0, 0xfc}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x8, 0x3, 0x7, [@generic={0x7e, 0x5, "9ed0d1567a21ec82bad8db858815fee0275df45f2825a3d133d682e3e6bf8c23211b3f0f800843344b7bbd89b23ef428ed9c833e5678ba734650a6a4a834bfd9b08f55a9c7c3b32834110fbe7942e620adfe83c35de614ec79e9482ec0a12c56f00d1271df596f57a3f2f647bc79938ddfa9a5344d5978205b90ca09"}, @generic={0x1f, 0x9, "5b0f39ccd2f3e971558e4a13cfef716ae8702fc2896bb8ab286e3b9cec"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x3, 0x9a, 0x1, [@generic={0x96, 0x1, "4a154a6868555a09084002ced202444ec93300ceb347d84e8accb4e9ff21003864132a3ca43b5c0ada812b936acdc344cb7141f2a4468c13e0ad970a1fbd68fb4ebb41c59f47aa20793c6583db0bcfb8702555c54c74565add4e3bb6b8a28e1bb666177735fd285435f917a934357d5956729078eef6f5e600605d63bfb0569fb7ec2c66d982e8dc1914ea8b49c3e5f3fe985ba8"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x2, 0x3, 0x4, [@generic={0xd1, 0x1, "981cb5aac4fe2e3aa72e51aefd34bd156f887ae16757766e8dba3971ff34da508f84373715e844c78069613215575f7c1cf7db2ac5d248d55545d5f3cb2771d34dde1bfce85e5bc29086e2fb145ef965e1b90fbf197f53a34f1a793cccc3cdbe99e05ccd9f778b7f1328abbc7cb4f8e0ac4c7dd2816dc588f1d7965eb15ab41b63d0bb8133f036006005b8632679f7292134e92a69b67c29a238dfb424c38b5a25868f4c392231d7a62bd982edb1ad36f2b2e6a6b2813126535a1d162a7e2fe49a9447ad8973bb927d8a77649befb6"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xc, 0x7, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x1ff, 0x7f, 0x1, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0x1, 0xe, [@generic={0xe8, 0x24, "e3ea67dbbec5a21dabb53ab0e272c51db0cf0a70b7656003db62dd1bed6c253e195b08acb04b3e0960fbafd5b2177427dd661c49389a6e61c3f4fda8f5939b8451b6a4c2134e1ebab7d5886890e9f81a7786655bd7aac004099b73b782481d7a1d956265885e1f3c667fa1d92ba8363489fbc1bf66d0a5d382698b678559ba66db39be1bc0db185637ff5eefcc6909e17cc93d27a7e25c88be8c5fe7ca6cb9d46c28647e1f3abfc7b17c54f7ca7fbdab841e6c4e8ccfdfe83aeb314c97805e88a79fac21e9501b99862c5e5226ab2cdba9e2fe811e6e11de58f45ee146db7bd88ab90ae933c5"}]}}]}}, {{0x9, 0x4, 0x65, 0x9, 0xd, 0x2, 0x2, 0xff, 0xd, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x6, 0x40, "07d41410a93f7c071c"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0xc, 0x66, "71691d16"}]}], [{{0x9, 0x5, 0x3, 0xc, 0x10, 0xd, 0x38, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @generic={0x3b, 0x27, "a85c2e1535473e91e73d6b5b744121c537b36e813f0a7a9cf4cc4e5797041652f2e2010b9efe27521099d8b160c53e9bef30442e91aef4ca59"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xd, 0x1, 0x5, [@generic={0xf6, 0xb, "d5b7c19be33823f1d6bee9c4a3ef857d06fbd29c84c2cb72c2ceefa717dec887f12b48c54a8abe6f27274729ad8d0173095800fdf9a805982e5afbea0d44b1aabc45b9c80ca8603e116eb38517774b6d582eb48182750869918e8a30db10931f0c610eaa4e1cc55811759e9e79aeae4e495b820a87d54d6d46e0b0341f587dc6239b86d59ef6bf7953856119572eb7f83edd28c1f8c18acaf7db7bf305768574a3591a8d254641642709713136a66b4f5a6409d03995317e80d9ff490160591d37b460bb042526011dc8bbae8424df0094ff4b0c5a8770f9d5d11215a37425184786b8694eda91f73753ea95c3703f30d4d5b1ec"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0xc, 0x43, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x16}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x54, 0x7}]}}, {{0x9, 0x5, 0x89, 0x10, 0x400, 0xc4, 0x58, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x3}, @generic={0x100, 0xf, "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"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x5, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x4}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x6c, 0x9, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xab, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1b}, @generic={0x10, 0x22, "775a9c90603bbd8c73f1d04c6b75"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x6, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xfff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x89, 0x2, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5a69}, @generic={0xba, 0x23, "c754cfcfd14fdc2ddada7622413f4e43568d95afc5a9616db39a8b34d64af2d01c9afc09eb41ed4d6a9cb215680892958364d4baaf063de872a67e57b68fca44386d7ee9cba01b99ac42a1ee2001802b6e60ab47be44e519a3b562a67fc64a974524528f2a1ce38d15a90f83a763258fb898f1837af57470e32a61af1be3b553a47775251cddab38ef5918269bd659e3207031e0725e67433f850f65b26497929478463ae495c4adc19f695d60ab017eea7c00f41febe088"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x8, 0x7, [@generic={0xba, 0x5, "f19794d35a0922a78d67cbf74a665ac08ecfa0ba664c94a0af12599d7ddfc73dabb712dfd2fbeaadebd93de6cface07e2189aedaab495cd809f2d603753691372d98ce9906caf5eacf4ab44375d3d5341093090f0d7b0abab7ca3342506afc0a5d4cdf56f8564d75420993b50885fbf8fbd4eec59bf65a11527149e884f1e3afacff7a8e5dd4e5c038ad17adcb91b593207e4cd4010409c5efe2e7ea049099a0a8754fc16f768f4ecef52c48598470f9ce3e16fc618fe197"}, @generic={0x66, 0x21, "421dcd4719fed2de8298b07b20ac465c99f04e3545de9b13bdc21f618340a467035d668de95cbfbd5fbaefeca6207822fd3daf4ca5b19b7383a227ce26aed0c854006d74c06361c833f65e4d26629b115a82f8d091e77d1377dad2412bb9941588f73106"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x16, 0xa1, 0x6, [@generic={0xd8, 0x3, "a96a08c80037afb6be2fe7db2bd6c5a56dbc6d4344cf5cb199e8f327c088ab2d4063942c17e71b8b00a061cb05f0792495f8e9fd31b3b29b42946bc8a9ee7f4c245fa63222fdf05508240d998f22a661b238ff68ff85f19ae7d10af04ab33c4d839d1af8a2333ef9b3952a25958bb768d2c6b03b00c41376837b4a5b81b2c229f4fadbfcc4466d8b2df260bd16c39c3c65dec72c0da731357287d508b7f64bd8c97007e8078d9315fe7e6cd7b431cf9d1a4d553c5bd751e127c2cace781fbb9280e74d49a6223821dea6a0d6bf2f7736e45c8b1400a9"}, @generic={0xfb, 0x3, "259c71ab8819401606e2ae0776eb2ae5444078752275d819db05c5482b5d12700e7d86980d4272bc045c72a97fb25916feecdccd22c5ba98cc8310c7528e6992a2bdefd4172dd213701617e57d94d6d3e148ab1f2ad1d7cff9fa5dfc8a0eb7df2e5ff441d9671fbb618d468cf143d19cc482c25af1de60bbcb8a5cd21af769dad7e9d6850e3478938f01a862dbc4a715e77e9ded9a2555ee1294f209e3a0679f1e6c7058c2a837d4b3d8127ad55cadf3fcabaee6dd8aa9c3c0fce901d821f5c3db4908f6945a4d8cf3063677919bf79add36dc5909a7917ddc5485750dbaa5aa5d18f69fbe4f0a99ee4d42b6a461f7f6d1157e5daa138bc4ef"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x220, 0x9, 0x7, 0x97}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x40, 0x9, 0x5a}}]}}]}}]}}, &(0x7f0000002cc0)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x310, 0x3, 0xad, 0xb1, 0x20, 0x9}, 0x2a, &(0x7f0000002b40)={0x5, 0xf, 0x2a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x5, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x2, 0x7f, 0x2b64}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xba, 0x9, 0x401}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x8}]}, 0x4, [{0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x81a}}, {0x7d, &(0x7f0000002bc0)=@string={0x7d, 0x3, "b920c50f5a596f59f94f1c729b9a8f42f49545d11ebdb090df2669a9315769d6d5adc2f6269b577eb1b47b1238e17b651b82ef7d3cd44a1cc5f7f0eb76455cbe9c4718c3f27e0ff7d0940920bcacca775d865aa99e5369dd0b5201b3e1c4583e2ae0d68f72c2aa43bcacf37f0fcf4f679485bf62d8bbc67a9e206d"}}, {0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x1009}}, {0x3, &(0x7f0000002c80)=@string={0x3, 0x3, "e1"}}]}) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) 4m4.778688047s ago: executing program 3 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 4m4.730563248s ago: executing program 3 (id=319): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x7f}, 0xc) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x2, 0x80) r2 = epoll_create(0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000001c0)={r1, 0x0, 0x9, 0x80, 0x4f65, 0x4, [0xfffffffffffffffc, 0x3836, 0x9, 0x8, 0x2, 0x5]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @dev={0xac, 0x14, 0x14, 0x1}, 0x4e20, 0x3, 'fo\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x3, 0x1, 0x9, 0xfffffffb}}, 0x44) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"000037e45bd17505546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) 4m4.456558157s ago: executing program 3 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xb, 0xb}, {0xf, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc020}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff9151, 0x7}, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m3.622512343s ago: executing program 3 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x27, 0x80000, 0x7e1) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x0, 0xb, 0x14, 0x3}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) 4m3.622256003s ago: executing program 32 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x27, 0x80000, 0x7e1) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x0, 0xb, 0x14, 0x3}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) 3m56.709295362s ago: executing program 0 (id=360): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 3m56.594483336s ago: executing program 0 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001040)={0xb1, "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"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x301a80) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) readv(r5, &(0x7f0000001540)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r7 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000001c0)=0x2001) r8 = fcntl$dupfd(r7, 0x0, r7) readv(r8, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000088000000180100002020643700000000000e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) write$tcp_mem(r10, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) r12 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000000)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0x0, 0x0, 0x0, 0x5, 0x60000, 0x1, 0x802, 0x6, 0x0, [{0xfffffe69, 0xf7db, 0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r14}, &(0x7f0000001d80), &(0x7f0000001d40)=r13}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r14, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x800, 0xfff}, 0x10, 0xf3c7, r0, 0x3, &(0x7f0000000540)=[r6, r8, r9, r10, r11, r14], &(0x7f0000000580)=[{0x3, 0x4, 0xb, 0x1}, {0x3, 0x4, 0x1, 0xc}, {0x1, 0x5, 0xc, 0x9}], 0x10, 0x7f}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffe55, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shutdown(r0, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 3m55.737705013s ago: executing program 0 (id=363): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r4 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x80000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "000000000000000000faff00", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f60ed4bd44a7ec4f", "53c2729483efef57e358e2dff8a4a8d2", '\x00', "6f000000ffff65cd"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000700)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c855f58eb192cbc5dedcff5f1a19734e253a03079b9396842906e486990365cb705a0e4e3f648a91bad33e1d9c1be8bc5992ede58365b3dc858c38794da48c34d24a1557e0fc43150a62c1d1225f9a51d19f1b2606972739f9e027d15be12ee570e683d0151a8698884d6c8d05afe5d5afb700e594ef8d3aa17492786b85f441597ea9f6479bd047ef6e61c8280e8a6710700b0e196bf2e6fd399c3a817b5605e594a27fc07ea2aba5430ace211fd5f561d653e54e85ddcca7620d6be2657e5fce169d4f170232d0fd3f1a3d9b599bcbe765000e5091f27dde78d0feb78d5de3b0397635d81e229ea00e5efa7052db8cffcb0290ef2b165497615dc7eafbdf5e4adfd536f2fc257fb164683216fa1ea51d22c59a2fcd654dd5475be8c62b5f15e3cc99e18fb1f646299a456d795902ba6ce70efa432ca9f50149f2fa37002c3f74506c774a25e2a0ac978bf405722480c7bf4c8b9bfbea016752c915105d5f1debfd33b2d7766c44116ad0f0952950304c5dac00ca3aa9c518b5e00daa6bbbffe7b6a4052c4f659f4144768d082048a0f92cac2b01ebabefa55058051056a172c9a9ae1823dc0abcb3748302a7ed130bd563f991304fd7955c1023b7915df60b50b6f749d38f42a65dc0789d66158826dc9c3f8762dffd884638b0a7e15edc33f70d71e6ba28ce5569ae2c23b7c71ef118e33350ee3ade0cd145124324dd051c8ba214861724a5dbdf4ebfe7cb5b5880ffe571d511fb2a4378cd7f97cf1facec9be6d8e3a26c863501eb6956c86f56de557bfcc677fa2c8c4ae3ace046b563ea1d2c10cdaf433b88b8533043ec382a41f91ecd3889d332d733560503ba0fa6edd5bd4efe1d67c1c9dd66b2e32f84ab8558ee05cf466efa964bf6f069f4fbf5c18b5aacec6555cb639957d27c2993271491d49c286bdf2beb2b7abdc43294541aeb0e838c274501b65166217b65aba77311e4cfb4b04b15039ddb45dee3d6d384f158340eabb7e85fe2c99e29677733a5c2519b8b3861cae41bf039e3225b56e1a5869387223326ecf6a700d8b66bc6eca4021c8b51ad0ecb8f05e8ae9e0ecc0486bb62f3cf91e68350db133362f9d366f2df87620bf5f04c3dedb9a14d4abb27969c3588d743cc2783920a1bf16aeb94519bf5287494ea65add2ea21e325520718ccb1d4e59a98cd9ba9dd1c33214263b61fbc00f9c698d3e9151a1b3fcc967421ce55bf34ae52e43b9c891bfed8b5c40f9b587ecc82b49711384f780f8f9a8f51f1d094803cb4233091646ac3f7b562a99955f0180e4acdad8c510a7d55d29c64fd4ce74d4d80d782b76ec33756151cda389a1e88124668091b7c32d8c5c993704597a62a1c90276e6dcbdb0834071fe19e58fe49547c0014c3d6489422761a5c6756c7db9e000c28927d41036afc500d51b19572ce23cc3d4fad112f58dd8f96531b40675c69c1401208909cb219a1687f4c9343a62642947393a5915805231ce9285af24e9b4d0db58a20b7d57097c3d6249867d4cc1260333aeb79ce9ee2a2c381af5043ea5313daf5a1e801176bea4c1da00fc3a66a12adec02f9383ecd05cba6d4249ea17822a8fde676984d955a92a366bb5ef2cab1ba34583baac450aae77ffaea53b8b6827b8e17e8656ef00b4db8488facc9ff07dd71aa2026e2d38eba66043454970221ded03d42a897cbba3135d6ba7f25b32e87bb28d3de44ebd92836b78549db24cfbbffacb7834a21827614dd1525b2db1d5ed7c0d6fef592798d8bbd5415b81657e74000dcbb3708eff98fc2a7068a2c86e557b0d65785e75f91ddd9da748574335eca12bdd7cbef736507cb8b7d5f069c85f1eb676f360bf99c8ef84a2b05080b329cfb1cc4fec775b77561bbbd32b73d4698ad7c0db6151e575d47cb8dc0c3b9600cf0563fbb43e5be4ed35c5f0e7959fc8993b0b4069d264d40ec31f547f64625e14ffbcd9f31ac8d2eb1c915ebdf65dc4a4a3031bfe3328f1b7aa98786755dbbd625c3263e15ec9f10f38ed4b866886d9c723d3b6c87bdbd229de2287964a8e4f9a5cc628a98f34bba5fcbcd2880183bf90f0ad81cb8990ff16a850c646050b8a3b90188a2538731a6033a3ae0ed5c1f340e3c52139b13520a9519c948e3", 0x681}], 0x1) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) tee(r4, r0, 0xffff, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x8]}, 0x0, 0x8) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r7) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1000290300000008000700ffffed001000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x20000440}, 0x20000840) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES16=r6], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r7) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf253100000008000200", @ANYRESHEX=0x0, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES64=r6, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000007c0)) 3m55.562440178s ago: executing program 0 (id=364): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x7f}, 0xc) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x2, 0x80) r2 = epoll_create(0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000001c0)={r1, 0x0, 0x9, 0x80, 0x4f65, 0x4, [0xfffffffffffffffc, 0x3836, 0x9, 0x8, 0x2, 0x5]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @dev={0xac, 0x14, 0x14, 0x1}, 0x4e20, 0x3, 'fo\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x3, 0x1, 0x9, 0xfffffffb}}, 0x44) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) 3m55.279425667s ago: executing program 0 (id=365): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffc, 0x0, 0xfff, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x0, 0x0, 0x320, 0x1c0, 0x0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00', 0x39, 0x16}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000003c00)=""/4108, 0x100c}], 0x2}, 0xec}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[], 0x20}}, 0x0) 3m54.934427769s ago: executing program 0 (id=366): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003"], 0x108}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x190, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x2018, 0x1, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) syz_io_uring_setup(0x42, 0x0, &(0x7f0000000140), &(0x7f0000000000), 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x4c040) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3m54.87814977s ago: executing program 33 (id=366): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003"], 0x108}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x190, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x2018, 0x1, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) syz_io_uring_setup(0x42, 0x0, &(0x7f0000000140), &(0x7f0000000000), 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x4c040) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 6.069912179s ago: executing program 6 (id=2108): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f0000000ac0)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x5, 0x2, "2a34238e205b4e797402b50dcd9910eb63ae46095ed54f3e179619f1d5656d791f30ed0a874fdc2353c4f594d4ef416ceadbb2b2cbf7e3004ab1ffb744ac63", 0x17}, 0x80) socket$inet(0x2, 0x800, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x54000, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRESHEX=r0, @ANYRES8=r4], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x10001}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x10ff81, 0x0) 5.946132712s ago: executing program 6 (id=2111): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x4e20, 0x40001, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r0) r1 = socket(0x11, 0x2, 0x2) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socketpair(0x6, 0x1, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$eJzs3d9rXFkdAPDvvcn0Z2pS9KEWrMVWkqKdSRrbBh+qguhTQa3vNSaTEDLJhMykbULRFP8AQUQFn3zyRfAPEKR/gggFfReVXZbddvdhYXc7y9yZSdN0pknpZKZNPh84M+ecuXe+58wwZ+6593JvAIfW+Yi4EBFPa7XapYgYbtanzRSbjVRf7snj+zP1lEStduv9JCJp1NUXG9v2niebqx2LiJ/8MOLnyYtxK+sbi9OlUnG1WS5Ul1YKlfWNywtL0/PF+eLy5OTEtanrU1enxrvSz6GIuPH9///u13/+wY2/f/Puf26/O/aLpFkf8awf3dboei77LFoGI2J1P4L1yWDWQwAA3gat7fyvRcSlGI6BbGsOAAAAOEhq3xmKT5OI2g5Hd1YAAAAAb600Owc2SfPN8wCGIk3z+cY5vF+KE2mpXKl+Y668tjzbOFd2JHLp3EKpON48V3gkckm9PJHln5WvbJWTrDwZEacj4rfDx7NyfqZcmu33zg8AAAA4JE7umP9/NNyY/2/zSd8aBwAAAHTPSL8bAAAAAOw7838AAAA4+Mz/AQAA4ED70c2b9VRr3f969s762mL5zuXZYmUxv7Q2k58pr67k58vl+eyafUu7vV+pXF75Viyv3StUi5VqobK+cXupvLZcvb3w3C2wAQAAgB46/dWH/04iYvPbx7NUd6TfjQJ6YvBVFv7f/rUD6L2BfjcA6JtX+v8HDpRcvxsA9F2yy+sdT975R/fbAgAA7I/RL7c//p/uum9gM+1RE4F9Yv8fHF677fcDDi7H/+HwysVAmMjD4bbbJUBf//h/rfZKDQIAALpuKEtJmm8e8x+KNM3nI05lc4JcMrdQKo5HxBci4l/DuaP18kS2ZuLYAQAAAAAAAAAAAAAAAAAAAAAAAADsUa2WHK0BAAAAB1pE+k7SvA/w6PDFoZ37B44kHw9nzxFx94+3fn9vulpdnajXf7BVX/1Ds/5KP/ZgAAAAADu15umteTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNOTx/dnWqmXcd/7XkSMtIs/GMey52ORi4gTHyYxuG29JCIGuhB/80FEnGkXP6k3K0aarWgX/3gf46cRcbIL8eEwe1gff77b7veXxvnsuf3v71o2Qr2+zuNfujX+DbSJX687tccYZx/9tdAx/oOIs4Ptx59W/KTD+Hdhj/F/9tONjU6v1f4UMdr2/yd5LlahurRSqKxvXF5Ymp4vzheXJycnrk1dn7o6NV6YWygVm49tY/zmK397+rL+n+gQf2SX/l/cY/8/e3Tv8Rcb2dzW6smz+GMX2n//ZzrET5vf/9eb+frro638ZiO/3bm//PPcy/o/26H/u33/Y3vs/6Uf/+q/e1wUAOiByvrG4nSpVFw91JnX+jTqm0VvRC/ezEz9c30DmtE288t9eOf6lnm/+9WNTF+HJQAAYB+8OAcGAAAAAAAAAAAAAAAAAAAAeq0XlxPL7Yi5mT124+r5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd83kAAAD//7kT0VY=") r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) listns(&(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0], 0x1, 0x0) 5.849350365s ago: executing program 6 (id=2112): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x1b, 0x4, 0x4, 0x50005, 0x803, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000000, 0x0, 0x1}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 5.815755907s ago: executing program 6 (id=2115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01072bbd74000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 5.735641659s ago: executing program 6 (id=2117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1fd) fchdir(r3) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x80010, r6, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x401f, 0x6a100, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) close(r0) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) listen(r7, 0x5) 5.145974218s ago: executing program 4 (id=2128): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x1, 0x0, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1d8}}, 0x4000814) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000140)=0x32, 0x4) fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f00000001c0)=@v2={0x2000000, [{0x79, 0x5}, {0x1000, 0x6}]}, 0x14, 0x2) preadv(r5, &(0x7f0000002780)=[{&(0x7f0000000100)=""/80, 0x50}], 0x1, 0xe97, 0x0) 4.026313013s ago: executing program 4 (id=2152): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x6, 0x10001) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:tty_device_t:s0', 0x20, 'staff_u\x00'}, 0x2a) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r6, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10}]}, 0x38}}, 0x24000000) sched_setaffinity(0x0, 0xfffffffffffffccd, &(0x7f00000001c0)=0x2) unshare(0x64000600) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000047"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r8, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) read(r7, &(0x7f0000001180)=""/4096, 0x1000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 3.207209639s ago: executing program 4 (id=2163): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4a7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x3, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000180)) sendto$inet6(r7, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r10 = openat$cgroup_ro(r5, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x5, 0x9, 0x43, 0x0, 0x1000, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x56703e53e0c469ad, 0x9, 0xb613, 0x3, 0x3, 0x9, 0xbf, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r0, 0xc, r10, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 2.56111303s ago: executing program 2 (id=2172): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0xffffffff}, {0x7}, {0x6, 0x2}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) io_uring_setup(0x2628, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x805, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fe, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000006}, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg$sock(r2, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003800)=[{0x0}, {&(0x7f0000002780)="9832", 0x2}], 0x2}}], 0x1, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8ea, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000011c0)={&(0x7f0000001080), 0x10, &(0x7f0000001180)={&(0x7f0000001100)={0x4, 0x800, 0x8, {}, {r3, r4/1000+10000}, {0x0, 0x1}, 0x1, @can={{}, 0x2, 0x2, 0x0, 0x0, "f8a7dbb4a01b9db7"}}, 0x48}, 0x1, 0x0, 0x0, 0x8980}, 0x40) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x200040c0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820f522e5bab4e21000fff0058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeff0180004000fff5dd0000000a0002000400080004000000224e0000", 0x58}], 0x1) 2.23289066s ago: executing program 4 (id=2175): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clock_nanosleep(0x6, 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@rnullb, r6, &(0x7f0000000680)='./file0\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.095160714s ago: executing program 6 (id=2178): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sched_setscheduler(r4, 0x1, &(0x7f0000000340)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) close(0x3) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000005780)='./file0\x00', 0x9400002f) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r8, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @empty=0xac14140a}}) 2.023509617s ago: executing program 1 (id=2179): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f0000000ac0)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x5, 0x2, "2a34238e205b4e797402b50dcd9910eb63ae46095ed54f3e179619f1d5656d791f30ed0a874fdc2353c4f594d4ef416ceadbb2b2cbf7e3004ab1ffb744ac63", 0x17}, 0x80) socket$inet(0x2, 0x800, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x54000, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRESHEX=r0, @ANYRES8=r4], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x10001}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) socket$inet6(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x10ff81, 0x0) 1.93415789s ago: executing program 1 (id=2180): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) timerfd_create(0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) socket(0x2, 0x5, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.90765963s ago: executing program 1 (id=2181): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x200040, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000400)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, '\x00', "bc7c7a8486ae9e78680d4bed7ecd4c126dd9020ed5312aacc6a9a8cbb5338cbf24bd5a43ec42c09a9d7f00000057268c6d4c938e6cff904373a1ef4ff7a89b37a87bc443e72280e10e86b93f190f552bcbf7a5ca2f739bc2053979799a1e62a4038c0382effdd696af6cfee70aab1812ad2d571539d059b60ffb188a89b7f7f7a2605c0d3d27498572f0b031e37ba158099858eb2a3802158d5e11c34bbbdf4add57a0514979a472e0b1cfbc0a265ee102fe0266e4f45f18a9694adfc1e1f6db8de23a668ad8f1d39d826f4b4b845374a723ccdfae40c96c2d80928e8d649a78d7ad5e33fa090792a93cab4a1990eb63bb51f992afec4cf925fdcc6e66c01560"}}, 0x110) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0xb7, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000140)=0xfffffff5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) recvmmsg(r9, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x604040, 0x0) waitid$P_PIDFD(0x3, r10, 0x0, 0x4, 0x0) 1.801440094s ago: executing program 1 (id=2182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1) 1.800961044s ago: executing program 1 (id=2183): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x63, 0x33, 0xff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sock_ops}, 0x94) 1.773440765s ago: executing program 1 (id=2184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1fd) fchdir(r3) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x80010, r6, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x401f, 0x6a100, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) close(r0) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) listen(r7, 0x5) 1.705004567s ago: executing program 2 (id=2185): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4a7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x3, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000180)) sendto$inet6(r7, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r10 = openat$cgroup_ro(r5, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x5, 0x9, 0x43, 0x0, 0x1000, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x56703e53e0c469ad, 0x9, 0xb613, 0x3, 0x3, 0x9, 0xbf, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r0, 0xc, r10, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 738.760147ms ago: executing program 2 (id=2196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 660.43355ms ago: executing program 2 (id=2199): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) poll(&(0x7f0000000080), 0x0, 0x73) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) request_key(0x0, 0x0, 0x0, r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000180)=0x80000006, 0x4) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x40044591, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8848) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x13, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x1}, {0xffff, 0x6, 0x1, 0x46, 0x6, 0xfd}]}) sendmsg$sock(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000080)="08f11d015273d5fa83b17c82a1e9e9061e4d1e926ddffe20de252fff7d3eccf6ddd7", 0x22}, {&(0x7f00000000c0)="3dfc0b93e3ee67d911413b0c92b2f4bc217b8ceda3dc0d967e7db37f6dc75248b0e4bf555baafc6a3f96a0a8174f115a07a5c2b991ea34f747c137fe4f61bef4ba933534b8a023847ee7180a56489ef6a9f59cbad43e25d812178fb01373d58fcfb9e36354672ec94c43378111c875d6c7610b6c0dd65c33b3eb264de828f6", 0x7f}, {&(0x7f0000000880)="f43ac39869de6310837b8fc85567392eccc1fda636b4b1730d69379beaae4a791c912c170a18ab4f28cee6f1c45c0a6d1974ebb41a2db5384a0b6a75aaa0e687bb62dfb42134ed2ab62e913fb1616c9af512c26d143f92f096f4f9249402ebfb0298c9db6ed5130afd9e08f8b69cbe30c4c127d6e78eb68205b0b4200da9d63116c89d14662a05ee48ba3e3f0c29477749ba57cc933555b0179ab3aafb02d7d6fa57400a8114ca8c74af6accdc23f85dca40af35e2a2400dec4b2f064ed7f6362b48cc23615c36499637bd0280a8b2cce6d523037de00d0671ba10814b3ea6f42743855ed971afbe8a3350cedbfa58", 0xef}, {&(0x7f0000001340)="bc8755a02d48e61084bbde63165a07219dfae3d30d7115380c5ee9dcc6975141a24e31b4b63e71b7274ad8b1523ab35e065d3dd24bd37518451d0e549524ef21761e3835ea08ab13e7d765ca1c0c85271b4d17b744cbb9361334bf6aa796ec06d74a3e414f98b89148c3e10a6bc750a3bed1aa679c9ccea9c0d798607cdf055bf1993f31584cabfb72655e8fa3fae6edd75d71c588f20f75ce38dea95af83c023a027a7ffaf75030c84e0609bf5b22af9186e2c986b8f7b499bb83d1a5a44c655e094e64e5ed9466cd6b1e4ff9f2e07bbc32d6cb8b462c3a6ac1742dd617155078cca1a0292c276d640081bda5bd5fcac38bdc8f224913046c043d6cba32e1ca2093f558ef633ef8fba3168cde1815eac0b9f29436cdf0fe609615e609d914980cd1f12a944570649aca53a46ffccc09e1c6d2af9bce48c7ffc54182a7eef4889c2b364fe9da84888c1aadde0e78884488a5e784792289bcdc5dae2c2c277992fe7881caa26a18a25e09d598599cd0af9e4028a151d213485a9d2a1b3938884d4af4855cdbaa050544aa86e2d999703272fbb2ea81811a91ec37c268fcbd6fd1a1f18b27fdd3fe79eb79d8c530165a1bb65c3668a9b026e16f7aaf72a3b46de41ca5c574b91cadf1d92ebd6ecca83c1640cdde626ee28c9d5f8307dc7fbdb30852a4c08c4d91f7e05b786a4a5eeddfb265def6a68e71e765ad7129c935ee77b79656c0324039e3c6af68071443b48a21d4a1a7bfe46412a8c4d7c70fe9a958c51fa25b32a223191f04ae6e0b1c3422e1bc6d2e28732b7d2d661a73067056d1ef0c5fa7e0b60d8959494a04e776ce327ae6769de60e730dd4566715059e9c8f45cbdd4514cc5f320e77bbc0c4873349168de14b8e3cb7a3250148e69c2fabdd73fdcff4dedfc3893a92324f7d55ec968fab87c6d12f50c24b2353ff1b07c9bae750ab319df32c9501685101de7582e48b1eb9a8cff2b70911adaae3805b1c1c3165f49d850062426ea450841b3af4582bb6c70c621187c66dc8718e3a4dd2032daf7ffe37ae1adeff03bd12abd765ab8b65c469497f5d06c5193921c5439bef1ab5e05ef09edea2b0b3b37ae824579e083e792046eb37ee7d823239acb9901ae82b23058dad79cadf13e226c001ca2514f7f56ee779ce5d84e179db442232859aad5d0d57559b98e12de8d818c3cf21957be9eeca29c912f55d87b7be1a5899520ddbce8c494c6b08786df4f31db4874ffebe727ce2bd5d92a48da1c99e9ccc55e87f0ce0d4ac1b3def55ec5599fbb4be39d07f90ad288b89ffd3b5f66b497433bbe1d6b0abb4d94f66d0310d948f0d428d382faabf7de8715f167e2d06ef15e2039f834a390b59681b83423d1c2bccba728e95ef5713aa9c0bcf6bbd53c241a2203b23e70c168d0b184e5367d4be057629626a7fb9c9abcb36c5260f6846374d7cf1eb661c7dd6f13ef2fe51db9eb7a576eb4807a1c5c0122a63261e9d923cbaae04eed9639828c7ab3fa10654f5a65ab50a8574703a1629621bbea67eb5d277b9b882bc7970afb8fc4bc43a3202e5ea79a4049cc93d00465257b10e073b86b7ec3c1b2e040c90c25e659cfa73a4796ef3b59bb3f05bf530e03f7cdd9d7579a6f25af0149ffcdc62401399befdc07d88c217a8800b51d98258635b5dac6bebc11de1b0359e3682d4d304ba2cc59ec45baa58c7e524b98930b67bd5d0aa23d4d820d34dfc09f28b602c1fdb06614f05a2c44f2ec002dc305bb0012071e8f99ec989676c75b2e14d3dcf5a4cc1aaea52ed29e70c5338cf62b05e176a5b308fa655215aff5eac4ecb141c37a39b914cd2560624c0dd1d268f849b2272596ef7d01c9a1371486ae3336563af7e6012f6bdf281bb66ff612906f1393a7aefd8582356dab442338e4f3919e775c7950c2940383b220201197f35c8f21d1107d5211d9acbd795a37a6cedb4facd40d665a544c4300c820766f28a12f49712558a8d8ca591f942492cbb3b091207007ea7c28a719c61426ae3fd80bddb1c57bbf0835b2be6d06ffe1ba433076a317c1f2dcd0066aa0cabd9ffb12cdf5b8ac2d4845ff1d13679e5103290c2019eab6ef3843173d397934f30b9678430edcee87aa22da4ee22d12f026c1e1a20b19d57b96d9db8d89a08f71a9e3d6a4d108451b80b1f1e0dce0098b807121ec8819025feea3ed1338d5104bedb94c02a2b9b65aa8aa62fd6f58a6ffae8778eaa08de5f8e853ab142aa2f02c95c157f3f35ce6dd2235498de2da5a37316ee341e408da24eadddce4cb84534fbfc3a1a6fde0d842fdc4376bc2926891f7ff07174baf06feca58cc6938513de37683b7e171820ecde68a15ff2c81ee5e69f8eba3652969e664a31e842af166db38342e59e25d1ad7e347a39442a1f1dbbda92b67c09a0568abed56ed4d0eb6c383b1ceb865f1c3f835ab385eca2c63ab0e690738a45f7853678fecde486d22cd66c27c0a2411b880c69fed8662d88a7ef2c96c9c543878ce63a20b66705ca513b5446a072830dfb0425585ed5ba4a3e965020123e52cab11657cf7ac86696e6bc729142d5435760cf21be16f207db4d0eb066f5ed4907a2c6fa9049f425244a71d619d33fac284f488824043ba917a5b5aaaa524f99819017bc7542c2c53af8db42789f9336aae8d3de5333efa6b7a3e04ac84f37a782a9157cae997ce1e904a7450e740d972c4adde475a961a7f65c491a9ca0e1c79681ffd42693e1ae2f1d4610a57ff470cd8577bf6d87c2f7f14afc02bc5ccc13ec66baa774b275672c21363b105aa89a1ba72cabdb6f39ab668ee7a528d0e5549ff2a4299e78b5f825cda0a371a36722574c10c305a35edec91b5891a731d2a9419930cef46f75c770f28bedac54a5e19b437d69954c9c3874c86de0884e0aa3002c28d225bf09e266243e477c006dc9149f357548a0b1414ba6184c3593e080b24ae5009591ae85570b07753597e3bb328145f49f7e6bc55527b690f13984dd04e2bde540fc9e44a13143f314f762d4eb3a9b36da8311c25df300ed614020245ba8d211b087c141ab767f750af27ad20d2d33bcab858f0651e4ed1ed4b97debf6bbcf1895b85490aac0b95f9adbd5b03469a4546d05c18751a2333445c4bf81121c32558db940082bed47371c2c3ad9971b43fe1e31dc9cf04ba026ad85149909074db9726ff54d8a9df7222340e906407e5b46899141d4de0c6d2f5da7f5fec0be9642ab4853754b7c9e9b774556a457bfcdab08389995e42ccc1da3295d4638250153d76a1c87a5ac0489cb0ead26e28387db571262cf1d160bceba0745654e4b1833432c26836d2212400dd8d4fb09beb4e3d9fbbf362d46379d3ffada6a4818bc65aa07833517917bfd3063bd91d80907164416b7e9823782640653492d8502916ab1a3e9a7a81a659230368477852aca9128a28e9c8eb927e66af73c8275d427c405a0aab451c3bb06f11366a53b3e43f31cd1616c36606a63b1e97557404b2619962fcafc7f2de5acd3d8fa6a69e5fa86887d60f8ac0c370f8653d4bd82ad97f2979b13c6a09790af9bbb1c41e4e7ebc363d317eca9d4b893c205087f883f5281da6a3f70f2241c12af5117c383377d04c96e4045bf487e5bf74358420a1167425e7d9fc6b61b67dd774cc379ee64d0ddc3101582168c522c5ab1634d1987ac26540d0b889dbdb97c7122299cb15f0e1ed7a10aef9fc6b4ba71e08216953a8da8534fc23028b833e4f1e5dc75adc58152b2463ff7fe8571044b3a07bdbe00db2cd54df81e0dc07eff64731c5ecdba78d90a62e4354ec1679a2511b736c16a2b6023d628e5a7952f5c7d4db36e03bac8c642716600db0853ac3f76f06b87f82484f0bb15039e7a537f5a14bd6091db82019ca7f228ef801b46ecf4fc56133cf6aa0d4abe0b6e2b8142010026e1eab66a437727a264aa8eb6656918a612fdb4ff817bb864c1ac6233526f98b53ce92c94bf869bf29113255961d76ed329dfb58c0bbd0a766c32067f9b88321df05d4e0f86743a1a9011574115628ce6cd803b1e424db95d9f200daf756d43b8a3cb74cd35b795e1e9940aed17236720e95a48a1ba662b17566c3e622bffc884d9d563e595e1ede4a75cf5d5d70d4f2c149bae1959bccecee4a4020f3d13f961ea4145db333f381d1534188f3906aad96aa9e5eebb0631e6525760017473fa0cc0f5764e055be30c552cdf336f5757b7fb86c01f73cdc6a67e9157058310fd08c8748f0e699aa8a4983a20de59d2a4424362234634a4864f9a4355124b7c716b8281decd1e4d9be64dc59511eb3a3d839bb6127b6fe321dbf3286594a878cfbee25141a81c53dd249a2117c6e43ce4eff6880f462aef519871bef8d22d3ad2d93c0fd93c15881e0223786a1505ef5cf0a09ef540a7218701ba27a207ddd07ececab46cff811664a50773d8a1727a75c340e31ef6a7a0f706d30eb01d9c693a2aa320d74d6b28a670d69fea995a6f580a8feb3da5431381b39bc2c3d34d23d1c81a796c8cdc69d251e471f62f6aee76467a72ee6b30404ac0bbd3ee94015c2f468bcab804c65d112186180b1a7354f510a2fb821ea2541e13350e5fc3245533cd64c10812d1b90dbea503035b51be17bac6c850bce4b692c6b158b92043cdee0310fddbfd519789bb9d5caaf0385d34a72decad3ef0f575818ee2f5f28e39edab86567fd8bee04a22b6fb7b12d41e693b46db76c598d768e0c314759620f9fa4581d10b10e3d2e17a87f2da3ebe223728ec780684495f4729704ef9ad1706153eda570838b7cfc3ecab48de0770f67791cb7eb4ee7b397a25526aa72b100a30b2ac6d77de7d43928819f96812f40b3c640959ade30b759f13a3dc1f86228c8c4868ddfbc31a7e2d11c5f204d935da099e495698aed995c77271f2206c9dada71911ef3f2423c5223455c5c006b8687c18a1d46b726af174688dc47b371a3bd9cfe605e017ff8f39c66f2ae337d17481486913da61cfa088f162a712406e4a2002fc0ca483fb1cd4a8fbcae8f226eda759adf5ec9604827ddb13fe5d1f633269f59da33bb299d301caad6d166449e6f0e9324775f2a68487c8b40e00ff22d12731afd5e9df60417c001be3f3ce69c53c3da8a5183fb469217cbedd0526bb308db9a9cb4625d1e54594ef0660e5e75589b1f4ecd2781cd9abb61411dd867f40b559e30d26d141595e154769308b67f5fa263abcb3a1cdcfdb044711cb964cc6e47974e395c26b2977c28b0ef225757e7c2de65d1ea3e5a17fe73967fae2a9b4a8d353b65519c53d3bcfe54a9392e71371e7fc2fe5e7c51accf54206e35c6ff29320397921d79b11614a08785ed5a6724568ba23ab242a8043d48933fd315aa23d9bc2d5a0b7cba1f26c6359d77c2ee4909b74ea77d4c345dd8f7be95fe94e5534322465fab2f316a303f41e18d17358430cf01fc2dd07b8e737d80d313bba7cb455aa3a5a47acb3422dcbb76951be3a8ceefaff92ce96f3072d59d403379c57c84c3b83a269d63d24bed868cd3e83efd7baa65609361a4667d477e4f8ee1fd500100773c5905966fc62b29024b1a5e97bfb3459d2bfa9a939212abc005185623a7bf845cc9674ae4963f7214f8ab883efd1f27a67df21b353e81185bb092b8bbc5784ef96d573a88e2b30176e6ad82045745208a4d0533f638e398d75a49d17c51e54740e622b58a2e5efab18d868ac579c7ae75c2c4c3b24052727fe806132bbae45b6e7c5a3579208c78e0c330b644086f15a84794d9213645e84c5742ad5fea18ab40f9a9ae57a33", 0x1000}], 0x4, &(0x7f0000002380)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xae}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xb}}], 0x90}, 0x24000040) 515.892695ms ago: executing program 2 (id=2202): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f0000000ac0)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x5, 0x2, "2a34238e205b4e797402b50dcd9910eb63ae46095ed54f3e179619f1d5656d791f30ed0a874fdc2353c4f594d4ef416ceadbb2b2cbf7e3004ab1ffb744ac63", 0x17}, 0x80) socket$inet(0x2, 0x800, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x54000, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRESHEX=r0, @ANYRES8=r3], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfe33) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) socket$inet6(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x10ff81, 0x0) 396.051868ms ago: executing program 5 (id=2205): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x63, 0x33, 0xff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sock_ops}, 0x94) 361.967369ms ago: executing program 2 (id=2206): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4a7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x3, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000180)) sendto$inet6(r7, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r10 = openat$cgroup_ro(r5, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x5, 0x9, 0x43, 0x0, 0x1000, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x56703e53e0c469ad, 0x9, 0xb613, 0x3, 0x3, 0x9, 0xbf, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r0, 0xc, r10, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 359.43336ms ago: executing program 5 (id=2207): socket$kcm(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x5}, 0x0, 0x80000000, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x2240000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x34, r5, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r9 = fcntl$getown(r0, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f00000006c0)}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, 0x0}) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/net\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x200048c1) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r13 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r13, 0x0, 0x0, 0x6400, 0x0, 0x3) 221.779074ms ago: executing program 5 (id=2208): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff9151, 0x7}, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 154.391586ms ago: executing program 5 (id=2209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 115.388327ms ago: executing program 5 (id=2210): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=ANY=[@ANYBLOB="58000000020603000000000000000000050000000c00078005001500070000000500010006000000050005000200000005000400000000000900020073797a300000000014000300686173683a69742c706f72742c697000a009c6ad4ef9e6b3d8f261cb423d683b353bfc45b07d58ec0cbcc6cb5865fad445d0b0b6681ee1cd7601856df06c37b63a490044f2d099853c14d3be3f9e85c930b1df4b77eb9d44558196612c07de257936a6bb1f4fa871019dfa84fda835ba1da6420a6697f11dac58a080677b9e9550682d3d61b0866aa1bea1f1b0488b984471f46865b1c04c2de524dda916ffaa9f37f8d6f196131e53"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00679a3600ff07730768432ae4b63db4ab10007e", @ANYRES32=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x2000000000000216, &(0x7f0000001600)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000400}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000000300)={[{@resgid}]}, 0x5, 0x7e5, &(0x7f0000000600)="$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") sendmsg$unix(r4, &(0x7f0000006080)={&(0x7f0000000f00)=@file={0xbf0da0434c2fc3f9, './file1\x00'}, 0x6e, &(0x7f0000005b40)=[{&(0x7f0000000f80)="9dd7db36e6051b3c0a381384c52396de436ce950a884e33e8e99c332c467c4ebf2bc2cfb7adfb02602bea289b0418c889a671e910fffe6533469b0b30c468e391f5d5f8e5dbd97fb52ef8c43587344570565e83d87bbec3da98330e593a5d95cf35fc7a4709c3c1734acfc2302145a8c5fbc1b9bc8e51e85df5041fd117c90bee500275c86a3ae5132cb34bbed7796b1861386ea5a", 0x95}, {&(0x7f0000001140)="248c164b7e12f4254e134c487b53cf98e162a01c30eebad2f491bd38142a51fe6a54674f4f135943c690f450af6361c2b43054fd1a9f471717a6deec86cabf0fd9270d7f7f1f6c08888042e5daef", 0x4e}, {&(0x7f0000001200)}, {&(0x7f0000004900)="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", 0x9ff}, {&(0x7f0000005900)="70aa628d7c17439c7a196afac8f0dd3a72e52ab5bfe162abe7dd8f45afef581b33bb7857dbf1c0f181f857c8b7d26add545660b00471081bf0c449126a58dc2d6be861e97aa637de3f0984a8f5c8479ace24e3b3c4714bdd4c323d2e0cd3ff609e2a42cf84df6e093f9848d28fdf434b5064f52910ad43252c324451c3e27b127bd8861344cffefecd816a1e5a89d6c63df6cc4989586dbcdfe728009cebb35522b271fc16fcaff84f482d76abf74c", 0xaf}, {&(0x7f00000059c0)="d86e2c73a95f7fee5bac8a9a2a322e144aadd8c076d9a820d3354a6e3a94bb75155ee9b10711f097e6ad7c828dca88b70fc72ad267b4ffd02e654f3057e29a48447206ccba3309f19932655f709adf4c11c696e5a55842a9", 0x58}], 0x6, &(0x7f0000001840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000a137661f77eb814b6a63a3185c7eb2a7aeef310374d83564daf15d398a1113dba537dca44b5953cc6834e22d35a398c28cd0a30cae0cd8"], 0xd0, 0x24008000}, 0x4000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000021429"], 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0) r7 = syz_ublk_setup_io_uring(0x71f3, &(0x7f0000000640)={0x0, 0x2a32, 0x2, 0x2, 0x2f}, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000048c0)={0x8, 0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/236, 0xec}, {&(0x7f00000034c0)=""/180, 0xb4}, {&(0x7f0000003580)=""/190, 0xbe}, {&(0x7f00000060c0)=""/4093, 0xffd}, {&(0x7f0000004640)=""/167, 0xa7}, {&(0x7f0000004700)=""/179, 0xb3}], &(0x7f0000004840)=[0xb48, 0x1, 0x7f, 0xe, 0x4, 0x0, 0x8001, 0x3]}, 0x20) msgctl$IPC_RMID(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000001340)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@barrier}, {@nouser_xattr}, {@nodioread_nolock}, {@nodelalloc}, {@nomblk_io_submit}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x38, 0x35, 0x62, 0x62, 0x65, 0x2b54eaa4fdee46ae, 0x39], 0x2d, [0x32, 0x34, 0x34, 0x33], 0x2d, [0x0, 0x37, 0x39, 0x39], 0x2d, [0x62, 0x37, 0x63, 0x35], 0x2d, [0x64, 0x31, 0x37, 0x66, 0x34, 0x62, 0x62, 0x64]}}}]}, 0x1, 0x59d, &(0x7f0000001e00)="$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") recvmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005cc0)={0x5, 0x3, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00', 0xc, 0xb3, &(0x7f0000001700)=""/179, 0x41000, 0x62, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x4, 0x5, 0x8, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000005c40)=[r1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x3, 0xc, 0x7}], 0x10, 0x2}, 0x94) 0s ago: executing program 5 (id=2211): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0xffffffff}, {0x7}, {0x6, 0x2}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) io_uring_setup(0x2628, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x805, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fe, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000006}, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg$sock(r2, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003800)=[{0x0}, {&(0x7f0000002780)="9832", 0x2}], 0x2}}], 0x1, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8ea, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000011c0)={&(0x7f0000001080), 0x10, &(0x7f0000001180)={&(0x7f0000001100)={0x4, 0x800, 0x8, {}, {r3, r4/1000+10000}, {0x0, 0x1}, 0x1, @can={{}, 0x2, 0x2, 0x0, 0x0, "f8a7dbb4a01b9db7"}}, 0x48}, 0x1, 0x0, 0x0, 0x8980}, 0x40) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x200040c0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820f522e5bab4e21000fff0058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeff0180004000fff5dd0000000a0002000400080004000000224e0000", 0x58}], 0x1) kernel console output (not intermixed with test programs): [ 274.356409][ T8710] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1400'. [ 274.408985][ T8710] netlink: 'syz.1.1400': attribute type 12 has an invalid length. [ 274.552837][ T8720] loop5: detected capacity change from 0 to 2048 [ 275.378278][ T8710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1400'. [ 276.397519][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 277.383761][ T8733] loop2: detected capacity change from 0 to 512 [ 277.421051][ T8720] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 277.464372][ T8733] EXT4-fs: inline encryption not supported [ 277.478084][ T8733] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1404: bad orphan inode 15 [ 277.531281][ T8733] loop2: lost filesystem error report for type 5 error -117 [ 277.538118][ T8733] ext4_test_bit(bit=14, block=5) = 0 [ 277.545658][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 277.545687][ C1] EXT4-fs (loop2): initial error at time 2000000001: ext4_orphan_get:1423 [ 277.545797][ C1] EXT4-fs (loop2): last error at time 2000000001: ext4_orphan_get:1423 [ 277.578801][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1405'. [ 277.604744][ T8733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.649610][ T8730] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 277.649941][ T28] audit: type=1400 audit(2000000001.219:1167): avc: denied { write } for pid=8729 comm="syz.2.1404" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.689838][ T28] audit: type=1400 audit(2000000001.219:1168): avc: denied { remove_name } for pid=8729 comm="syz.2.1404" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.699954][ T8730] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.1404: bit already cleared for inode 13 [ 277.723792][ T28] audit: type=1400 audit(2000000001.219:1169): avc: denied { unlink } for pid=8729 comm="syz.2.1404" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 277.747119][ T8740] loop4: detected capacity change from 0 to 512 [ 277.855403][ T8740] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 277.867959][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.877634][ T8740] EXT4-fs (loop4): 1 truncate cleaned up [ 277.922554][ T8740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.964111][ T8751] loop6: detected capacity change from 0 to 128 [ 278.031642][ T8753] syzkaller0: entered promiscuous mode [ 278.037166][ T8753] syzkaller0: entered allmulticast mode [ 278.130295][ T8751] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.145191][ T8751] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.185668][ T28] audit: type=1400 audit(2000000001.739:1170): avc: denied { write } for pid=8743 comm="syz.6.1409" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.260024][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.487311][ T28] audit: type=1326 audit(2000000002.059:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8741 comm="syz.5.1407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efce500ce59 code=0x0 [ 278.555937][ T8764] loop2: detected capacity change from 0 to 1024 [ 278.567819][ T8764] EXT4-fs: test_dummy_encryption option not supported [ 278.584361][ T8765] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1413'. [ 278.662190][ T8760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.138657][ T8772] loop2: detected capacity change from 0 to 2048 [ 279.430688][ T8772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.650224][ T4994] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.842883][ T8781] loop6: detected capacity change from 0 to 1024 [ 279.849727][ T8781] EXT4-fs: test_dummy_encryption option not supported [ 280.704674][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.895937][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 281.298733][ T8790] loop6: detected capacity change from 0 to 2048 [ 281.846559][ T8794] 9p: Bad value for 'rfdno' [ 281.874575][ T8796] loop4: detected capacity change from 0 to 512 [ 281.976930][ T8796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 281.978926][ T8798] usb usb7: usbfs: process 8798 (syz.2.1421) did not claim interface 0 before use [ 282.033526][ T8796] System zones: 1-12 [ 282.115526][ T8796] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1423: corrupted in-inode xattr: e_value size too large [ 282.154903][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'. [ 282.176107][ T8790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.361089][ T8793] netlink: 'syz.5.1422': attribute type 2 has an invalid length. [ 282.378853][ T8796] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.380993][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 282.396607][ C0] EXT4-fs (loop4): initial error at time 2000000001: ext4_iget_extra_inode:5128: inode 15 [ 282.406611][ C0] EXT4-fs (loop4): last error at time 2000000001: ext4_iget_extra_inode:5128: inode 15 [ 282.418994][ T8796] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1423: couldn't read orphan inode 15 (err -117) [ 282.586965][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'. [ 282.598866][ T8796] loop4: lost filesystem error report for type 5 error -117 [ 282.602474][ T8796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.631357][ T8793] SELinux: Context X öN 2Å/ÉP—ù/•é!³Ãß6éš †c‚±zÛgÁY±Õ°“¯¼u®F¶Wkëåv®›êM“”œ‚0 is not valid (left unmapped). [ 282.653978][ T8793] SELinux: Context À‰d_O(?D•b^(µ‹Ê…"i´ÀQ„3c¼&ms´nO[6žBÜ~`¯¿n is not valid (left unmapped). [ 282.680684][ T8793] SELinux: Context Y< [ 282.680684][ T8793] ÔkŽ3â¡lkâúÌÿÂT‹D9ž¼ZK0IŸQÂóÑLz…geíw&GŸÏà%‚¯4Ž;ŶwŽM0Öå³XSè«ü”éÛsÎ`Qä¥þEÃ)\'z’8™äæ‚ is not valid (left unmapped). [ 282.748766][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.150817][ T8793] loop5: detected capacity change from 0 to 128 [ 283.266963][ T8820] loop2: detected capacity change from 0 to 128 [ 283.374088][ T8820] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.389085][ T8820] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.405691][ T28] audit: type=1400 audit(2000000002.729:1173): avc: denied { write } for pid=8811 comm="syz.2.1426" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.428876][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.523385][ T8793] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.735653][ T28] audit: type=1400 audit(2000000002.489:1172): avc: denied { create } for pid=8791 comm="syz.5.1422" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=593C0AD4126B8E33E21BA16C066BE2FACCFFC20E548B44399E1A1307BC5A4B30499F51C2F3D14C7A8567651CED772647109FCFE02582AF348E3B1DC5B6770E8E4D30D6E5B30F5853E8ABFC0594E9DB73CE601D5102E490A5FE45C3295C277A923899E4E682 [ 283.816100][ T8793] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.913012][ T8827] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1431'. [ 283.962029][ T4721] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.986502][ T28] audit: type=1400 audit(2000000002.769:1174): avc: denied { associate } for pid=8791 comm="syz.5.1422" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=593C0AD4126B8E33E21BA16C066BE2FACCFFC20E548B44399E1A1307BC5A4B30499F51C2F3D14C7A8567651CED772647109FCFE02582AF348E3B1DC5B6770E8E4D30D6E5B30F5853E8ABFC0594E9DB73CE601D5102E490A5FE45C3295C277A923899E4E682 [ 284.103622][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 284.148033][ T8836] loop5: detected capacity change from 0 to 512 [ 284.203826][ T8840] loop6: detected capacity change from 0 to 8 [ 284.219391][ T8836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.232219][ T28] audit: type=1400 audit(2000000002.779:1175): avc: denied { mounton } for pid=8791 comm="syz.5.1422" path="/226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=593C0AD4126B8E33E21BA16C066BE2FACCFFC20E548B44399E1A1307BC5A4B30499F51C2F3D14C7A8567651CED772647109FCFE02582AF348E3B1DC5B6770E8E4D30D6E5B30F5853E8ABFC0594E9DB73CE601D5102E490A5FE45C3295C277A923899E4E682 [ 284.298345][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.308551][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.316561][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.326740][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.334794][ T8840] loop6: unable to read partition table [ 284.340521][ T28] audit: type=1400 audit(2000000003.119:1176): avc: denied { wake_alarm } for pid=8824 comm="syz.4.1430" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.362802][ T8840] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 284.378007][ T28] audit: type=1400 audit(2000000003.129:1177): avc: denied { read } for pid=8824 comm="syz.4.1430" path="socket:[22877]" dev="sockfs" ino=22877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.401643][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.411828][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.421033][ T8836] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.532857][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.543099][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.552386][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.562614][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.573772][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.584008][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.666903][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.677232][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.695549][ T28] audit: type=1400 audit(2000000259.454:1178): avc: denied { rmdir } for pid=4721 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=593C0AD4126B8E33E21BA16C066BE2FACCFFC20E548B44399E1A1307BC5A4B30499F51C2F3D14C7A8567651CED772647109FCFE02582AF348E3B1DC5B6770E8E4D30D6E5B30F5853E8ABFC0594E9DB73CE601D5102E490A5FE45C3295C277A923899E4E682 [ 284.757968][ T28] audit: type=1400 audit(2000000259.524:1179): avc: denied { create } for pid=8839 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 284.777810][ T28] audit: type=1400 audit(2000000000.000:1180): avc: denied { write } for pid=8835 comm="syz.5.1432" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.819878][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.942551][ T8846] loop4: detected capacity change from 0 to 1024 [ 284.999696][ T8846] EXT4-fs: test_dummy_encryption option not supported [ 285.705953][ T8855] netem: change failed [ 286.065612][ T8855] xfrm0 speed is unknown, defaulting to 1000 [ 286.215647][ T8856] loop4: detected capacity change from 0 to 2048 [ 286.671797][ T28] audit: type=1400 audit(2000000001.879:1181): avc: denied { write } for pid=8835 comm="syz.5.1432" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.814352][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.108266][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.969100][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.053722][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1440'. [ 289.138910][ T8906] FAULT_INJECTION: forcing a failure. [ 289.138910][ T8906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.186617][ T8906] CPU: 0 UID: 0 PID: 8906 Comm: syz.5.1454 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 289.186645][ T8906] Tainted: [W]=WARN [ 289.186653][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.186665][ T8906] Call Trace: [ 289.186670][ T8906] [ 289.186723][ T8906] __dump_stack+0x1d/0x30 [ 289.186744][ T8906] dump_stack_lvl+0x95/0xd0 [ 289.186762][ T8906] dump_stack+0x15/0x1b [ 289.186777][ T8906] should_fail_ex+0x263/0x280 [ 289.186850][ T8906] should_fail+0xb/0x20 [ 289.186933][ T8906] should_fail_usercopy+0x1a/0x20 [ 289.186951][ T8906] _copy_from_user+0x1c/0xb0 [ 289.186974][ T8906] __copy_msghdr+0x244/0x300 [ 289.187004][ T8906] ___sys_sendmsg+0x10c/0x1e0 [ 289.187041][ T8906] __x64_sys_sendmsg+0xd4/0x160 [ 289.187070][ T8906] x64_sys_call+0x194c/0x3020 [ 289.187146][ T8906] do_syscall_64+0x12c/0x3b0 [ 289.187171][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.187192][ T8906] RIP: 0033:0x7efce500ce59 [ 289.187245][ T8906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.187270][ T8906] RSP: 002b:00007efce3a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.187291][ T8906] RAX: ffffffffffffffda RBX: 00007efce5285fa0 RCX: 00007efce500ce59 [ 289.187305][ T8906] RDX: 0000000000008084 RSI: 0000200000000080 RDI: 0000000000000003 [ 289.187316][ T8906] RBP: 00007efce3a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.187396][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.187409][ T8906] R13: 00007efce5286038 R14: 00007efce5285fa0 R15: 00007ffeef444208 [ 289.187428][ T8906] [ 289.439549][ T8912] loop2: detected capacity change from 0 to 512 [ 289.472002][ T8912] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 289.566283][ T8909] Timeout policy `syz1' can only be used by L3 protocol number 36864 [ 289.657901][ T8917] loop2: detected capacity change from 0 to 256 [ 289.717937][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 289.748561][ T8925] loop5: detected capacity change from 0 to 512 [ 289.803234][ T8925] EXT4-fs (loop5): 1 orphan inode deleted [ 289.813607][ T8925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.886846][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 289.886861][ T28] audit: type=1400 audit(2000000001.639:1187): avc: denied { validate_trans } for pid=8933 comm="syz.2.1460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 290.091042][ T8941] loop4: detected capacity change from 0 to 128 [ 290.157777][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.178434][ T8941] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.193562][ T8941] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.253460][ T28] audit: type=1400 audit(2000000001.969:1188): avc: denied { write } for pid=8931 comm="syz.4.1461" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.493828][ T28] audit: type=1326 audit(2000000002.239:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 290.569206][ T28] audit: type=1326 audit(2000000002.239:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 290.652857][ T28] audit: type=1326 audit(2000000002.239:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 290.742541][ T28] audit: type=1326 audit(2000000002.239:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 290.796071][ T28] audit: type=1326 audit(2000000002.239:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 290.852885][ T28] audit: type=1326 audit(2000000002.239:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 290.903103][ T28] audit: type=1326 audit(2000000002.239:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 291.009341][ T28] audit: type=1326 audit(2000000002.239:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.1.1457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69b54ce59 code=0x7fc00000 [ 291.055211][ T8950] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 291.097543][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1466'. [ 291.166543][ T8954] tipc: Enabled bearer , priority 0 [ 291.190127][ T8954] syzkaller0: entered promiscuous mode [ 291.207907][ T8954] syzkaller0: entered allmulticast mode [ 291.237751][ T8954] tipc: Resetting bearer [ 291.259667][ T8953] tipc: Resetting bearer [ 291.283247][ T8953] tipc: Disabling bearer [ 291.324835][ T8956] loop5: detected capacity change from 0 to 1024 [ 291.351681][ T8956] EXT4-fs: test_dummy_encryption option not supported [ 291.511913][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.546952][ T8958] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1470'. [ 291.617523][ T8969] loop5: detected capacity change from 0 to 2048 [ 291.631583][ T8959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.710596][ T8972] loop4: detected capacity change from 0 to 128 [ 292.019348][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1478'. [ 292.147310][ T8972] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 292.203146][ T8969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.404048][ T8972] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.449437][ T8991] tipc: Enabled bearer , priority 0 [ 292.497069][ T8972] ext2 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.508132][ T8993] syzkaller0: entered promiscuous mode [ 292.669030][ T8993] syzkaller0: entered allmulticast mode [ 292.677509][ T8995] loop6: detected capacity change from 0 to 512 [ 292.692658][ T8983] tipc: Resetting bearer [ 293.174136][ T9001] loop2: detected capacity change from 0 to 128 [ 293.187408][ T8982] tipc: Resetting bearer [ 293.243552][ T8982] tipc: Disabling bearer [ 293.301164][ T8995] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 293.311299][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.332699][ T9001] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.347882][ T9001] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.438912][ T8995] EXT4-fs (loop6): 1 truncate cleaned up [ 293.515072][ T8995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.533514][ T9004] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.553912][ T9004] tipc: Enabled bearer , priority 10 [ 293.586850][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.705795][ T9007] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1486'. [ 293.722419][ T9006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.783052][ T9012] syzkaller0: entered promiscuous mode [ 293.788741][ T9012] syzkaller0: entered allmulticast mode [ 293.913094][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.393117][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.455569][ T9032] loop2: detected capacity change from 0 to 256 [ 294.604369][ T9037] loop6: detected capacity change from 0 to 1024 [ 294.613323][ T9037] EXT4-fs: test_dummy_encryption option not supported [ 294.795378][ T9041] loop2: detected capacity change from 0 to 128 [ 295.348730][ T9042] loop6: detected capacity change from 0 to 2048 [ 296.622965][ T9048] loop4: detected capacity change from 0 to 512 [ 296.725967][ T9041] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.773053][ T9048] 9pnet_virtio: no channels available for device /dev/loop4 [ 297.601682][ T9041] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.652597][ T9042] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 297.726228][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.815510][ T9060] loop6: detected capacity change from 0 to 512 [ 297.826125][ T9054] syzkaller0: entered promiscuous mode [ 297.848341][ T9054] syzkaller0: entered allmulticast mode [ 297.873658][ T3512] syzkaller0: tun_net_xmit 48 [ 297.879725][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 297.879737][ T28] audit: type=1400 audit(2000000003.419:1260): avc: denied { relabelfrom } for pid=9053 comm="syz.4.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 297.912596][ T28] audit: type=1400 audit(2000000003.419:1261): avc: denied { relabelto } for pid=9053 comm="syz.4.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 297.934436][ T9054] syzkaller0: tun_net_xmit 1280 [ 297.939375][ T9054] syzkaller0: create flow: hash 69552812 index 1 [ 297.948742][ T9053] syzkaller0: delete flow: hash 69552812 index 1 [ 297.970192][ T9063] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1500'. [ 297.980558][ T9063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.000187][ T9065] syzkaller0: entered promiscuous mode [ 298.030313][ T9065] syzkaller0: entered allmulticast mode [ 298.113946][ T9070] loop4: detected capacity change from 0 to 256 [ 298.568990][ T9073] loop6: detected capacity change from 0 to 1024 [ 299.355272][ T9078] xfrm0 speed is unknown, defaulting to 1000 [ 299.612254][ T9080] netlink: 'syz.4.1506': attribute type 21 has an invalid length. [ 299.620894][ T9080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1506'. [ 299.643596][ T9081] loop2: detected capacity change from 0 to 512 [ 300.305009][ T9073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 300.672749][ T9073] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.169877][ T9087] loop4: detected capacity change from 0 to 256 [ 301.619423][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.653270][ T9096] loop6: detected capacity change from 0 to 512 [ 301.762972][ T9096] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 301.790720][ T9096] EXT4-fs (loop6): 1 truncate cleaned up [ 301.804039][ T9096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.854002][ T9104] tipc: Enabled bearer , priority 0 [ 301.880825][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.890221][ T9104] syzkaller0: entered promiscuous mode [ 301.907255][ T9104] syzkaller0: entered allmulticast mode [ 301.945105][ T9108] tipc: Resetting bearer [ 301.967098][ T9103] tipc: Resetting bearer [ 302.009360][ T9103] tipc: Disabling bearer [ 302.074242][ T9111] syzkaller0: entered promiscuous mode [ 302.081337][ T9111] syzkaller0: entered allmulticast mode [ 302.110247][ T28] audit: type=1400 audit(2000000007.649:1262): avc: denied { ioctl } for pid=9107 comm="syz.6.1515" path="socket:[23959]" dev="sockfs" ino=23959 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 302.143170][ T9118] 9p: Bad value for 'rfdno' [ 302.148339][ T28] audit: type=1400 audit(2000000007.689:1263): avc: denied { mounton } for pid=9107 comm="syz.6.1515" path="/file0" dev="ramfs" ino=23956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 302.216701][ T28] audit: type=1400 audit(2000000007.759:1264): avc: denied { search } for pid=9123 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.292663][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 302.292981][ T28] audit: type=1400 audit(2000000007.759:1265): avc: denied { search } for pid=9123 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.381757][ T28] audit: type=1400 audit(2000000007.759:1266): avc: denied { search } for pid=9123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.417374][ T9132] syz.4.1518 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 302.483099][ T28] audit: type=1400 audit(2000000007.759:1267): avc: denied { search } for pid=9123 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.575166][ T28] audit: type=1400 audit(2000000007.759:1268): avc: denied { read } for pid=9124 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.646509][ T28] audit: type=1400 audit(2000000007.759:1269): avc: denied { read open } for pid=9124 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.806795][ T9150] loop4: detected capacity change from 0 to 4096 [ 302.821736][ T9154] netlink: 'syz.2.1525': attribute type 4 has an invalid length. [ 302.829782][ T9154] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1525'. [ 302.851787][ T9150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.881682][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 302.881696][ T28] audit: type=1400 audit(2000000008.429:1285): avc: denied { write } for pid=9149 comm="syz.4.1523" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.914720][ T9157] loop2: detected capacity change from 0 to 512 [ 302.954186][ T9157] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 302.977516][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.997978][ T9157] EXT4-fs (loop2): 1 truncate cleaned up [ 303.016214][ T9157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.092559][ T9164] tipc: Started in network mode [ 303.121294][ T9164] tipc: Node identity bea6504f1afd, cluster identity 4711 [ 303.157177][ T9164] tipc: Enabled bearer , priority 0 [ 303.168662][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.183378][ T9164] syzkaller0: entered promiscuous mode [ 303.200452][ T9164] syzkaller0: entered allmulticast mode [ 303.236495][ T9164] tipc: Resetting bearer [ 303.258714][ T9161] tipc: Resetting bearer [ 303.280556][ T9161] tipc: Disabling bearer [ 303.319177][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 303.353153][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 303.430700][ T9176] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1532'. [ 303.484076][ T9175] xfrm0 speed is unknown, defaulting to 1000 [ 303.500758][ T28] audit: type=1400 audit(2000000009.039:1286): avc: denied { read } for pid=9173 comm="syz.5.1533" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.543904][ T9181] loop4: detected capacity change from 0 to 512 [ 303.565747][ T9181] EXT4-fs: inline encryption not supported [ 303.583193][ T28] audit: type=1400 audit(2000000009.039:1287): avc: denied { open } for pid=9173 comm="syz.5.1533" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.626933][ T9181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.684185][ T9181] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.694842][ T28] audit: type=1400 audit(2000000009.039:1288): avc: denied { ioctl } for pid=9173 comm="syz.5.1533" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.724405][ T9190] loop6: detected capacity change from 0 to 1024 [ 303.752539][ T9190] EXT4-fs: test_dummy_encryption option not supported [ 303.766011][ T28] audit: type=1400 audit(2000000009.039:1289): avc: denied { create } for pid=9180 comm="syz.4.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 303.788290][ T9181] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 1 [ 303.793920][ T9192] syzkaller0: entered promiscuous mode [ 303.803716][ T9192] syzkaller0: entered allmulticast mode [ 303.808618][ T9181] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 303.862287][ T9181] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1534: Failed to acquire dquot type 1 [ 303.873511][ T9181] loop4: lost filesystem error report for type 5 error -5 [ 303.874245][ T9181] EXT4-fs (loop4): Remounting filesystem read-only [ 303.887949][ T9181] EXT4-fs (loop4): 1 truncate cleaned up [ 303.894067][ T9181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.940833][ T3425] syzkaller0: tun_net_xmit 48 [ 304.070597][ T9197] loop6: detected capacity change from 0 to 2048 [ 304.100898][ T9197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.143856][ T9201] loop2: detected capacity change from 0 to 512 [ 304.156995][ T9201] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 304.167518][ T9201] EXT4-fs (loop2): 1 truncate cleaned up [ 304.260345][ T9201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.406648][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.512425][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.574956][ T9210] tipc: Enabled bearer , priority 0 [ 304.591452][ T9210] syzkaller0: entered promiscuous mode [ 304.603933][ T9210] syzkaller0: entered allmulticast mode [ 304.627249][ T9210] tipc: Resetting bearer [ 304.649565][ T9208] tipc: Resetting bearer [ 304.669063][ T9208] tipc: Disabling bearer [ 304.781073][ T28] audit: type=1400 audit(2000000010.289:1290): avc: denied { accept } for pid=9214 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.913842][ T9222] loop5: detected capacity change from 0 to 4096 [ 304.958815][ T9222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.976262][ T9226] 9p: Bad value for 'rfdno' [ 305.013346][ T28] audit: type=1400 audit(2000000010.559:1291): avc: denied { write } for pid=9221 comm="syz.5.1550" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.073240][ T4721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.085797][ T9232] usb usb7: usbfs: process 9232 (syz.2.1545) did not claim interface 0 before use [ 305.562446][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.656091][ T9241] loop4: detected capacity change from 0 to 512 [ 305.685163][ T9241] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 305.767569][ T9241] EXT4-fs (loop4): 1 truncate cleaned up [ 305.804762][ T9241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.945880][ T9247] tipc: Enabled bearer , priority 0 [ 305.953572][ T9248] loop5: detected capacity change from 0 to 512 [ 305.973220][ T9247] syzkaller0: entered promiscuous mode [ 305.995704][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.007467][ T9247] syzkaller0: entered allmulticast mode [ 306.040385][ T9247] tipc: Resetting bearer [ 306.066978][ T9245] tipc: Resetting bearer [ 306.078852][ T9245] tipc: Disabling bearer [ 306.107877][ T9250] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1559'. [ 306.122706][ T9248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.989556][ T9260] 9p: Bad value for 'rfdno' [ 307.099813][ T9268] loop4: detected capacity change from 0 to 512 [ 307.269399][ T9272] loop6: detected capacity change from 0 to 4096 [ 307.363545][ T9272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.382232][ T9278] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1560'. [ 307.383477][ T28] audit: type=1400 audit(2000000012.929:1292): avc: denied { write } for pid=9271 comm="syz.6.1565" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.395818][ T9278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.606567][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.888083][ T9284] 9p: Bad value for 'rfdno' [ 308.025600][ T9286] usb usb7: usbfs: process 9286 (syz.5.1570) did not claim interface 0 before use [ 308.367852][ T9254] syz.2.1562 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 308.426042][ T9254] CPU: 1 UID: 0 PID: 9254 Comm: syz.2.1562 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 308.426079][ T9254] Tainted: [W]=WARN [ 308.426088][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.426102][ T9254] Call Trace: [ 308.426109][ T9254] [ 308.426117][ T9254] __dump_stack+0x1d/0x30 [ 308.426209][ T9254] dump_stack_lvl+0x95/0xd0 [ 308.426230][ T9254] dump_stack+0x15/0x1b [ 308.426258][ T9254] dump_header+0x80/0x240 [ 308.426290][ T9254] oom_kill_process+0x295/0x350 [ 308.426383][ T9254] out_of_memory+0x97d/0xb80 [ 308.426477][ T9254] try_charge_memcg+0x62f/0xa10 [ 308.426512][ T9254] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 308.426541][ T9254] __alloc_frozen_pages_noprof+0x18a/0x350 [ 308.426572][ T9254] alloc_pages_mpol+0xb3/0x260 [ 308.426632][ T9254] alloc_pages_noprof+0x8f/0x140 [ 308.426660][ T9254] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 308.426690][ T9254] __kvmalloc_node_noprof+0x3d4/0x640 [ 308.426786][ T9254] ? futex_hash_allocate+0x190/0x9a0 [ 308.426815][ T9254] ? futex_hash_allocate+0x190/0x9a0 [ 308.426846][ T9254] futex_hash_allocate+0x190/0x9a0 [ 308.426880][ T9254] ? cap_task_prctl+0x13f/0x6b0 [ 308.426906][ T9254] futex_hash_prctl+0xd8/0xf0 [ 308.426944][ T9254] __se_sys_prctl+0x4f4/0x1400 [ 308.426972][ T9254] __x64_sys_prctl+0x67/0x80 [ 308.427000][ T9254] x64_sys_call+0x2533/0x3020 [ 308.427023][ T9254] do_syscall_64+0x12c/0x3b0 [ 308.427098][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.427118][ T9254] RIP: 0033:0x7f06296ace59 [ 308.427202][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.427219][ T9254] RSP: 002b:00007f0628107028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 308.427237][ T9254] RAX: ffffffffffffffda RBX: 00007f0629925fa0 RCX: 00007f06296ace59 [ 308.427254][ T9254] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 308.427275][ T9254] RBP: 00007f0629742d6f R08: 0000000000000000 R09: 0000000000000000 [ 308.427330][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.427343][ T9254] R13: 00007f0629926038 R14: 00007f0629925fa0 R15: 00007ffe46e62558 [ 308.427365][ T9254] [ 308.427426][ T9254] memory: usage 307084kB, limit 307200kB, failcnt 378 [ 308.735152][ T9292] loop6: detected capacity change from 0 to 512 [ 308.747434][ T9292] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 308.780320][ T9297] tipc: Enabled bearer , priority 0 [ 308.792723][ T9297] syzkaller0: entered promiscuous mode [ 308.798411][ T9292] EXT4-fs (loop6): 1 truncate cleaned up [ 308.804381][ T9297] syzkaller0: entered allmulticast mode [ 308.812346][ T9292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.835324][ T9297] tipc: Resetting bearer [ 308.863287][ T9296] tipc: Resetting bearer [ 308.870035][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.887019][ T9296] tipc: Disabling bearer [ 308.904543][ T9254] memory+swap: usage 270012kB, limit 9007199254740988kB, failcnt 0 [ 308.914708][ T9254] kmem: usage 269032kB, limit 9007199254740988kB, failcnt 0 [ 308.922420][ T9254] Memory cgroup stats for /syz2: [ 308.922676][ T9254] cache 524288 [ 308.932605][ T9254] rss 16384 [ 308.936126][ T9254] shmem 0 [ 308.939071][ T9254] mapped_file 65536 [ 309.030855][ T9254] dirty 0 [ 309.039560][ T9254] writeback 0 [ 309.051586][ T9254] workingset_refault_anon 107 [ 309.056292][ T9254] workingset_refault_file 1165 [ 309.061160][ T9254] swap 376832 [ 309.068756][ T9254] swapcached 851968 [ 309.077175][ T9254] pgpgin 223040 [ 309.083841][ T9254] pgpgout 222907 [ 309.100456][ T9254] pgfault 281627 [ 309.105375][ T9254] pgmajfault 77 [ 309.109963][ T9254] inactive_anon 0 [ 309.114126][ T9254] active_anon 20480 [ 309.118064][ T9254] inactive_file 0 [ 309.123360][ T9254] active_file 524288 [ 309.127387][ T9254] unevictable 0 [ 309.131719][ T9254] hierarchical_memory_limit 314572800 [ 309.137286][ T9254] hierarchical_memsw_limit 9223372036854771712 [ 309.144020][ T9254] total_cache 524288 [ 309.174486][ T9318] loop6: detected capacity change from 0 to 128 [ 309.205876][ T9317] openvswitch: netlink: EtherType 0 is less than min 600 [ 309.213120][ T9312] openvswitch: netlink: EtherType 0 is less than min 600 [ 309.259316][ T9254] total_rss 16384 [ 309.263694][ T9254] total_shmem 0 [ 309.267199][ T9254] total_mapped_file 65536 [ 309.271648][ T9254] total_dirty 0 [ 309.302302][ T9318] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.317882][ T9318] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.358109][ T28] audit: type=1400 audit(2000000014.879:1293): avc: denied { write } for pid=9300 comm="syz.6.1574" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.459736][ T9254] total_writeback 0 [ 309.504518][ T9254] total_workingset_refault_anon 107 [ 309.540351][ T9254] total_workingset_refault_file 1165 [ 309.712492][ T9254] total_swap 376832 [ 310.056039][ T9254] total_swapcached 851968 [ 310.067121][ T9254] total_pgpgin 223040 [ 310.094087][ T9254] total_pgpgout 222907 [ 310.681204][ T9254] total_pgfault 281627 [ 310.690543][ T9254] total_pgmajfault 77 [ 310.698613][ T9254] total_inactive_anon 0 [ 310.705713][ T9254] total_active_anon 20480 [ 310.713262][ T9254] total_inactive_file 0 [ 310.720260][ T9254] total_active_file 524288 [ 311.052779][ T9254] total_unevictable 0 [ 311.062698][ T9254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1562,pid=9253,uid=0 [ 311.099987][ T9254] Memory cgroup out of memory: Killed process 9254 (syz.2.1562) total-vm:100584kB, anon-rss:1264kB, file-rss:26440kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 313.118710][ T9337] IPv6: sit1: Disabled Multicast RS [ 315.384148][ T28] audit: type=1400 audit(2000000001.799:1294): avc: denied { mount } for pid=9343 comm="syz.4.1586" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 315.605715][ T4994] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.635261][ T9347] syzkaller0: entered promiscuous mode [ 315.668603][ T9347] syzkaller0: entered allmulticast mode [ 315.687553][ T9350] tipc: Enabled bearer , priority 0 [ 315.697633][ T9350] syzkaller0: entered promiscuous mode [ 315.703238][ T9350] syzkaller0: entered allmulticast mode [ 315.711120][ T9352] loop6: detected capacity change from 0 to 1024 [ 315.721265][ T9352] EXT4-fs: test_dummy_encryption option not supported [ 315.864227][ T9359] tipc: Resetting bearer [ 315.871050][ T9349] tipc: Resetting bearer [ 315.879768][ T9349] tipc: Disabling bearer [ 315.915935][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'. [ 315.928652][ T28] audit: type=1400 audit(2000000002.319:1295): avc: denied { connect } for pid=9362 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 315.966716][ T9365] loop6: detected capacity change from 0 to 2048 [ 316.032575][ T28] audit: type=1400 audit(2000000002.319:1296): avc: denied { bind } for pid=9362 comm="syz.1.1593" lport=2142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.151469][ T9365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.168424][ T9365] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1587'. [ 316.333510][ T28] audit: type=1400 audit(2000000002.319:1297): avc: denied { node_bind } for pid=9362 comm="syz.1.1593" saddr=fc02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 317.576429][ T4994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.715135][ T9385] loop4: detected capacity change from 0 to 512 [ 317.772904][ T9385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 317.822835][ T9385] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.987047][ T28] audit: type=1400 audit(2000000000.469:1298): avc: denied { write } for pid=9384 comm="syz.4.1598" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.088418][ T9394] bridge0: port 3(vlan3) entered blocking state [ 318.103025][ T28] audit: type=1400 audit(2000000000.469:1299): avc: denied { append } for pid=9384 comm="syz.4.1598" path="/316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 318.195282][ T9394] bridge0: port 3(vlan3) entered disabled state [ 318.276174][ T9394] vlan3: entered allmulticast mode [ 318.321375][ T9394] vlan3: entered promiscuous mode [ 318.368442][ T28] audit: type=1400 audit(2000000000.659:1300): avc: denied { create } for pid=9384 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 318.495878][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 318.680955][ T28] audit: type=1404 audit(2000000001.159:1301): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 318.729520][ T28] audit: type=1400 audit(2000000001.179:1302): avc: denied { setopt } for pid=9400 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 318.753602][ T28] audit: type=1400 audit(2000000001.209:1303): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 318.920615][ T9418] erspan1: entered promiscuous mode [ 318.936488][ T9418] erspan1: entered allmulticast mode [ 319.148665][ T9430] netlink: 'syz.2.1610': attribute type 21 has an invalid length. [ 319.175730][ T9430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1610'. [ 320.676548][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 320.676562][ T28] audit: type=1400 audit(2000000001.369:1416): avc: denied { read write } for pid=4994 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 320.749323][ T28] audit: type=1400 audit(2000000001.409:1417): avc: denied { create } for pid=9451 comm="syz.6.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 320.808605][ T28] audit: type=1400 audit(2000000001.439:1418): avc: denied { map_create } for pid=9453 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 320.872117][ T28] audit: type=1400 audit(2000000001.469:1419): avc: denied { open } for pid=9453 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 320.934785][ T28] audit: type=1400 audit(2000000001.469:1420): avc: denied { execute } for pid=9453 comm="syz.1.1618" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=0 [ 320.986997][ T28] audit: type=1400 audit(2000000001.469:1421): avc: denied { create } for pid=9453 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 321.056718][ T28] audit: type=1400 audit(2000000001.489:1422): avc: denied { read write } for pid=4994 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.113169][ T28] audit: type=1400 audit(2000000001.589:1423): avc: denied { execmem } for pid=9456 comm="syz.1.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 321.165214][ T28] audit: type=1400 audit(2000000001.599:1424): avc: denied { create } for pid=9455 comm="syz.6.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 321.186841][ T9462] xfrm0 speed is unknown, defaulting to 1000 [ 321.225526][ T28] audit: type=1400 audit(2000000001.599:1425): avc: denied { map_create } for pid=9455 comm="syz.6.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 322.124763][ T9500] FAULT_INJECTION: forcing a failure. [ 322.124763][ T9500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.163617][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.6.1634 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 322.163675][ T9500] Tainted: [W]=WARN [ 322.163682][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.163695][ T9500] Call Trace: [ 322.163702][ T9500] [ 322.163710][ T9500] __dump_stack+0x1d/0x30 [ 322.163733][ T9500] dump_stack_lvl+0x95/0xd0 [ 322.163791][ T9500] dump_stack+0x15/0x1b [ 322.163806][ T9500] should_fail_ex+0x263/0x280 [ 322.163823][ T9500] should_fail+0xb/0x20 [ 322.163839][ T9500] should_fail_usercopy+0x1a/0x20 [ 322.163862][ T9500] _copy_to_user+0x20/0xa0 [ 322.163939][ T9500] simple_read_from_buffer+0xb5/0x130 [ 322.163971][ T9500] proc_fail_nth_read+0x10e/0x150 [ 322.164062][ T9500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.164084][ T9500] vfs_read+0x1ab/0x7f0 [ 322.164104][ T9500] ? __rcu_read_unlock+0x4e/0x70 [ 322.164143][ T9500] ? __fget_files+0x184/0x1c0 [ 322.164163][ T9500] ? mutex_lock+0x57/0x90 [ 322.164249][ T9500] ksys_read+0xdc/0x1a0 [ 322.164273][ T9500] __x64_sys_read+0x40/0x50 [ 322.164345][ T9500] x64_sys_call+0x2886/0x3020 [ 322.164369][ T9500] do_syscall_64+0x12c/0x3b0 [ 322.164394][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.164427][ T9500] RIP: 0033:0x7fc41528d68e [ 322.164443][ T9500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.164456][ T9500] RSP: 002b:00007fc413d1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.164473][ T9500] RAX: ffffffffffffffda RBX: 00007fc413d1f6c0 RCX: 00007fc41528d68e [ 322.164486][ T9500] RDX: 000000000000000f RSI: 00007fc413d1f0a0 RDI: 0000000000000003 [ 322.164499][ T9500] RBP: 00007fc413d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 322.164585][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.164597][ T9500] R13: 00007fc415546038 R14: 00007fc415545fa0 R15: 00007ffc2199f1d8 [ 322.164616][ T9500] [ 322.656775][ T9478] syz.1.1627 (9478) used greatest stack depth: 8232 bytes left [ 322.686941][ T9518] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1642'. [ 322.728329][ T9518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.795592][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1647'. [ 322.813182][ T9521] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1644'. [ 322.834861][ T9521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.849812][ T9532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9532 comm=syz.6.1647 [ 323.396870][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 323.406067][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'. [ 323.429363][ T9579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 324.249287][ T9621] xfrm0 speed is unknown, defaulting to 1000 [ 324.850337][ T9641] netlink: 'syz.1.1688': attribute type 4 has an invalid length. [ 324.858853][ T9641] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1688'. [ 325.117272][ T9650] netlink: 'syz.1.1691': attribute type 12 has an invalid length. [ 325.125211][ T9650] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 325.157547][ T9650] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1691'. [ 325.283665][ T9657] bridge_slave_0: left allmulticast mode [ 325.300254][ T9657] bridge_slave_0: left promiscuous mode [ 325.310857][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.351982][ T9657] bridge_slave_1: left allmulticast mode [ 325.403647][ T9657] bridge_slave_1: left promiscuous mode [ 325.415057][ T9666] FAULT_INJECTION: forcing a failure. [ 325.415057][ T9666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.428205][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.428449][ T9666] CPU: 1 UID: 0 PID: 9666 Comm: syz.2.1696 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 325.428479][ T9666] Tainted: [W]=WARN [ 325.428486][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.428545][ T9666] Call Trace: [ 325.428570][ T9666] [ 325.428578][ T9666] __dump_stack+0x1d/0x30 [ 325.428602][ T9666] dump_stack_lvl+0x95/0xd0 [ 325.428758][ T9666] dump_stack+0x15/0x1b [ 325.428775][ T9666] should_fail_ex+0x263/0x280 [ 325.428832][ T9666] should_fail+0xb/0x20 [ 325.428849][ T9666] should_fail_usercopy+0x1a/0x20 [ 325.428869][ T9666] _copy_from_user+0x1c/0xb0 [ 325.428892][ T9666] kstrtouint_from_user+0x69/0xf0 [ 325.428995][ T9666] ? 0xffffffff81000000 [ 325.429089][ T9666] ? selinux_file_permission+0x1e1/0x320 [ 325.429114][ T9666] proc_fail_nth_write+0x50/0x160 [ 325.429142][ T9666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 325.429197][ T9666] vfs_write+0x269/0x9f0 [ 325.429222][ T9666] ? __rcu_read_unlock+0x4e/0x70 [ 325.429245][ T9666] ? __fget_files+0x184/0x1c0 [ 325.429264][ T9666] ? mutex_lock+0x57/0x90 [ 325.429296][ T9666] ksys_write+0xdc/0x1a0 [ 325.429321][ T9666] __x64_sys_write+0x40/0x50 [ 325.429362][ T9666] x64_sys_call+0x27e1/0x3020 [ 325.429389][ T9666] do_syscall_64+0x12c/0x3b0 [ 325.429558][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.429578][ T9666] RIP: 0033:0x7f062966d68e [ 325.429594][ T9666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.429617][ T9666] RSP: 002b:00007f0628106fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.429636][ T9666] RAX: ffffffffffffffda RBX: 00007f06281076c0 RCX: 00007f062966d68e [ 325.429649][ T9666] RDX: 0000000000000001 RSI: 00007f06281070a0 RDI: 0000000000000003 [ 325.429691][ T9666] RBP: 00007f0628107090 R08: 0000000000000000 R09: 0000000000000000 [ 325.429704][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.429717][ T9666] R13: 00007f0629926038 R14: 00007f0629925fa0 R15: 00007ffe46e62558 [ 325.429735][ T9666] [ 325.651188][ T9657] .`: (slave bond_slave_0): Releasing backup interface [ 325.668179][ T9657] .`: (slave bond_slave_1): Releasing backup interface [ 325.683311][ T9657] team0: Port device team_slave_0 removed [ 325.696533][ T9657] team0: Port device team_slave_1 removed [ 325.696556][ T28] kauditd_printk_skb: 437 callbacks suppressed [ 325.696569][ T28] audit: type=1400 audit(2000000002.379:1863): avc: denied { create } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 325.703652][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.736371][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.769144][ T28] audit: type=1400 audit(2000000002.449:1864): avc: denied { create } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 325.794895][ T28] audit: type=1400 audit(2000000002.449:1865): avc: denied { map_create } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 325.814393][ T28] audit: type=1400 audit(2000000002.449:1866): avc: denied { prog_load } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 325.833953][ T28] audit: type=1400 audit(2000000002.469:1867): avc: denied { prog_load } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 325.853762][ T9677] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1701'. [ 325.854703][ T28] audit: type=1400 audit(2000000002.469:1868): avc: denied { prog_load } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 325.882359][ T28] audit: type=1400 audit(2000000002.469:1869): avc: denied { prog_load } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 325.883133][ T9677] netlink: 'syz.2.1701': attribute type 12 has an invalid length. [ 325.901790][ T28] audit: type=1400 audit(2000000002.469:1870): avc: denied { watch } for pid=9671 comm="syz.2.1699" path="/346/file0" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 325.947080][ T28] audit: type=1400 audit(2000000002.469:1871): avc: denied { watch } for pid=9671 comm="syz.2.1699" path="/346/file0" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 325.949199][ T9677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1701'. [ 325.970108][ T28] audit: type=1400 audit(2000000002.469:1872): avc: denied { create } for pid=9671 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 326.715536][ T4721] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 326.735931][ T4721] CPU: 1 UID: 0 PID: 4721 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 326.735963][ T4721] Tainted: [W]=WARN [ 326.735998][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.736075][ T4721] Call Trace: [ 326.736081][ T4721] [ 326.736088][ T4721] __dump_stack+0x1d/0x30 [ 326.736109][ T4721] dump_stack_lvl+0x95/0xd0 [ 326.736130][ T4721] dump_stack+0x15/0x1b [ 326.736155][ T4721] dump_header+0x80/0x240 [ 326.736173][ T4721] oom_kill_process+0x295/0x350 [ 326.736197][ T4721] out_of_memory+0x97d/0xb80 [ 326.736223][ T4721] try_charge_memcg+0x62f/0xa10 [ 326.736266][ T4721] ? __rcu_read_unlock+0x33/0x70 [ 326.736293][ T4721] charge_memcg+0x6d/0x120 [ 326.736313][ T4721] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 326.736378][ T4721] __swap_cache_prepare_and_add+0x69/0x4a0 [ 326.736464][ T4721] ? alloc_pages_mpol+0x217/0x260 [ 326.736488][ T4721] swap_cache_alloc_folio+0xa2/0x120 [ 326.736513][ T4721] swap_cluster_readahead+0x25f/0x3c0 [ 326.736650][ T4721] swapin_readahead+0xde/0x840 [ 326.736672][ T4721] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 326.736722][ T4721] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 326.736743][ T4721] ? __rcu_read_unlock+0x4e/0x70 [ 326.736828][ T4721] ? swap_cache_get_folio+0x1e0/0x1f0 [ 326.736853][ T4721] do_swap_page+0x31e/0x2180 [ 326.736875][ T4721] ? __schedule+0x951/0xd40 [ 326.736953][ T4721] ? __rcu_read_lock+0x36/0x50 [ 326.736973][ T4721] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 326.736994][ T4721] handle_mm_fault+0xb30/0x2e70 [ 326.737019][ T4721] ? vma_start_read+0x1c7/0x2c0 [ 326.737085][ T4721] do_user_addr_fault+0x62f/0x1050 [ 326.737116][ T4721] ? trace_page_fault_user+0x1f/0xa0 [ 326.737144][ T4721] exc_page_fault+0x62/0xa0 [ 326.737238][ T4721] asm_exc_page_fault+0x26/0x30 [ 326.737283][ T4721] RIP: 0033:0x7efce4fc7fd7 [ 326.737297][ T4721] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 326.737313][ T4721] RSP: 002b:00007ffeef444500 EFLAGS: 00010202 [ 326.737331][ T4721] RAX: 0000000000000000 RBX: 00005555852e9500 RCX: 00007efce4fc7fd7 [ 326.737392][ T4721] RDX: 00007ffeef444540 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.737448][ T4721] RBP: 00007ffeef4445ac R08: 0000000000000000 R09: 0000000000000000 [ 326.737461][ T4721] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 326.737475][ T4721] R13: 00000000000927c0 R14: 000000000004fa5a R15: 00007ffeef444600 [ 326.737523][ T4721] [ 326.737585][ T4721] memory: usage 307200kB, limit 307200kB, failcnt 686 [ 326.993169][ T4721] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0 [ 327.001077][ T4721] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 327.008418][ T4721] Memory cgroup stats for /syz5: [ 327.008611][ T4721] cache 0 [ 327.016834][ T4721] rss 0 [ 327.019619][ T4721] shmem 0 [ 327.022712][ T4721] mapped_file 0 [ 327.026189][ T4721] dirty 0 [ 327.029146][ T4721] writeback 0 [ 327.032790][ T4721] workingset_refault_anon 142 [ 327.037490][ T4721] workingset_refault_file 7 [ 327.042791][ T4721] swap 581632 [ 327.046100][ T4721] swapcached 5476352 [ 327.050004][ T4721] pgpgin 161136 [ 327.053735][ T4721] pgpgout 161136 [ 327.062432][ T4721] pgfault 219869 [ 327.066701][ T4721] pgmajfault 86 [ 327.070170][ T4721] inactive_anon 0 [ 327.074177][ T4721] active_anon 0 [ 327.077731][ T4721] inactive_file 0 [ 327.081575][ T4721] active_file 0 [ 327.085858][ T4721] unevictable 0 [ 327.089373][ T4721] hierarchical_memory_limit 314572800 [ 327.095037][ T4721] hierarchical_memsw_limit 9223372036854771712 [ 327.101443][ T4721] total_cache 0 [ 327.104956][ T4721] total_rss 0 [ 327.108304][ T4721] total_shmem 0 [ 327.112194][ T4721] total_mapped_file 0 [ 327.116199][ T4721] total_dirty 0 [ 327.119664][ T4721] total_writeback 0 [ 327.123669][ T4721] total_workingset_refault_anon 142 [ 327.128914][ T4721] total_workingset_refault_file 7 [ 327.134275][ T4721] total_swap 581632 [ 327.138126][ T4721] total_swapcached 5476352 [ 327.142725][ T4721] total_pgpgin 161136 [ 327.146824][ T4721] total_pgpgout 161136 [ 327.151086][ T4721] total_pgfault 219869 [ 327.155336][ T4721] total_pgmajfault 86 [ 327.159391][ T4721] total_inactive_anon 0 [ 327.163780][ T4721] total_active_anon 0 [ 327.167792][ T4721] total_inactive_file 0 [ 327.172172][ T4721] total_active_file 0 [ 327.176388][ T4721] total_unevictable 0 [ 327.180395][ T4721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1703,pid=9683,uid=0 [ 327.208275][ T4721] Memory cgroup out of memory: Killed process 9683 (syz.5.1703) total-vm:94300kB, anon-rss:1232kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 327.393023][ T9740] netlink: 'syz.4.1726': attribute type 21 has an invalid length. [ 329.373315][ T9793] bond1: option all_slaves_active: invalid value (5) [ 329.393433][ T9793] bond1 (unregistering): Released all slaves [ 330.078903][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1753'. [ 330.182320][ T9821] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1755'. [ 330.192460][ T9821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.702996][ T28] kauditd_printk_skb: 317 callbacks suppressed [ 330.703055][ T28] audit: type=1400 audit(2000000000.389:2190): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 330.759945][ T9846] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1766'. [ 330.770634][ T28] audit: type=1400 audit(2000000000.439:2191): avc: denied { prog_load } for pid=9845 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 330.814327][ T9846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.825772][ T28] audit: type=1400 audit(2000000000.439:2192): avc: denied { open } for pid=9845 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 330.885509][ T28] audit: type=1400 audit(2000000000.439:2193): avc: denied { create } for pid=9845 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 330.943657][ T28] audit: type=1400 audit(2000000000.439:2194): avc: denied { allowed } for pid=9845 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 330.998461][ T28] audit: type=1400 audit(2000000000.439:2195): avc: denied { allowed } for pid=9845 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 331.040237][ T28] audit: type=1400 audit(2000000000.559:2196): avc: denied { create } for pid=9851 comm="syz.2.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 331.081607][ T28] audit: type=1400 audit(2000000000.569:2197): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 331.117163][ T28] audit: type=1400 audit(2000000000.599:2198): avc: denied { prog_load } for pid=9853 comm="syz.4.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 331.142389][ T28] audit: type=1400 audit(2000000000.599:2199): avc: denied { mounton } for pid=9851 comm="syz.2.1767" path="/359/file2" dev="tmpfs" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 331.682815][ T9878] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1777'. [ 331.714669][ T9878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.800988][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 331.861056][ T9890] netlink: 'syz.4.1783': attribute type 39 has an invalid length. [ 332.050744][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1789'. [ 332.249065][ T9915] netlink: 'syz.5.1792': attribute type 4 has an invalid length. [ 332.260197][ T9915] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1792'. [ 332.894240][ T9936] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 332.998021][ T9943] netlink: 'syz.4.1803': attribute type 4 has an invalid length. [ 333.011238][ T9943] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1803'. [ 333.045736][ T9943] .`: renamed from bond0 (while UP) [ 333.139247][ T9960] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1811'. [ 333.149547][ T9960] netlink: 'syz.6.1811': attribute type 12 has an invalid length. [ 333.170497][ T9960] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1811'. [ 333.253658][ T4721] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 333.261080][ T9962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.270596][ T4721] CPU: 0 UID: 0 PID: 4721 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 333.270689][ T4721] Tainted: [W]=WARN [ 333.270695][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.270705][ T4721] Call Trace: [ 333.270711][ T4721] [ 333.270718][ T4721] __dump_stack+0x1d/0x30 [ 333.270811][ T4721] dump_stack_lvl+0x95/0xd0 [ 333.270830][ T4721] dump_stack+0x15/0x1b [ 333.270848][ T4721] dump_header+0x80/0x240 [ 333.270868][ T4721] oom_kill_process+0x295/0x350 [ 333.270971][ T4721] out_of_memory+0x97d/0xb80 [ 333.270999][ T4721] try_charge_memcg+0x62f/0xa10 [ 333.271031][ T4721] charge_memcg+0x6d/0x120 [ 333.271088][ T4721] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 333.271114][ T4721] __swap_cache_prepare_and_add+0x69/0x4a0 [ 333.271139][ T4721] ? alloc_pages_mpol+0x217/0x260 [ 333.271199][ T4721] ? tick_program_event+0x79/0xc0 [ 333.271226][ T4721] swap_cache_alloc_folio+0xa2/0x120 [ 333.271327][ T4721] swap_cluster_readahead+0x35c/0x3c0 [ 333.271353][ T4721] swapin_readahead+0xde/0x840 [ 333.271378][ T4721] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 333.271423][ T4721] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 333.271446][ T4721] ? __rcu_read_unlock+0x4e/0x70 [ 333.271466][ T4721] ? swap_cache_get_folio+0x1e0/0x1f0 [ 333.271519][ T4721] do_swap_page+0x31e/0x2180 [ 333.271546][ T4721] ? __schedule+0x951/0xd40 [ 333.271593][ T4721] ? __rcu_read_lock+0x36/0x50 [ 333.271612][ T4721] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 333.271633][ T4721] handle_mm_fault+0xb30/0x2e70 [ 333.271658][ T4721] ? vma_start_read+0x1c7/0x2c0 [ 333.271690][ T4721] do_user_addr_fault+0x62f/0x1050 [ 333.271724][ T4721] ? trace_page_fault_user+0x1f/0xa0 [ 333.271750][ T4721] exc_page_fault+0x62/0xa0 [ 333.271773][ T4721] asm_exc_page_fault+0x26/0x30 [ 333.271870][ T4721] RIP: 0033:0x7efce4fc7fd7 [ 333.271885][ T4721] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 333.271969][ T4721] RSP: 002b:00007ffeef444500 EFLAGS: 00010202 [ 333.271985][ T4721] RAX: 0000000000000000 RBX: 00005555852e9500 RCX: 00007efce4fc7fd7 [ 333.271998][ T4721] RDX: 00007ffeef444540 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.272010][ T4721] RBP: 00007ffeef4445ac R08: 0000000000000000 R09: 0000000000000000 [ 333.272022][ T4721] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 333.272035][ T4721] R13: 00000000000927c0 R14: 00000000000512e0 R15: 00007ffeef444600 [ 333.272062][ T4721] [ 333.272723][ T4721] memory: usage 307200kB, limit 307200kB, failcnt 965 [ 333.530436][ T4721] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0 [ 333.541079][ T4721] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 333.548609][ T4721] Memory cgroup stats for /syz5: [ 333.548878][ T4721] cache 0 [ 333.567071][ T4721] rss 0 [ 333.574477][ T4721] shmem 0 [ 333.581705][ T4721] mapped_file 0 [ 333.591911][ T4721] dirty 0 [ 333.599243][ T4721] writeback 0 [ 333.608653][ T4721] workingset_refault_anon 188 [ 333.620838][ T4721] workingset_refault_file 7 [ 333.634168][ T4721] swap 581632 [ 333.635346][ T9986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 333.642062][ T4721] swapcached 5935104 [ 333.667188][ T4721] pgpgin 166557 [ 333.674930][ T4721] pgpgout 166557 [ 333.682903][ T4721] pgfault 230351 [ 333.689343][ T4721] pgmajfault 114 [ 333.697921][ T4721] inactive_anon 0 [ 333.704483][ T4721] active_anon 0 [ 333.712435][ T4721] inactive_file 0 [ 333.718899][ T4721] active_file 0 [ 333.725298][ T4721] unevictable 0 [ 333.734091][ T4721] hierarchical_memory_limit 314572800 [ 333.743853][ T4721] hierarchical_memsw_limit 9223372036854771712 [ 333.757378][ T4721] total_cache 0 [ 333.763846][ T4721] total_rss 0 [ 333.770077][ T4721] total_shmem 0 [ 333.778003][ T4721] total_mapped_file 0 [ 333.785766][ T4721] total_dirty 0 [ 333.795824][ T4721] total_writeback 0 [ 333.799705][ T4721] total_workingset_refault_anon 188 [ 333.813233][ T4721] total_workingset_refault_file 7 [ 333.822850][ T4721] total_swap 581632 [ 333.829649][ T4721] total_swapcached 5935104 [ 333.837259][ T4721] total_pgpgin 166557 [ 333.845898][ T4721] total_pgpgout 166557 [ 333.853142][ T4721] total_pgfault 230351 [ 333.860205][ T4721] total_pgmajfault 114 [ 333.869091][ T4721] total_inactive_anon 0 [ 333.878061][ T9993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.879016][ T4721] total_active_anon 0 [ 333.902022][ T4721] total_inactive_file 0 [ 333.906296][ T4721] total_active_file 0 [ 333.910268][ T4721] total_unevictable 0 [ 333.922561][ T4721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1794,pid=9918,uid=0 [ 333.948955][ T4721] Memory cgroup out of memory: Killed process 9918 (syz.5.1794) total-vm:94300kB, anon-rss:1232kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 334.305781][T10004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.853590][T10032] netem: change failed [ 334.894286][T10032] xfrm0 speed is unknown, defaulting to 1000 [ 335.391847][T10050] 8021q: VLANs not supported on gre0 [ 335.524658][T10062] __nla_validate_parse: 5 callbacks suppressed [ 335.524674][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1850'. [ 335.554875][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1850'. [ 335.724646][ T28] kauditd_printk_skb: 399 callbacks suppressed [ 335.724661][ T28] audit: type=1400 audit(2000000002.159:2599): avc: denied { read } for pid=10074 comm="syz.5.1854" dev="nsfs" ino=4026533028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 335.767808][T10075] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1854'. [ 335.791657][ T28] audit: type=1400 audit(2000000002.189:2600): avc: denied { create } for pid=10074 comm="syz.5.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 335.829336][T10075] netlink: 'syz.5.1854': attribute type 12 has an invalid length. [ 335.846993][T10075] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1854'. [ 335.852270][ T28] audit: type=1400 audit(2000000002.189:2601): avc: denied { read write } for pid=10074 comm="syz.5.1854" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.933488][ T28] audit: type=1400 audit(2000000002.199:2602): avc: denied { create } for pid=10074 comm="syz.5.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 335.991008][ T28] audit: type=1400 audit(2000000002.199:2603): avc: denied { open } for pid=10074 comm="syz.5.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 336.060433][ T28] audit: type=1400 audit(2000000002.249:2604): avc: denied { prog_load } for pid=10072 comm="syz.6.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.122023][ T28] audit: type=1400 audit(2000000002.249:2605): avc: denied { create } for pid=10072 comm="syz.6.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 336.175529][ T28] audit: type=1400 audit(2000000002.259:2606): avc: denied { create } for pid=10072 comm="syz.6.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 336.196105][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 336.216911][ T28] audit: type=1400 audit(2000000002.259:2607): avc: denied { create } for pid=10072 comm="syz.6.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 336.219624][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 336.259834][ T28] audit: type=1400 audit(2000000002.259:2608): avc: denied { create } for pid=10072 comm="syz.6.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 336.479612][T10101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10101 comm=syz.5.1863 [ 336.959548][T10127] No such timeout policy "syz1" [ 337.070884][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 337.081065][T10141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10141 comm=syz.1.1878 [ 337.257302][T10156] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 337.265363][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1885'. [ 337.340308][T10166] xfrm0 speed is unknown, defaulting to 1000 [ 337.385830][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1890'. [ 337.449464][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1892'. [ 337.465954][T10172] bond0: entered promiscuous mode [ 337.471385][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.485712][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.486206][T10172] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 337.487598][T10172] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 337.715492][T10204] bridge_slave_0: left allmulticast mode [ 337.721310][T10204] bridge_slave_0: left promiscuous mode [ 337.727127][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.738345][T10204] bridge_slave_1: left promiscuous mode [ 337.744757][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.755977][T10204] .`: (slave bond_slave_0): Releasing backup interface [ 337.768221][T10204] .`: (slave bond_slave_1): Releasing backup interface [ 337.780435][T10204] team0: Port device team_slave_0 removed [ 337.790313][T10204] team0: Port device team_slave_1 removed [ 337.797628][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.806067][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.813931][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.837542][T10204] .`: (slave netdevsim2): Releasing backup interface [ 339.656285][T10288] netlink: 'syz.2.1935': attribute type 12 has an invalid length. [ 339.781641][T10294] netlink: 'syz.6.1938': attribute type 4 has an invalid length. [ 340.425219][T10330] netlink: 'syz.1.1951': attribute type 4 has an invalid length. [ 340.625825][T10353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10353 comm=syz.1.1961 [ 340.657437][T10356] netlink: 'syz.2.1964': attribute type 4 has an invalid length. [ 340.670204][T10356] __nla_validate_parse: 5 callbacks suppressed [ 340.670288][T10356] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1964'. [ 340.756679][ T28] kauditd_printk_skb: 647 callbacks suppressed [ 340.756692][ T28] audit: type=1400 audit(2000000003.679:3256): avc: denied { open } for pid=10359 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 340.810967][ T28] audit: type=1400 audit(2000000003.709:3257): avc: denied { open } for pid=10359 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 340.860924][ T28] audit: type=1400 audit(2000000003.719:3258): avc: denied { name_bind } for pid=10357 comm="syz.1.1963" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 340.912749][T10365] xfrm0 speed is unknown, defaulting to 1000 [ 340.931187][ T28] audit: type=1400 audit(2000000003.719:3259): avc: denied { open } for pid=10359 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 340.974946][ T28] audit: type=1400 audit(2000000003.719:3260): avc: denied { create } for pid=10359 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 341.017200][ T28] audit: type=1400 audit(2000000003.719:3261): avc: denied { create } for pid=10359 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 341.044143][ T28] audit: type=1400 audit(2000000003.729:3262): avc: denied { create } for pid=10359 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 341.067001][ T28] audit: type=1400 audit(2000000003.729:3263): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 341.091569][ T28] audit: type=1400 audit(2000000003.769:3264): avc: denied { read write } for pid=10364 comm="syz.4.1966" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 341.116116][ T28] audit: type=1400 audit(2000000003.779:3265): avc: denied { create } for pid=10364 comm="syz.4.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 341.555035][T10391] netlink: 'syz.1.1975': attribute type 4 has an invalid length. [ 341.562937][T10391] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1975'. [ 341.589348][T10396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10396 comm=syz.2.1977 [ 341.848835][T10412] FAULT_INJECTION: forcing a failure. [ 341.848835][T10412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.863079][T10412] CPU: 0 UID: 0 PID: 10412 Comm: syz.6.1985 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 341.863182][T10412] Tainted: [W]=WARN [ 341.863189][T10412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.863201][T10412] Call Trace: [ 341.863207][T10412] [ 341.863215][T10412] __dump_stack+0x1d/0x30 [ 341.863320][T10412] dump_stack_lvl+0x95/0xd0 [ 341.863336][T10412] dump_stack+0x15/0x1b [ 341.863358][T10412] should_fail_ex+0x263/0x280 [ 341.863376][T10412] should_fail+0xb/0x20 [ 341.863392][T10412] should_fail_usercopy+0x1a/0x20 [ 341.863472][T10412] _copy_to_user+0x20/0xa0 [ 341.863495][T10412] simple_read_from_buffer+0xb5/0x130 [ 341.863525][T10412] proc_fail_nth_read+0x10e/0x150 [ 341.863557][T10412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.863580][T10412] vfs_read+0x1ab/0x7f0 [ 341.863617][T10412] ? __rcu_read_unlock+0x4e/0x70 [ 341.863638][T10412] ? __fget_files+0x184/0x1c0 [ 341.863654][T10412] ? mutex_lock+0x57/0x90 [ 341.863673][T10412] ksys_read+0xdc/0x1a0 [ 341.863765][T10412] __x64_sys_read+0x40/0x50 [ 341.863862][T10412] x64_sys_call+0x2886/0x3020 [ 341.863885][T10412] do_syscall_64+0x12c/0x3b0 [ 341.863913][T10412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.863934][T10412] RIP: 0033:0x7fc41528d68e [ 341.863949][T10412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 341.863997][T10412] RSP: 002b:00007fc413d1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.864017][T10412] RAX: ffffffffffffffda RBX: 00007fc413d1f6c0 RCX: 00007fc41528d68e [ 341.864030][T10412] RDX: 000000000000000f RSI: 00007fc413d1f0a0 RDI: 0000000000000004 [ 341.864043][T10412] RBP: 00007fc413d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 341.864056][T10412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.864067][T10412] R13: 00007fc415546038 R14: 00007fc415545fa0 R15: 00007ffc2199f1d8 [ 341.864082][T10412] [ 342.089621][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 342.132808][T10430] netlink: 'syz.6.1989': attribute type 4 has an invalid length. [ 342.140825][T10430] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1989'. [ 342.229685][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1996'. [ 342.251838][T10442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10442 comm=syz.6.1996 [ 342.365570][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1999'. [ 342.379046][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1999'. [ 342.390552][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1999'. [ 342.400134][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1999'. [ 342.409352][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1999'. [ 343.103260][T10470] netlink: 'syz.5.2004': attribute type 4 has an invalid length. [ 343.341120][T10492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=10492 comm=syz.2.2013 [ 344.194118][T10513] syzkaller0: Caught tx_queue_len zero misconfig [ 344.475415][T10526] xfrm0 speed is unknown, defaulting to 1000 [ 344.776517][T10530] FAULT_INJECTION: forcing a failure. [ 344.776517][T10530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.821791][T10530] CPU: 0 UID: 0 PID: 10530 Comm: syz.1.2026 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 344.821822][T10530] Tainted: [W]=WARN [ 344.821828][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.821851][T10530] Call Trace: [ 344.821856][T10530] [ 344.821862][T10530] __dump_stack+0x1d/0x30 [ 344.821882][T10530] dump_stack_lvl+0x95/0xd0 [ 344.821900][T10530] dump_stack+0x15/0x1b [ 344.821985][T10530] should_fail_ex+0x263/0x280 [ 344.822002][T10530] should_fail+0xb/0x20 [ 344.822043][T10530] should_fail_usercopy+0x1a/0x20 [ 344.822062][T10530] _copy_to_user+0x20/0xa0 [ 344.822085][T10530] simple_read_from_buffer+0xb5/0x130 [ 344.822129][T10530] proc_fail_nth_read+0x10e/0x150 [ 344.822159][T10530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.822203][T10530] vfs_read+0x1ab/0x7f0 [ 344.822284][T10530] ? __rcu_read_unlock+0x4e/0x70 [ 344.822301][T10530] ? __fget_files+0x184/0x1c0 [ 344.822320][T10530] ? mutex_lock+0x57/0x90 [ 344.822477][T10530] ksys_read+0xdc/0x1a0 [ 344.822502][T10530] __x64_sys_read+0x40/0x50 [ 344.822525][T10530] x64_sys_call+0x2886/0x3020 [ 344.822557][T10530] do_syscall_64+0x12c/0x3b0 [ 344.822588][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.822608][T10530] RIP: 0033:0x7fd69b50d68e [ 344.822623][T10530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 344.822644][T10530] RSP: 002b:00007fd699fa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.822662][T10530] RAX: ffffffffffffffda RBX: 00007fd699fa76c0 RCX: 00007fd69b50d68e [ 344.822674][T10530] RDX: 000000000000000f RSI: 00007fd699fa70a0 RDI: 0000000000000006 [ 344.822687][T10530] RBP: 00007fd699fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 344.822699][T10530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.822711][T10530] R13: 00007fd69b7c6038 R14: 00007fd69b7c5fa0 R15: 00007fff5260ee58 [ 344.822731][T10530] [ 344.828743][T10526] xfrm0 speed is unknown, defaulting to 1000 [ 345.151136][T10537] FAULT_INJECTION: forcing a failure. [ 345.151136][T10537] name failslab, interval 1, probability 0, space 0, times 0 [ 345.171788][T10537] CPU: 0 UID: 0 PID: 10537 Comm: syz.1.2030 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 345.171818][T10537] Tainted: [W]=WARN [ 345.171870][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.171880][T10537] Call Trace: [ 345.171937][T10537] [ 345.171943][T10537] __dump_stack+0x1d/0x30 [ 345.171969][T10537] dump_stack_lvl+0x95/0xd0 [ 345.171989][T10537] dump_stack+0x15/0x1b [ 345.172006][T10537] should_fail_ex+0x263/0x280 [ 345.172022][T10537] should_failslab+0x8c/0xb0 [ 345.172123][T10537] __kmalloc_node_noprof+0xc8/0x550 [ 345.172153][T10537] ? load_msg+0x41/0x2f0 [ 345.172173][T10537] ? get_pid_task+0x96/0xd0 [ 345.172233][T10537] load_msg+0x41/0x2f0 [ 345.172250][T10537] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.172406][T10537] ? vfs_write+0x86e/0x9f0 [ 345.172498][T10537] do_mq_timedsend+0x247/0x6d0 [ 345.172565][T10537] __x64_sys_mq_timedsend+0xd1/0x180 [ 345.172589][T10537] x64_sys_call+0x28c8/0x3020 [ 345.172689][T10537] do_syscall_64+0x12c/0x3b0 [ 345.172719][T10537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.172773][T10537] RIP: 0033:0x7fd69b54ce59 [ 345.172795][T10537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.172873][T10537] RSP: 002b:00007fd699fa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 345.172889][T10537] RAX: ffffffffffffffda RBX: 00007fd69b7c5fa0 RCX: 00007fd69b54ce59 [ 345.172901][T10537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 345.172911][T10537] RBP: 00007fd699fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.172922][T10537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.172938][T10537] R13: 00007fd69b7c6038 R14: 00007fd69b7c5fa0 R15: 00007fff5260ee58 [ 345.172953][T10537] [ 345.514093][T10550] netlink: 'syz.1.2035': attribute type 1 has an invalid length. [ 345.542357][T10550] bond1: entered promiscuous mode [ 345.574067][T10550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.636554][T10560] FAULT_INJECTION: forcing a failure. [ 345.636554][T10560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.656614][T10560] CPU: 1 UID: 0 PID: 10560 Comm: syz.1.2038 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 345.656648][T10560] Tainted: [W]=WARN [ 345.656655][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.656725][T10560] Call Trace: [ 345.656733][T10560] [ 345.656742][T10560] __dump_stack+0x1d/0x30 [ 345.656831][T10560] dump_stack_lvl+0x95/0xd0 [ 345.656848][T10560] dump_stack+0x15/0x1b [ 345.656867][T10560] should_fail_ex+0x263/0x280 [ 345.656905][T10560] should_fail+0xb/0x20 [ 345.656919][T10560] should_fail_usercopy+0x1a/0x20 [ 345.656937][T10560] _copy_from_user+0x1c/0xb0 [ 345.656956][T10560] ___sys_sendmsg+0xc1/0x1e0 [ 345.657008][T10560] __x64_sys_sendmsg+0xd4/0x160 [ 345.657036][T10560] x64_sys_call+0x194c/0x3020 [ 345.657059][T10560] do_syscall_64+0x12c/0x3b0 [ 345.657090][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.657139][T10560] RIP: 0033:0x7fd69b54ce59 [ 345.657152][T10560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.657208][T10560] RSP: 002b:00007fd699fa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.657227][T10560] RAX: ffffffffffffffda RBX: 00007fd69b7c5fa0 RCX: 00007fd69b54ce59 [ 345.657279][T10560] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 345.657290][T10560] RBP: 00007fd699fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.657356][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.657421][T10560] R13: 00007fd69b7c6038 R14: 00007fd69b7c5fa0 R15: 00007fff5260ee58 [ 345.657441][T10560] [ 345.824163][ T28] kauditd_printk_skb: 550 callbacks suppressed [ 345.824177][ T28] audit: type=1400 audit(2000000002.349:3816): avc: denied { create } for pid=10559 comm="syz.1.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 345.852457][ T28] audit: type=1400 audit(2000000002.349:3817): avc: denied { create } for pid=10559 comm="syz.1.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 345.904891][ T28] audit: type=1400 audit(2000000002.349:3818): avc: denied { create } for pid=10559 comm="syz.1.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 345.958285][ T28] audit: type=1400 audit(2000000002.449:3819): avc: denied { read write } for pid=10554 comm="syz.4.2037" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 346.015487][ T28] audit: type=1400 audit(2000000002.449:3820): avc: denied { allowed } for pid=10554 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 346.058060][ T28] audit: type=1400 audit(2000000002.449:3821): avc: denied { allowed } for pid=10554 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 346.100581][ T28] audit: type=1400 audit(2000000002.449:3822): avc: denied { create } for pid=10554 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 346.142638][ T28] audit: type=1400 audit(2000000002.499:3823): avc: denied { create } for pid=10554 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 346.182346][ T28] audit: type=1400 audit(2000000002.499:3824): avc: denied { open } for pid=10554 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 346.229986][T10578] FAULT_INJECTION: forcing a failure. [ 346.229986][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.230334][ T28] audit: type=1400 audit(2000000002.499:3825): avc: denied { create } for pid=10554 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 346.243695][T10578] CPU: 1 UID: 0 PID: 10578 Comm: syz.1.2045 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 346.243727][T10578] Tainted: [W]=WARN [ 346.243734][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.243746][T10578] Call Trace: [ 346.243753][T10578] [ 346.243761][T10578] __dump_stack+0x1d/0x30 [ 346.243796][T10578] dump_stack_lvl+0x95/0xd0 [ 346.243822][T10578] dump_stack+0x15/0x1b [ 346.243840][T10578] should_fail_ex+0x263/0x280 [ 346.243860][T10578] should_fail+0xb/0x20 [ 346.243877][T10578] should_fail_usercopy+0x1a/0x20 [ 346.243938][T10578] _copy_to_user+0x20/0xa0 [ 346.244028][T10578] simple_read_from_buffer+0xb5/0x130 [ 346.244059][T10578] proc_fail_nth_read+0x10e/0x150 [ 346.244121][T10578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.244180][T10578] vfs_read+0x1ab/0x7f0 [ 346.244206][T10578] ? __rcu_read_unlock+0x4e/0x70 [ 346.244226][T10578] ? __fget_files+0x184/0x1c0 [ 346.244293][T10578] ? mutex_lock+0x57/0x90 [ 346.244329][T10578] ksys_read+0xdc/0x1a0 [ 346.244354][T10578] __x64_sys_read+0x40/0x50 [ 346.244379][T10578] x64_sys_call+0x2886/0x3020 [ 346.244478][T10578] do_syscall_64+0x12c/0x3b0 [ 346.244532][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.244553][T10578] RIP: 0033:0x7fd69b50d68e [ 346.244569][T10578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.244626][T10578] RSP: 002b:00007fd699fa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.244668][T10578] RAX: ffffffffffffffda RBX: 00007fd699fa76c0 RCX: 00007fd69b50d68e [ 346.244682][T10578] RDX: 000000000000000f RSI: 00007fd699fa70a0 RDI: 0000000000000008 [ 346.244695][T10578] RBP: 00007fd699fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.244776][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.244789][T10578] R13: 00007fd69b7c6038 R14: 00007fd69b7c5fa0 R15: 00007fff5260ee58 [ 346.244807][T10578] [ 346.508344][T10586] FAULT_INJECTION: forcing a failure. [ 346.508344][T10586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.525455][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.2.2048 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 346.525573][T10586] Tainted: [W]=WARN [ 346.525580][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.525592][T10586] Call Trace: [ 346.525598][T10586] [ 346.525605][T10586] __dump_stack+0x1d/0x30 [ 346.525628][T10586] dump_stack_lvl+0x95/0xd0 [ 346.525647][T10586] dump_stack+0x15/0x1b [ 346.525689][T10586] should_fail_ex+0x263/0x280 [ 346.525709][T10586] should_fail+0xb/0x20 [ 346.525799][T10586] should_fail_usercopy+0x1a/0x20 [ 346.525819][T10586] _copy_to_user+0x20/0xa0 [ 346.525908][T10586] simple_read_from_buffer+0xb5/0x130 [ 346.525971][T10586] proc_fail_nth_read+0x10e/0x150 [ 346.525997][T10586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.526052][T10586] vfs_read+0x1ab/0x7f0 [ 346.526227][T10586] ? __rcu_read_unlock+0x4e/0x70 [ 346.526245][T10586] ? __rcu_read_unlock+0x4e/0x70 [ 346.526263][T10586] ? __fget_files+0x184/0x1c0 [ 346.526282][T10586] ? mutex_lock+0x57/0x90 [ 346.526304][T10586] ksys_read+0xdc/0x1a0 [ 346.526385][T10586] __x64_sys_read+0x40/0x50 [ 346.526409][T10586] x64_sys_call+0x2886/0x3020 [ 346.526436][T10586] do_syscall_64+0x12c/0x3b0 [ 346.526499][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.526519][T10586] RIP: 0033:0x7f062966d68e [ 346.526535][T10586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.526560][T10586] RSP: 002b:00007f0628106fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.526580][T10586] RAX: ffffffffffffffda RBX: 00007f06281076c0 RCX: 00007f062966d68e [ 346.526593][T10586] RDX: 000000000000000f RSI: 00007f06281070a0 RDI: 0000000000000003 [ 346.526624][T10586] RBP: 00007f0628107090 R08: 0000000000000000 R09: 0000000000000000 [ 346.526685][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.526697][T10586] R13: 00007f0629926038 R14: 00007f0629925fa0 R15: 00007ffe46e62558 [ 346.526715][T10586] [ 346.575966][T10596] FAULT_INJECTION: forcing a failure. [ 346.575966][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 346.576096][T10596] CPU: 0 UID: 0 PID: 10596 Comm: syz.4.2053 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 346.576125][T10596] Tainted: [W]=WARN [ 346.576133][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.576145][T10596] Call Trace: [ 346.576151][T10596] [ 346.576159][T10596] __dump_stack+0x1d/0x30 [ 346.576179][T10596] dump_stack_lvl+0x95/0xd0 [ 346.576196][T10596] dump_stack+0x15/0x1b [ 346.576264][T10596] should_fail_ex+0x263/0x280 [ 346.576283][T10596] ? rtnl_newlink+0x5c/0x1400 [ 346.576309][T10596] should_failslab+0x8c/0xb0 [ 346.576380][T10596] __kmalloc_cache_noprof+0x5f/0x400 [ 346.576409][T10596] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.576446][T10596] rtnl_newlink+0x5c/0x1400 [ 346.576478][T10596] ? __siphash_unaligned+0x197/0x2e0 [ 346.576501][T10596] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 346.576564][T10596] ? __rcu_read_unlock+0x4e/0x70 [ 346.576608][T10596] ? avc_has_perm_noaudit+0xab/0x130 [ 346.576667][T10596] ? cred_has_capability+0x224/0x2a0 [ 346.576773][T10596] ? selinux_capable+0x31/0x40 [ 346.576829][T10596] ? security_capable+0x7b/0x90 [ 346.576849][T10596] ? ns_capable+0x7c/0xb0 [ 346.576876][T10596] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.576964][T10596] rtnetlink_rcv_msg+0x64b/0x720 [ 346.576993][T10596] netlink_rcv_skb+0x123/0x220 [ 346.577016][T10596] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.577074][T10596] rtnetlink_rcv+0x1c/0x30 [ 346.577107][T10596] netlink_unicast+0x5a8/0x680 [ 346.577129][T10596] netlink_sendmsg+0x5c8/0x6f0 [ 346.577155][T10596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.577188][T10596] ____sys_sendmsg+0x563/0x5b0 [ 346.577211][T10596] ___sys_sendmsg+0x195/0x1e0 [ 346.577239][T10596] __x64_sys_sendmsg+0xd4/0x160 [ 346.577265][T10596] x64_sys_call+0x194c/0x3020 [ 346.577339][T10596] do_syscall_64+0x12c/0x3b0 [ 346.577371][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.577456][T10596] RIP: 0033:0x7f8e95cdce59 [ 346.577473][T10596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.577488][T10596] RSP: 002b:00007f8e94737028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.577507][T10596] RAX: ffffffffffffffda RBX: 00007f8e95f55fa0 RCX: 00007f8e95cdce59 [ 346.577519][T10596] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 346.577595][T10596] RBP: 00007f8e94737090 R08: 0000000000000000 R09: 0000000000000000 [ 346.577609][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.577622][T10596] R13: 00007f8e95f56038 R14: 00007f8e95f55fa0 R15: 00007fff057f0488 [ 346.577642][T10596] [ 346.595767][T10590] __nla_validate_parse: 5 callbacks suppressed [ 346.595812][T10590] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2050'. [ 346.596825][T10590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.261393][T10616] FAULT_INJECTION: forcing a failure. [ 347.261393][T10616] name failslab, interval 1, probability 0, space 0, times 0 [ 347.261500][T10616] CPU: 1 UID: 0 PID: 10616 Comm: syz.1.2061 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 347.261610][T10616] Tainted: [W]=WARN [ 347.261615][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.261626][T10616] Call Trace: [ 347.261632][T10616] [ 347.261639][T10616] __dump_stack+0x1d/0x30 [ 347.261662][T10616] dump_stack_lvl+0x95/0xd0 [ 347.261683][T10616] dump_stack+0x15/0x1b [ 347.261699][T10616] should_fail_ex+0x263/0x280 [ 347.261780][T10616] ? __se_sys_mount+0xef/0x2e0 [ 347.261805][T10616] should_failslab+0x8c/0xb0 [ 347.261870][T10616] __kmalloc_cache_noprof+0x5f/0x400 [ 347.261895][T10616] ? memdup_user+0x99/0xd0 [ 347.261957][T10616] __se_sys_mount+0xef/0x2e0 [ 347.261983][T10616] ? fput+0x8f/0xc0 [ 347.262002][T10616] ? ksys_write+0x194/0x1a0 [ 347.262028][T10616] __x64_sys_mount+0x67/0x80 [ 347.262068][T10616] x64_sys_call+0x2d61/0x3020 [ 347.262090][T10616] do_syscall_64+0x12c/0x3b0 [ 347.262120][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.262157][T10616] RIP: 0033:0x7fd69b54ce59 [ 347.262170][T10616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.262190][T10616] RSP: 002b:00007fd699fa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.262250][T10616] RAX: ffffffffffffffda RBX: 00007fd69b7c5fa0 RCX: 00007fd69b54ce59 [ 347.262263][T10616] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000000000000000 [ 347.262274][T10616] RBP: 00007fd699fa7090 R08: 0000200000000740 R09: 0000000000000000 [ 347.262285][T10616] R10: 0000000003000c11 R11: 0000000000000246 R12: 0000000000000001 [ 347.262296][T10616] R13: 00007fd69b7c6038 R14: 00007fd69b7c5fa0 R15: 00007fff5260ee58 [ 347.262311][T10616] [ 347.604861][T10631] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2067'. [ 347.615657][T10631] netlink: 'syz.1.2067': attribute type 12 has an invalid length. [ 347.615674][T10631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2067'. [ 347.639232][T10633] FAULT_INJECTION: forcing a failure. [ 347.639232][T10633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.854507][T10633] CPU: 1 UID: 0 PID: 10633 Comm: syz.2.2068 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 347.854539][T10633] Tainted: [W]=WARN [ 347.854545][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.854593][T10633] Call Trace: [ 347.854600][T10633] [ 347.854609][T10633] __dump_stack+0x1d/0x30 [ 347.854631][T10633] dump_stack_lvl+0x95/0xd0 [ 347.854684][T10633] dump_stack+0x15/0x1b [ 347.854701][T10633] should_fail_ex+0x263/0x280 [ 347.854722][T10633] should_fail+0xb/0x20 [ 347.854785][T10633] should_fail_usercopy+0x1a/0x20 [ 347.854807][T10633] _copy_from_iter+0xcf/0xea0 [ 347.854903][T10633] ? __rcu_read_unlock+0x4e/0x70 [ 347.854923][T10633] ? avc_has_perm_noaudit+0xab/0x130 [ 347.854954][T10633] copy_page_from_iter+0x161/0x1f0 [ 347.854972][T10633] ? anon_pipe_write+0x81/0xb20 [ 347.855047][T10633] anon_pipe_write+0x53c/0xb20 [ 347.855132][T10633] ? anon_pipe_write+0x81/0xb20 [ 347.855189][T10633] ? __pfx_anon_pipe_write+0x10/0x10 [ 347.855287][T10633] vfs_write+0x5a6/0x9f0 [ 347.855349][T10633] ksys_write+0xdc/0x1a0 [ 347.855470][T10633] __x64_sys_write+0x40/0x50 [ 347.855492][T10633] x64_sys_call+0x27e1/0x3020 [ 347.855511][T10633] do_syscall_64+0x12c/0x3b0 [ 347.855616][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.855638][T10633] RIP: 0033:0x7f062966d68e [ 347.855653][T10633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 347.855670][T10633] RSP: 002b:00007f0628106ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.855689][T10633] RAX: ffffffffffffffda RBX: 00007f06281076c0 RCX: 00007f062966d68e [ 347.855716][T10633] RDX: 0000000000000029 RSI: 00007f0628106e90 RDI: 0000000000000002 [ 347.855736][T10633] RBP: 00007f0628106e90 R08: 0000000000000000 R09: 0000000000000000 [ 347.855748][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 347.855761][T10633] R13: 00007f06298fd7a0 R14: 00007f06298f44a0 R15: 0000000000000001 [ 347.855779][T10633] [ 348.120851][T10651] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2075'. [ 348.121544][T10651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.306418][T10659] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 348.695049][T10677] bridge_slave_0: default FDB implementation only supports local addresses [ 349.413417][T10681] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2086'. [ 349.427729][T10681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.625105][T10688] FAULT_INJECTION: forcing a failure. [ 349.625105][T10688] name failslab, interval 1, probability 0, space 0, times 0 [ 349.673300][T10688] CPU: 0 UID: 0 PID: 10688 Comm: syz.5.2089 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 349.673395][T10688] Tainted: [W]=WARN [ 349.673401][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.673411][T10688] Call Trace: [ 349.673419][T10688] [ 349.673428][T10688] __dump_stack+0x1d/0x30 [ 349.673452][T10688] dump_stack_lvl+0x95/0xd0 [ 349.673519][T10688] dump_stack+0x15/0x1b [ 349.673534][T10688] should_fail_ex+0x263/0x280 [ 349.673555][T10688] should_failslab+0x8c/0xb0 [ 349.673611][T10688] kmem_cache_alloc_noprof+0x66/0x3f0 [ 349.673649][T10688] ? do_getname+0x2e/0x1c0 [ 349.673665][T10688] do_getname+0x2e/0x1c0 [ 349.673680][T10688] getname_flags+0x1d/0x30 [ 349.673759][T10688] do_sys_openat2+0x60/0x130 [ 349.673815][T10688] __x64_sys_openat+0xf2/0x120 [ 349.673839][T10688] x64_sys_call+0x1e39/0x3020 [ 349.673862][T10688] do_syscall_64+0x12c/0x3b0 [ 349.673887][T10688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.673972][T10688] RIP: 0033:0x7efce500ce59 [ 349.673986][T10688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.674004][T10688] RSP: 002b:00007efce3a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.674105][T10688] RAX: ffffffffffffffda RBX: 00007efce5285fa0 RCX: 00007efce500ce59 [ 349.674120][T10688] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 349.674134][T10688] RBP: 00007efce3a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.674147][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.674161][T10688] R13: 00007efce5286038 R14: 00007efce5285fa0 R15: 00007ffeef444208 [ 349.674180][T10688] [ 349.675025][T10688] bridge_slave_0: default FDB implementation only supports local addresses [ 350.085648][T10707] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2096'. [ 350.121466][T10707] netlink: 'syz.1.2096': attribute type 12 has an invalid length. [ 350.145356][T10707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2096'. [ 350.410294][T10713] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2098'. [ 350.436341][T10713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.858054][ T28] kauditd_printk_skb: 320 callbacks suppressed [ 350.858067][ T28] audit: type=1400 audit(2000000004.169:4146): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 350.918243][ T28] audit: type=1400 audit(2000000004.209:4147): avc: denied { create } for pid=10726 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 350.973027][ T28] audit: type=1400 audit(2000000004.209:4148): avc: denied { map_create } for pid=10726 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 351.026000][ T28] audit: type=1400 audit(2000000004.209:4149): avc: denied { prog_load } for pid=10726 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 351.082087][ T28] audit: type=1400 audit(2000000004.209:4150): avc: denied { prog_load } for pid=10726 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 351.136658][ T28] audit: type=1400 audit(2000000004.209:4151): avc: denied { prog_load } for pid=10726 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 351.204211][ T28] audit: type=1400 audit(2000000004.239:4152): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 351.272985][ T28] audit: type=1400 audit(2000000004.509:4153): avc: denied { prog_load } for pid=10728 comm="syz.4.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 351.346613][ T28] audit: type=1400 audit(2000000004.659:4154): avc: denied { read write } for pid=4994 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 351.410757][ T28] audit: type=1400 audit(2000000004.679:4155): avc: denied { create } for pid=10732 comm="syz.6.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 351.511909][T10739] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2108'. [ 351.526069][T10739] netlink: 'syz.6.2108': attribute type 12 has an invalid length. [ 351.534365][T10739] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2108'. [ 351.724225][T10751] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2110'. [ 351.750525][T10746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.947644][T10778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2122'. [ 351.986586][T10778] netlink: 'syz.4.2122': attribute type 12 has an invalid length. [ 352.012889][T10778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2122'. [ 352.017398][T10782] FAULT_INJECTION: forcing a failure. [ 352.017398][T10782] name failslab, interval 1, probability 0, space 0, times 0 [ 352.066005][T10782] CPU: 0 UID: 0 PID: 10782 Comm: syz.1.2124 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 352.066091][T10782] Tainted: [W]=WARN [ 352.066097][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.066107][T10782] Call Trace: [ 352.066113][T10782] [ 352.066121][T10782] __dump_stack+0x1d/0x30 [ 352.066143][T10782] dump_stack_lvl+0x95/0xd0 [ 352.066162][T10782] dump_stack+0x15/0x1b [ 352.066180][T10782] should_fail_ex+0x263/0x280 [ 352.066267][T10782] should_failslab+0x8c/0xb0 [ 352.066293][T10782] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 352.066352][T10782] ? sidtab_sid2str_get+0xa0/0x130 [ 352.066376][T10782] kmemdup_noprof+0x2b/0x70 [ 352.066402][T10782] sidtab_sid2str_get+0xa0/0x130 [ 352.066489][T10782] security_sid_to_context_core+0x1eb/0x2e0 [ 352.066593][T10782] security_sid_to_context+0x27/0x40 [ 352.066613][T10782] selinux_lsmprop_to_secctx+0x67/0xf0 [ 352.066650][T10782] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 352.066678][T10782] audit_log_subj_ctx+0xa4/0x3e0 [ 352.066776][T10782] ? skb_put+0xa9/0xf0 [ 352.066795][T10782] audit_log_task_context+0x48/0x70 [ 352.066819][T10782] audit_log_task+0xf3/0x250 [ 352.066850][T10782] audit_seccomp+0x60/0x100 [ 352.066871][T10782] ? __seccomp_filter+0x8db/0x1350 [ 352.066971][T10782] __seccomp_filter+0x8ec/0x1350 [ 352.067026][T10782] __secure_computing+0x81/0x150 [ 352.067087][T10782] do_syscall_64+0xce/0x3b0 [ 352.067112][T10782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.067132][T10782] RIP: 0033:0x7fd69b50d68e [ 352.067146][T10782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 352.067163][T10782] RSP: 002b:00007fd699fa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.067184][T10782] RAX: ffffffffffffffda RBX: 00007fd699fa76c0 RCX: 00007fd69b50d68e [ 352.067197][T10782] RDX: 000000000000000f RSI: 00007fd699fa70a0 RDI: 0000000000000003 [ 352.067210][T10782] RBP: 00007fd699fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 352.067222][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.067233][T10782] R13: 00007fd69b7c6038 R14: 00007fd69b7c5fa0 R15: 00007fff5260ee58 [ 352.067299][T10782] [ 352.512654][T10793] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2128'. [ 352.525439][T10793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.585442][T10809] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 352.638794][T10813] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2138'. [ 352.706308][T10813] netlink: 'syz.1.2138': attribute type 12 has an invalid length. [ 352.733685][T10813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2138'. [ 353.231998][T10842] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2148'. [ 353.242088][T10842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.360848][T10848] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 353.378269][T10848] netlink: 'syz.1.2151': attribute type 1 has an invalid length. [ 353.414993][T10848] bond2: entered promiscuous mode [ 353.437286][T10848] bond2: entered allmulticast mode [ 353.460148][T10848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.535508][T10850] bridge2: entered promiscuous mode [ 353.559973][T10850] bridge2: entered allmulticast mode [ 353.585374][T10850] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 353.652789][ T3511] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 353.672430][T10848] bridge3: entered promiscuous mode [ 353.677978][T10848] bridge3: entered allmulticast mode [ 353.685453][T10848] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 353.694448][T10856] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2153'. [ 353.706478][T10848] bridge4: entered promiscuous mode [ 353.717851][T10848] bridge4: entered allmulticast mode [ 353.736128][T10848] bond2: (slave bridge4): Enslaving as a backup interface with a down link [ 353.767968][T10853] xfrm0 speed is unknown, defaulting to 1000 [ 353.771390][T10856] netlink: 'syz.5.2153': attribute type 12 has an invalid length. [ 353.774147][ T310] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 353.804674][T10856] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2153'. [ 354.056865][ T3511] Bluetooth: hci0: Frame reassembly failed (-84) [ 354.142091][T10873] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2160'. [ 354.152236][T10873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.466684][T10882] netlink: 'syz.1.2164': attribute type 12 has an invalid length. [ 354.600653][T10888] FAULT_INJECTION: forcing a failure. [ 354.600653][T10888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.624052][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.1.2166 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 354.624085][T10888] Tainted: [W]=WARN [ 354.624092][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.624105][T10888] Call Trace: [ 354.624174][T10888] [ 354.624181][T10888] __dump_stack+0x1d/0x30 [ 354.624201][T10888] dump_stack_lvl+0x95/0xd0 [ 354.624217][T10888] dump_stack+0x15/0x1b [ 354.624232][T10888] should_fail_ex+0x263/0x280 [ 354.624260][T10888] should_fail+0xb/0x20 [ 354.624348][T10888] should_fail_usercopy+0x1a/0x20 [ 354.624389][T10888] _copy_from_user+0x1c/0xb0 [ 354.624408][T10888] ___sys_recvmsg+0xaa/0x3b0 [ 354.624436][T10888] do_recvmmsg+0x1ef/0x560 [ 354.624513][T10888] ? fput+0x8f/0xc0 [ 354.624531][T10888] __x64_sys_recvmmsg+0xe5/0x170 [ 354.624561][T10888] x64_sys_call+0x80f/0x3020 [ 354.624579][T10888] do_syscall_64+0x12c/0x3b0 [ 354.624603][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.624620][T10888] RIP: 0033:0x7fd69b54ce59 [ 354.624666][T10888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.624680][T10888] RSP: 002b:00007fd699fa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 354.624775][T10888] RAX: ffffffffffffffda RBX: 00007fd69b7c5fa0 RCX: 00007fd69b54ce59 [ 354.624786][T10888] RDX: 03fffffffffffde9 RSI: 0000200000008bc0 RDI: 0000000000000003 [ 354.624797][T10888] RBP: 00007fd699fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 354.624820][T10888] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 354.624831][T10888] R13: 00007fd69b7c6038 R14: 00007fd69b7c5fa0 R15: 00007fff5260ee58 [ 354.624846][T10888] [ 354.857435][T10890] netlink: 'syz.1.2167': attribute type 12 has an invalid length. [ 355.091759][T10901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.572424][T10921] netlink: 'syz.1.2179': attribute type 12 has an invalid length. [ 355.872095][ T28] kauditd_printk_skb: 370 callbacks suppressed [ 355.872111][ T28] audit: type=1400 audit(2000000003.949:4525): avc: denied { prog_load } for pid=10930 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.920036][ T28] audit: type=1400 audit(2000000003.969:4526): avc: denied { prog_load } for pid=10933 comm="syz.2.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.972470][ T28] audit: type=1400 audit(2000000003.969:4527): avc: denied { prog_load } for pid=10930 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 356.014881][ T28] audit: type=1400 audit(2000000003.969:4528): avc: denied { open } for pid=10930 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 356.062416][ T28] audit: type=1400 audit(2000000003.969:4529): avc: denied { map_create } for pid=10930 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 356.107648][ T28] audit: type=1400 audit(2000000003.969:4530): avc: denied { open } for pid=10930 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 356.133349][T10872] Bluetooth: hci0: command 0x1003 tx timeout [ 356.140038][ T3570] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 356.181325][ T28] audit: type=1400 audit(2000000000.000:4531): avc: denied { create } for pid=10930 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 356.218257][ T28] audit: type=1400 audit(2000000000.059:4532): avc: denied { bpf } for pid=10933 comm="syz.2.2185" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 356.249991][ T28] audit: type=1400 audit(2000000000.059:4533): avc: denied { map_create } for pid=10933 comm="syz.2.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 356.296999][ T28] audit: type=1400 audit(2000000000.059:4534): avc: denied { mount } for pid=10933 comm="syz.2.2185" name="/" dev="ramfs" ino=30895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 356.537023][T10952] netlink: 'syz.5.2191': attribute type 12 has an invalid length. [ 357.089443][T10977] __nla_validate_parse: 9 callbacks suppressed [ 357.089491][T10977] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2202'. [ 357.121740][T10977] netlink: 'syz.2.2202': attribute type 12 has an invalid length. [ 357.141372][T10977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2202'. [ 357.630989][T10984] ================================================================== [ 357.639114][T10984] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 357.648959][T10984] [ 357.651282][T10984] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 357.659339][T10984] tick_do_update_jiffies64+0x113/0x1c0 [ 357.664903][T10984] tick_nohz_handler+0x8d/0x3d0 [ 357.669756][T10984] __hrtimer_run_queues+0x276/0x4f0 [ 357.674963][T10984] hrtimer_interrupt+0x261/0x850 [ 357.679900][T10984] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 357.685800][T10984] sysvec_apic_timer_interrupt+0x6f/0x80 [ 357.691437][T10984] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 357.697426][T10984] kcsan_setup_watchpoint+0x404/0x410 [ 357.702810][T10984] __skb_datagram_iter+0x48f/0x680 [ 357.707936][T10984] skb_copy_datagram_iter+0x3f/0xf0 [ 357.713143][T10984] __unix_dgram_recvmsg+0x4b0/0x870 [ 357.718360][T10984] unix_dgram_recvmsg+0x7e/0x90 [ 357.723214][T10984] sock_recvmsg_nosec+0xc2/0xf0 [ 357.728079][T10984] ____sys_recvmsg+0x26f/0x280 [ 357.732841][T10984] ___sys_recvmsg+0x11f/0x3b0 [ 357.737517][T10984] do_recvmmsg+0x1ef/0x560 [ 357.741935][T10984] __x64_sys_recvmmsg+0xe5/0x170 [ 357.746872][T10984] x64_sys_call+0x80f/0x3020 [ 357.751477][T10984] do_syscall_64+0x12c/0x3b0 [ 357.756075][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.761977][T10984] [ 357.764295][T10984] read to 0xffffffff86c07a00 of 8 bytes by task 10984 on cpu 1: [ 357.771921][T10984] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 357.778181][T10984] count_shadow_nodes+0x6a/0x250 [ 357.783136][T10984] do_shrink_slab+0x63/0x660 [ 357.787756][T10984] shrink_slab+0x545/0x8f0 [ 357.792185][T10984] shrink_node+0x6d4/0x20a0 [ 357.796713][T10984] do_try_to_free_pages+0x408/0xc90 [ 357.801915][T10984] try_to_free_mem_cgroup_pages+0x201/0x420 [ 357.807818][T10984] try_charge_memcg+0x373/0xa10 [ 357.812678][T10984] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 357.818222][T10984] __alloc_frozen_pages_noprof+0x18a/0x350 [ 357.824038][T10984] alloc_pages_mpol+0xb3/0x260 [ 357.828810][T10984] alloc_pages_noprof+0x8f/0x140 [ 357.833746][T10984] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 357.839639][T10984] __kvmalloc_node_noprof+0x3d4/0x640 [ 357.845011][T10984] futex_hash_allocate+0x190/0x9a0 [ 357.850148][T10984] futex_hash_prctl+0xd8/0xf0 [ 357.854837][T10984] __se_sys_prctl+0x4f4/0x1400 [ 357.859600][T10984] __x64_sys_prctl+0x67/0x80 [ 357.864194][T10984] x64_sys_call+0x2533/0x3020 [ 357.868867][T10984] do_syscall_64+0x12c/0x3b0 [ 357.873460][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.879351][T10984] [ 357.881675][T10984] value changed: 0x0000000100001655 -> 0x0000000100001656 [ 357.888775][T10984] [ 357.891097][T10984] Reported by Kernel Concurrency Sanitizer on: [ 357.897247][T10984] CPU: 1 UID: 0 PID: 10984 Comm: syz.2.2206 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 357.908191][T10984] Tainted: [W]=WARN [ 357.911986][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.922040][T10984] ==================================================================