last executing test programs: 4.050277648s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xb36}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x200080000000, 0x4}) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x1, 0x0, @private=0xa0100fd, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000002c0)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x6, r6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r7, &(0x7f0000000f00)={&(0x7f00000001c0)=@llc={0x1a, 0x339, 0x91, 0x10, 0x0, 0xf4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)="8d2f52d42ae1ae252c109e9dd587d568f76d288c60cc25bec7fe18d9eccfafcf5f4a652f2f13f8b84550a37e83cde19da42d71b52b5e3b7f7e368c29c5e14da62bc1a83d9b0c396de8ceca87d661eca1b2dad5bb7b00013a3ff875c45c00e5f8b666662a3fd7aa1e450588d10eb0cfcb2d430917728af012b65c038b384fa7f83e4a54fe219c60fe723bde5d3b7a8e633a1b63d6460fa24b929a6059b198ef318070cf", 0xa3}, {&(0x7f00000004c0)="0e6fe9706e30c98643468d652e1adefabbb61e4c9aeaa13e", 0x18}, {&(0x7f0000000500)="dfc3a03cdd624e8265258a783465b5e65dcc4b7a87beb1f714f6bac38021c8b38ac3cc1569ff2de064e6bb39a30fd860db072e471a2a6008c9c5eef6375dc6", 0x3f}, {&(0x7f0000000540)="856af808803d45ca36270b9d85539853aac9573a67826fb00c4781bad4825bede38384b9566aa9abd92f0e8259e9cf58e8ed78cddb9cdfc34074bfe1799fd27c8e15c06e99ecd7ee38f98e88629ee41998fbd8f0aad9a91905729b36067954e930aec8e8e0b364edc4f7a318010e9d752741f31e78e892b3b624eaa57465b9e255b8683d2e325e1137abc60158febfc760f745ea71a5039016", 0x99}], 0x4, &(0x7f0000000b00)=[{0xa0, 0x114, 0x9, "747b722c32f5814018c1c1ac9e05852235779e8a5917dd5fe171df8adb0a1e12d0e0c2a4d9950356eb784d7d1298663b81284e04913094b02e24ee4267d125153b2b2c98b2e327bdd5fd1a13509793f1003805f53075d652369588d2a9223de3ada696782b8fe11d7237b0f0fa5f866b555c0db6df7a68e90e0073dcd8eb80584bfc9e8145b4c6d300c17a9a221a92"}, {0x98, 0x117, 0x9, "1f8b8f12bf967d64cb852ee1faa52a4ae73f7e00cd75896882e35808311591f1b9437aaafe1dba7746ef8d47042e73a2e14afcd386afdfcc3dd994a773784b74cca43b39ab64c98c113683058849a2d66e0db3f3e7bc65bf88d619f86c2d19a6fd626d31b2d240708a677827379adb846ab139817cddf60439d873112aabe8a7430099"}, {0x38, 0x10b, 0x7, "442069f8e46a7bedc17a165c19124bd1d34eabe99aeadd100ba21adf64c992f46baf14046b"}, {0x98, 0x115, 0x5, "e364988ce9493221c080045f31018c3977023b815173828d5f41897e9847d5d92dcfc0e112738e5349e2ec90dfd5421b9560c5b6597afa9a8ae3954e06c01fa30e675096ccd6e49a50fbf7acc3b4c5dbf71d7b8bb166a5b972c75f4353c2bd8ca70666c3d0523787800bba539eaaeef58d85aee59c829bb512808c6a848d71471b8689608665ceb6"}, {0x70, 0x10a, 0x6, "48a45cba1d081547448ccd86f6657e271b1e6584cd218cd49353f78164a25a0b12323ff83b5ddb8c7c5a75fd02ae2db0eec4b4187921613042e3c9317b8c1339495dce84f3b8cfa6de3e612b70f5ce8bfe02beb04ca7aa201f8c4d07"}, {0xe8, 0x1, 0x6, "4fb50f32311bf9b093a31ae54d85ad9be342d73ce8c00fba09247d594d96e838a7e2b67bfebb5ba317d7e3ad60dc4e8dab72126a403c216add84bb392f8f8527b9856314dfe36672af468feaa49ce2ccc09f1ec17a9e7203cacb3d4db0df267c2d41fc2fb1b9e53bb1495310138310c7f7567505d9cbed4d6dc5789d74c04c970deb6017605489685e7694af59785b86366acc890906d3250eef874adb2088e948f0f8d4ac718ba5b584e06730ecccdc9f93ac1012fb67f10ba972035ee4859a97153c15374f8996b8ecfdcb76b9a2397a9604c2"}, {0x70, 0x187, 0x7fffffff, "d8ee045fad15010abe9f1d9832f074e530f93e70626d1072a333630fe0a86267ff4c41bd768f77791392a78f269a9aa942304b6e27849686062a79d94611145bd23a66f2cbc059e6eca583328ebd024e1581e83840db91cb573c4e2588"}], 0x3d0}, 0x408c0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.745805285s ago: executing program 0 (id=1): ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40043080, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x400) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d0101400001020301090298"], 0x0) socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, 0x0) write$tun(r2, 0x0, 0xfdef) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010025bd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@remote, @local, @empty}, 0xc) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 3.677376036s ago: executing program 2 (id=3): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x4000, &(0x7f0000000000)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@context={'context', 0x3d, 'sysadm_u'}}]}, 0x1, 0x3e1, &(0x7f00000008c0)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x7f, 0x3, 0x9, 0x10001, 0x7, 0x2}) 3.379830083s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_getparam(r0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x461d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) (fail_nth: 1) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_rxfh={0x18, 0x29, 0xc8, 0xffffffff, 0x6, "77a6f0", 0x2}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000240)={@none, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.379478903s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_getparam(r0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x461d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_rxfh={0x18, 0x29, 0xc8, 0xffffffff, 0x6, "77a6f0", 0x2}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000240)={@none, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.370186803s ago: executing program 3 (id=7): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7f, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x400, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000001c0)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x10}, 0x32}]}, 0x9a, 0x4ed, &(0x7f0000000a40)="$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") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0x80040}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000040)="010130", 0x3}, {&(0x7f0000000240)="1bbc3f039dff24698000dba1b30245", 0xf}], 0x2, 0xa74a, 0x80000000, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 2.969948392s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_getparam(r0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="1808000000000003000000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500b4d0ff80be698b000007000000b7000000000000009500000000000000fdbe4cf5244b129eadc31b23832af08de59e5e0141e817f48547399335b465f3524e8c300ff3fc83fb1164a70a8b0f6e3e13355d6c063fbfede5852c8c606e7b45f2551afa7c2893"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x461d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_rxfh={0x18, 0x29, 0xc8, 0xffffffff, 0x6, "77a6f0", 0x2}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000240)={@none, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) 2.399105085s ago: executing program 4 (id=9): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) keyctl$revoke(0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file7\x00', 0x80, &(0x7f00000002c0)=ANY=[], 0x13, 0x152d, &(0x7f0000004bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) socket(0x10, 0x3, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (fail_nth: 1) bind$can_raw(r4, &(0x7f0000000080), 0x10) 2.044310993s ago: executing program 1 (id=10): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() (async) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents64(r6, &(0x7f0000000000)=""/164, 0xa4) (async) getdents64(r6, &(0x7f0000000000)=""/164, 0xa4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000e42b71f73bf118a0d4c2165b4407532962b09c032a315e1da86c42a96b0f2e4526a0b0fbcaaf1dff39d5fce6d0a3a4bb64bb462669ddf40f8d15f38016ad7cffe700ff87abc5fb335c9533a51f1a83f389e54cbd2ba48c16267f7233e1bacd55aedb72c2dc7bfdfdae030388fb5a32fe89f75f116a65773a89", @ANYRES16=r1, @ANYBLOB="31832abd7000000000001900000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000003800128009000100766c616e00000000280002801000048006000803050001000b00000006000100030000000c000200090000000c00000008000500", @ANYRES32=r8], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) 1.924005756s ago: executing program 1 (id=11): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x0, 0x300, 0x448, 0x0, 0x0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004b80)=@newtaction={0xe68, 0x30, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x16, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xf541, 0x73, 0x2, 0x6, 0x1}, 0x5, 0x7}, [{0x3ab8, 0x1737, 0x80000000, 0x1, 0xb, 0x5}, {0x401, 0x7, 0xfffffffa, 0x0, 0x0, 0x9}, {0x9, 0x400, 0x0, 0x0, 0x1, 0x10}, {0xf50, 0x4, 0x101, 0x3, 0x2, 0x7}, {0x1, 0x1, 0x3, 0x0, 0x42, 0xbf}, {0xfff, 0x27, 0x81, 0x2, 0x9c, 0x10}, {0xf3, 0x1, 0x3, 0x36e2, 0xffff6c72, 0xe5b}, {0x0, 0x88, 0x711, 0xbcc, 0x683c, 0x101}, {0x5, 0x8, 0x9, 0x8, 0x6, 0x457}, {0x4, 0x4, 0xfffffffe, 0x9, 0x101, 0x80000000}, {0x3, 0x4, 0x53, 0x11520f74, 0x0, 0x3}, {0x6, 0x7, 0x2, 0x3, 0xaf, 0xa0be}, {0x2, 0x2, 0xe, 0x5, 0xfffffff7, 0x3d2}, {0xd6, 0x4, 0x0, 0xc, 0xffff, 0xa}, {0x200, 0x0, 0x1d5, 0x10000, 0xfffffffb, 0x1}, {0x80, 0x80, 0x2, 0x10001, 0x8, 0xacc5}, {0x1, 0x4, 0x40, 0x2, 0x401, 0x8}, {0x5d0b072d, 0x0, 0x8, 0xffff68d0, 0x7, 0x5}, {0x5, 0x7, 0x2, 0x7, 0x7, 0x5}, {0x40, 0xfffffffa, 0x7fffffff, 0xdb, 0x6, 0x7ff}, {0xfffffe44, 0x1, 0xc, 0x2, 0x5, 0x3e18}, {0xf22, 0x7, 0x39, 0x7, 0xffffff81, 0x1}, {0x3, 0xa2ea, 0xf, 0xce40, 0x1394, 0xac}, {0x4, 0x1, 0x8c1e, 0x5, 0x1, 0x97e4}, {0x9, 0x100, 0x5, 0xfffffc00, 0x1, 0x3}, {0x8, 0xc8, 0xc, 0x6, 0xfffffffa}, {0x7, 0xa36, 0x3, 0x7, 0x9}, {0x7, 0x8ac, 0x2, 0x0, 0x6, 0x6}, {0xfff, 0x3, 0x10001, 0xfffffffa, 0x9, 0x4}, {0x8, 0x8, 0x1000, 0x7, 0x5, 0x6}, {0x3, 0x800, 0x856, 0x200, 0x7, 0x193}, {0xfffffff9, 0x5, 0x7, 0xff1, 0x7}, {0x1, 0x10, 0x1, 0x4, 0xfffffffe, 0x7}, {0x3, 0x1, 0x8, 0x5, 0x2, 0x2}, {0xd, 0x4, 0x6, 0x5, 0x401, 0x114}, {0x4, 0x7, 0x6, 0x6, 0xfff, 0x80000000}, {0x80000000, 0xc, 0x8000, 0xa0, 0x5, 0x9}, {0xe16a, 0x5, 0x6, 0x8, 0x6b5, 0x9}, {0x8, 0x6, 0x95b8, 0x2, 0x5, 0xfffffffc}, {0x800, 0x8, 0x0, 0x3, 0x8, 0x8bd}, {0x2, 0xd00, 0xe000, 0xfffffffd, 0xa3a7, 0x80}, {0xfffff001, 0x9, 0x7, 0x5, 0x7fffffff, 0xf}, {0xbf78, 0x9, 0x1, 0x7268, 0x0, 0x1}, {0xe, 0x7fff, 0x2, 0x2, 0xa5e, 0xd}, {0x8, 0xffff8001, 0x8, 0x3, 0xf294, 0x5}, {0x8, 0x3, 0x4, 0x7fff, 0x1, 0x7}, {0xffff, 0x9, 0x7, 0x2, 0x2, 0x7}, {0x29, 0x8, 0x6, 0x8, 0x9, 0x1}, {0x8, 0x1, 0x6060, 0xad70, 0x7f, 0x6}, {0x9, 0x6, 0xfffffffc, 0xb, 0x400, 0x7}, {0xd, 0x5, 0xfff, 0x400, 0x1, 0x9}, {0x0, 0xe9, 0xf, 0x4, 0xffffffff, 0xa}, {0x3, 0x5, 0x0, 0x81, 0x6, 0x226}, {0xb, 0x400, 0x3, 0x7, 0x4, 0x4}, {0xc0000000, 0x4, 0x553e, 0x3, 0xf, 0x8}, {0x92, 0x7ff, 0xffffffff, 0x0, 0x3, 0xb}, {0x9, 0x2, 0x5, 0xc3, 0x1, 0x7fffffff}, {0x0, 0x8, 0x6, 0x6, 0x5, 0x3}, {0x5, 0x5, 0x7, 0x10001, 0x10001, 0x6}, {0xa760, 0x5, 0x7, 0x1, 0x8001, 0xfffffff7}, {0x6b, 0x3000, 0x5, 0x7, 0x2, 0x5}, {0x6, 0x4, 0x2, 0x1, 0x83a, 0x19}, {0x3, 0x4, 0x9, 0x4800000, 0xa2, 0x7}, {0xffff, 0x40, 0x3ff, 0x0, 0x9, 0xa}, {0x8, 0x1, 0x5, 0x7, 0x3, 0xd}, {0x737, 0x7, 0x3, 0x6, 0x2, 0x5d}, {0x7f, 0xf, 0x9, 0xfff, 0x8001, 0x6}, {0x4, 0x3, 0x1, 0x2, 0xe0a, 0x3}, {0x4, 0x8, 0xf, 0xfffff001, 0x100, 0x6}, {0x7, 0x8, 0x908, 0x7ff, 0x7fffffff, 0x9}, {0xf30, 0xd, 0xba, 0x1ff, 0x8, 0x3800}, {0x6, 0x7, 0x4dd, 0x957, 0x4, 0xa630}, {0xffff, 0x3c, 0x3, 0x1000, 0xffffb750, 0x5}, {0xc, 0x1, 0x96, 0x7, 0x4, 0xd9f}, {0xffffffff, 0x7, 0x7, 0xae, 0x6, 0x2}, {0xffff, 0xe24, 0x6f3b, 0x11f4, 0x25f, 0x2}, {0x7ff, 0x32, 0x5, 0x3, 0x7fffffff, 0x4c}, {0x7f, 0xc52, 0x10, 0x7, 0x2, 0x7}, {0x4, 0x800, 0x3, 0x0, 0x6, 0x80}, {0x6, 0x7, 0x7, 0x7, 0x10, 0x9}, {0x9, 0xffffffff, 0x2, 0x9, 0x7, 0x9}, {0x101, 0x9, 0xffffffa8, 0x81, 0x7}, {0x4, 0x7, 0x5, 0x9, 0xe, 0x1}, {0x0, 0x6, 0x2, 0x8, 0x8001, 0x5}, {0xfffffffc, 0x2f8, 0x445d, 0x7, 0x9ae9, 0x9}, {0xdcc4, 0x4, 0x7, 0x9, 0x7, 0xd1}, {0x7, 0x7fff, 0x6, 0xffffffc0, 0x8, 0xb9}, {0x9, 0xdb04, 0x0, 0x3, 0x101, 0x3}, {0xffff, 0x7, 0x1, 0x7ad, 0x1, 0xa48d}, {0x0, 0x2d67c6be, 0x7, 0x2, 0xcce5}, {0x7fff, 0x2, 0x4, 0x5, 0x3}, {0x0, 0x6, 0x2, 0x4, 0x8, 0x1}, {0x80000000, 0xd2b, 0x9, 0x8, 0x1000, 0x78e}, {0xb, 0x8, 0x100, 0x0, 0xfffffff8, 0x19}, {0x7b, 0x2, 0x8629, 0x2, 0xbb0, 0x2}, {0x4, 0x401, 0x8000, 0xffff, 0x75, 0x6}, {0x1, 0x7ff, 0x3, 0x5, 0x1, 0x2307}, {0xfffffffa, 0x4, 0x1, 0x1000, 0x1, 0xa39a}, {0x800, 0x2, 0x3, 0x4000000, 0x8, 0x3}, {0xbfc, 0x300000, 0x8, 0x0, 0x0, 0x4}, {0xffff64f2, 0x80000001, 0x10, 0x3, 0xf, 0x7}, {0x7, 0x5, 0x100, 0xffffffff, 0x0, 0x9}, {0x8, 0xfffffff7, 0xab91, 0x0, 0x7, 0x26}, {0x4, 0x1, 0x1, 0x7, 0x5, 0xffffffff}, {0xfffffffd, 0x5, 0x9, 0x5, 0x1e00000}, {0x55ff, 0x7, 0xfff, 0x0, 0x3, 0x2}, {0xe, 0x1, 0x3, 0x2, 0xe9e, 0x4}, {0x5, 0xfe91, 0x4, 0xbb5, 0x3, 0x4fc8}, {0x5, 0xdbb9, 0x4dc, 0x9, 0xfffff540, 0x4de662aa}, {0x9, 0xdf, 0x800, 0x0, 0x2, 0x8}, {0x94, 0x401, 0x8, 0x1, 0x4, 0x800}, {0x2, 0x7, 0x8, 0x6, 0x2, 0x100}, {0x94, 0x80, 0x743f, 0x2aa5, 0x7, 0x4}, {0x0, 0x8b, 0x1, 0x9, 0x8000, 0x86}, {0x1, 0x0, 0x8, 0x8, 0x9}, {0x100, 0x9, 0x1, 0xfff, 0x1ff, 0x8}, {0x3, 0xffffffff, 0x0, 0x7, 0x3, 0x2}, {0x1, 0xfffffff7, 0xb7c, 0x3, 0x68, 0x7}, {0x3fb, 0x2, 0x6, 0xdfc8, 0x3, 0xffffff52}, {0x6, 0x1, 0x5, 0x6, 0x1ff, 0x7}, {0x1ff, 0xa7, 0x3, 0x5, 0x5, 0x68}, {0x9, 0x7, 0x1, 0xffffff81, 0x22889924, 0x100}, {0xb2, 0x0, 0x6, 0x10, 0x2, 0xc1}, {0x0, 0x4, 0x4, 0x0, 0x6, 0x3ff}, {0x3, 0x3, 0x20000, 0x9, 0x81, 0x617}, {0xfffffff8, 0x4, 0x10000, 0xfffffffc, 0x7, 0x1ff}, {0x80000001, 0x2, 0x92, 0x8, 0x1, 0x81}, {0x6, 0x7, 0xb, 0xac, 0x0, 0x3}], [{0x4ce9692f04faa917, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x11ef1b5341b88ce1, 0xa4be4c7a6a69fdf7}, {0x4}, {0x5, 0x1}, {0x5}, {0x5}, {0x4}, {0x5, 0x6aa2fd186e37b896}, {0xbf1826c686dc8aa4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x0, 0x1}, {0xbaa74de213cb04d0, 0x75111359aff40ea}, {0x3}, {0x1, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x4}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x3}, {0x2}, {0x5}, {0x5}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4fa777e4ed737ffe, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x840}, 0xc054) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x26041814) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000100)=0xffffff7f, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_destroy(r6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r7, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2) 1.435020227s ago: executing program 2 (id=12): fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x50}}, 0x4080) 1.385313588s ago: executing program 2 (id=13): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x20b, 0x6, 0x7, 0x5, 0xef, 0xfb, 0x100}, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x2d, 0x100000000, 0x3a, 0xfffffffffffffffc, 0x2c}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe00000000850000007c000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x190) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="000010000000009a49fb95a156c4c0d2df1fd2", @ANYRES64=r4], 0x48) request_key(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x517, &(0x7f0000001180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000000)='2', 0x1, 0x4fed0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r6, r6, 0x0, 0xe3aa6ea) 1.28034137s ago: executing program 4 (id=14): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ptrace(0x4206, r0) syz_open_dev$ptys(0xc, 0x3, 0x0) tkill(r0, 0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)="84b1", 0x2}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x0, 0x0) tkill(r0, 0x12) 1.205628022s ago: executing program 3 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000040, &(0x7f0000000300)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@nodelalloc}, {@inlinecrypt}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$eJzs3T1sG2UfAPD/neOmH3nf9JXeV3pBHSpAKlJVJ+kHFKZ2RVSq1AGJBSLXjao4dRU70ESRSPcK0QEB6lI2GBhBDAyIhZGVhY8ZqaIRSE0HMHJ8TtPUDk6oY4h/P+ns57k7+/9/fH4e353u5AAG1uHGQxrxREScTyJG1y0bimzh4eZ6K8uLxfvLi8Uk6vULPyeRRMS95cVia/0kez4QEUsR8f+I+CofcTRde8s9rUJ1fmF6slwuzWb1sdrM1bHq/MKxyzOTU6Wp0pUTz79w6vTJUxPHJ9ane7++vpbfWltvfH/z7RvfvHT75sefHFoqvjuZxJkYyZatb8fj1PxM8nFmw/yTvQjWR0m/E2Bbclk/b3Sl/8Vo5LJe3059/eAwvCPpAT1UH46or1lXBAZAotPDgGrtBzSOf1vTTu5/3DnbPABpxF1ZXiy+Fa34Q81zE7F39dhk/y/JQ0cmjePNgzuZKLvS0vWIGB8aevT7n2Tfv+0bfxwJ0lNfnm1uqEe3f7o2/kSb8Wekde70L2qNfyvZ+LfSJn6uw/h3vssYv7364wcd418fjifbxk/W4idt4qcR8XqX8W+98vnpTsvqH0YcifbxW5LNzw+PXbpcLo03H9vG+OLIoRc7tz9if4f4zXO2e1cTWd/+PVlOaZft/+zrT59a2iT+s09vvv3bff77IuKdLuP/595HL3dadud6crexF7DV7Z9EPm53Gf+5M4e/y4rOGgIAAAAAAAAAwGOUrl7LlqSFtXKaFgrNe3j/G/vTcqVaO3qpMpfLrnk7GPm0daXVaLOeNOoT2fW4rfrxDfUTuSxgbt9qvVCslC/2ue0AAAAAAAAAAAAAAAAAAADwd3Fgw/3/v+ZW7//f+HfVwG7V+S+/gd1O/4fB9XD/T/qWB7Dz/P7DwKpv3v/tD8Bu5vcfBpf+D4NL/4fB1bb/79v5PICd5/cfBpf+DwAAAAAAAAAAAAAAAAAAAAAAAAAAPXH+3LnGVL+/vFhs1C8Ozc9NV944drFUnS7MzBULxcrs1cJUpTJVLhWKlZk/e7+kUrk6Hlfmro3VStXaWHV+4bWZytyV1n+IlfI9bxEAAAAAAAAAAAAAAAAAAAD884ysTklaiMg362laKET8KyIOJpFculwujUfEvyPi21x+uFGf6HfSAAAAAAAAAAAAAAAAAAAAsMtU5xemJ8vl0mzvCkNZqO5e9UOtp/kMbWXliFjadJ181rSu02i845ZzbkXp7WYakEKuy+/hwBf6NCABAAAAAAAAAAAAAAAAAMAAe3DTb7ev+L23CQEAAAAAAAAAAAAAAAAAAMBASn9KIqIxHRl9ZmTj0j3JSm71OSLevHXhvWuTtdrsRGP+3bX5tfez+cf7kT/QrVY/TSOi0Y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB6rzC9OT5XJpdpuF4S7W6XcbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbjjwAAAP//QKjKig==") r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x11) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb84dd6012000800103afffe800000000000faffcb9ea55d149dffff00000000bbff070000000000000000000000000001"], 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r3, 0xa, &(0x7f0000000000)={0x9, 0x9, 0x7}) r4 = gettid() sched_setscheduler(r4, 0x2, &(0x7f0000000140)=0x9d3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x1b, 0x2, @tid=r4}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r5, 0x0, 0xf, 0x8) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x2000, 0xc, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x4, 0x4e23, 0x0, 0x2, 0xc0, 0xa0, 0x87, 0x0, r6}, {0x3, 0x224, 0x81, 0x1941, 0xbc, 0x0, 0x600000, 0x2}, {0x100000000, 0xfffffffffffff9a9, 0x7, 0x7}, 0x7, 0x6e6bb3, 0x1, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4d5, 0x18}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x3, 0x1, 0x6, 0x100, 0xff, 0xa}}, 0xe8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r7, r5, 0x9, 0x1) read$FUSE(r1, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r9, r10) 1.003275217s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x163) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0x12, 0xaf8, 0xc0000000}], 0x18) unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="c744240000700000c7442402ada70000c7442406000000000f011424f20f943cddcf46000066b801010f00d8646465650f0f4adeb448b8c09dc42869a25b680f23d00f21f835000000000f23f8f2410f1ae90f205766b82a010f00d866baf80cb8a430a08aef66bafc0cb011ee66baf80cb84ce31889ef66bafc0cb000ee", 0x7e}], 0x1, 0x61, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 665.894865ms ago: executing program 0 (id=17): r0 = socket$tipc(0x1e, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x8080}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000001c0)={0x8, 0xbf1, 0x1, 0xfff0, 0x7, "7e91ad239be6a2cd"}) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x83}}, 0x26) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="440000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d3000000000000008000200640101010c001400", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f0000000100)={0x0, 0x42c, 0xffff5de1, 0x7ff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000680)=[@exit_looper, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r10, 0x0, r8, 0x0, 0xf3a, 0x1) write$binfmt_elf64(r9, &(0x7f0000000380)=ANY=[], 0x18c6) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="6b1414bbe00000020000000002000000ac14143ce0000002"], 0x18) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r13, &(0x7f0000000180), 0x4000190, 0x37fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000900000071111b000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1}, 0x10040) 475.858429ms ago: executing program 2 (id=18): mount$overlay(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 475.539659ms ago: executing program 2 (id=19): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 247.910674ms ago: executing program 3 (id=20): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ptrace(0x4206, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)="84b1", 0x2}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x0, 0x0) tkill(r0, 0x12) 82.850938ms ago: executing program 3 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast1, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x11, 0x842, 0xfffffffffffffffd, 0x0, 0x6}, {0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffc}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x8044821}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4814}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x80000) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r7 = gettid() timer_create(0x7, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x44fb5d42, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@setlink={0x3c, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) 27.197019ms ago: executing program 32 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast1, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x11, 0x842, 0xfffffffffffffffd, 0x0, 0x6}, {0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffc}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x8044821}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4814}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x80000) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r7 = gettid() timer_create(0x7, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x44fb5d42, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@setlink={0x3c, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) 21.868279ms ago: executing program 1 (id=23): fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x50}}, 0x4080) 0s ago: executing program 1 (id=24): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000003840)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/254, 0xfe, 0x1, &(0x7f0000002840)=""/4096, 0x1000}, &(0x7f0000003880)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 22.308506][ T24] audit: type=1400 audit(1783605233.250:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.311772][ T273] cgroup: Unknown subsys name 'net' [ 22.331266][ T24] audit: type=1400 audit(1783605233.250:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.358656][ T24] audit: type=1400 audit(1783605233.280:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.359113][ T273] cgroup: Unknown subsys name 'devices' [ 22.497480][ T273] cgroup: Unknown subsys name 'hugetlb' [ 22.503134][ T273] cgroup: Unknown subsys name 'rlimit' [ 22.675402][ T24] audit: type=1400 audit(1783605233.610:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.698809][ T24] audit: type=1400 audit(1783605233.620:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.723735][ T24] audit: type=1400 audit(1783605233.620:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.752193][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.761253][ T24] audit: type=1400 audit(1783605233.700:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.786820][ T24] audit: type=1400 audit(1783605233.700:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.820258][ T24] audit: type=1400 audit(1783605233.760:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.846817][ T24] audit: type=1400 audit(1783605233.760:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.873030][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.364340][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.371653][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.379294][ T282] device bridge_slave_0 entered promiscuous mode [ 23.386453][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.393510][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.401152][ T282] device bridge_slave_1 entered promiscuous mode [ 23.465546][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.472625][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.480269][ T283] device bridge_slave_0 entered promiscuous mode [ 23.497515][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.504603][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.512115][ T285] device bridge_slave_0 entered promiscuous mode [ 23.518831][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.526017][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.533402][ T283] device bridge_slave_1 entered promiscuous mode [ 23.553194][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.560320][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.568122][ T285] device bridge_slave_1 entered promiscuous mode [ 23.603859][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.611011][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.618636][ T284] device bridge_slave_0 entered promiscuous mode [ 23.628240][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.635295][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.642749][ T284] device bridge_slave_1 entered promiscuous mode [ 23.721028][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.728164][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.735821][ T286] device bridge_slave_0 entered promiscuous mode [ 23.773088][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.780201][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.787734][ T286] device bridge_slave_1 entered promiscuous mode [ 23.805746][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.812898][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.820318][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.827396][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.852224][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.859310][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.866627][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.873678][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.903437][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.910523][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.917808][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.924849][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.956007][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.963079][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.970402][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.977506][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.995391][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.002499][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.009810][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.016881][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.052730][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.060366][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.067750][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.075290][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.083828][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.092472][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.099718][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.107253][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.114373][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.121637][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.130167][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.138427][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.145632][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.152897][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.160384][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.179746][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.188054][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.195073][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.202667][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.211148][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.218312][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.236614][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.244031][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.252551][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.260853][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.267927][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.275252][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.283238][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.291459][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.298519][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.314811][ T283] device veth0_vlan entered promiscuous mode [ 24.335987][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.344470][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.354471][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.363135][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.371724][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.379321][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.387653][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.394681][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.402209][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.410519][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.417862][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.425262][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.433510][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.441627][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.449843][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.459228][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.466787][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.478802][ T283] device veth1_macvtap entered promiscuous mode [ 24.496592][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.504859][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.513115][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.521469][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.530114][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.538967][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.547382][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.555811][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.564068][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.572488][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.581182][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.589374][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.597404][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.605374][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.612992][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.620606][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.628106][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.639913][ T282] device veth0_vlan entered promiscuous mode [ 24.646758][ T285] device veth0_vlan entered promiscuous mode [ 24.654511][ T284] device veth0_vlan entered promiscuous mode [ 24.661439][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.669508][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.678305][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.686004][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.700711][ T282] device veth1_macvtap entered promiscuous mode [ 24.709917][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.718328][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.726662][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.733792][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.742539][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.751010][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.759242][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.766279][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.773856][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.782276][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.790601][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.810796][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.820240][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.829101][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.832369][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 24.839252][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.852942][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.861684][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.870356][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.878747][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.889317][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.897761][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.912693][ T285] device veth1_macvtap entered promiscuous mode [ 24.920576][ T283] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.928565][ T284] device veth1_macvtap entered promiscuous mode [ 24.938463][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.947330][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.956223][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.964725][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.978228][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.987658][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.996143][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.004546][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.023140][ T286] device veth0_vlan entered promiscuous mode [ 25.036791][ T305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.053855][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.063517][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.078279][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.087403][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.095778][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.104139][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.113214][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.122792][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.131493][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.139289][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.158806][ T286] device veth1_macvtap entered promiscuous mode [ 25.175931][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.184758][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.193283][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.202256][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.211924][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.220410][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.229019][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.261933][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.301591][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.302504][ T310] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.330830][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.348266][ T310] FAULT_INJECTION: forcing a failure. [ 25.348266][ T310] name failslab, interval 1, probability 0, space 0, times 1 [ 25.352506][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.362234][ T310] CPU: 1 PID: 310 Comm: syz.1.2 Not tainted syzkaller #0 [ 25.376354][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.386532][ T310] Call Trace: [ 25.389874][ T310] __dump_stack+0x21/0x24 [ 25.394239][ T310] dump_stack_lvl+0x1a7/0x208 [ 25.398943][ T310] ? thaw_kernel_threads+0x220/0x220 [ 25.404330][ T310] ? show_regs_print_info+0x18/0x18 [ 25.409549][ T310] ? proc_fail_nth_read+0x220/0x220 [ 25.414772][ T310] dump_stack+0x15/0x1c [ 25.418966][ T310] should_fail+0x3ab/0x500 [ 25.423512][ T310] ? getname_flags+0xba/0x510 [ 25.428214][ T310] __should_failslab+0xa4/0xe0 [ 25.433006][ T310] should_failslab+0x9/0x20 [ 25.437545][ T310] kmem_cache_alloc+0x3d/0x2d0 [ 25.442343][ T310] getname_flags+0xba/0x510 [ 25.446917][ T310] ? mutex_trylock+0xb0/0xb0 [ 25.451528][ T310] user_path_at_empty+0x2f/0x50 [ 25.456415][ T310] __se_sys_quotactl+0x127/0xaf0 [ 25.461388][ T310] ? ksys_write+0x1fa/0x260 [ 25.466303][ T310] ? __x64_sys_quotactl+0xb0/0xb0 [ 25.471354][ T310] ? debug_smp_processor_id+0x17/0x20 [ 25.476769][ T310] __x64_sys_quotactl+0x9b/0xb0 [ 25.481829][ T310] do_syscall_64+0x31/0x40 [ 25.486656][ T310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.492576][ T310] RIP: 0033:0x7f69a0687e59 [ 25.497018][ T310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.516641][ T310] RSP: 002b:00007f699f0e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 25.525064][ T310] RAX: ffffffffffffffda RBX: 00007f69a090ffa0 RCX: 00007f69a0687e59 [ 25.533131][ T310] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffff80000201 [ 25.541336][ T310] RBP: 00007f699f0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 25.549368][ T310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.557355][ T310] R13: 00007f69a0910038 R14: 00007f69a090ffa0 R15: 00007ffc6184c588 [ 25.609865][ T314] EXT4-fs (loop2): Unrecognized mount option "uid=00000000000000000000" or missing value [ 25.964121][ T315] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue [ 25.976264][ T315] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.134273][ T339] FAULT_INJECTION: forcing a failure. [ 26.134273][ T339] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.147598][ T339] CPU: 1 PID: 339 Comm: syz.1.6 Not tainted syzkaller #0 [ 26.154637][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.164698][ T339] Call Trace: [ 26.168005][ T339] __dump_stack+0x21/0x24 [ 26.172340][ T339] dump_stack_lvl+0x1a7/0x208 [ 26.177051][ T339] ? show_regs_print_info+0x18/0x18 [ 26.182282][ T339] dump_stack+0x15/0x1c [ 26.186445][ T339] should_fail+0x3ab/0x500 [ 26.190870][ T339] should_fail_usercopy+0x1a/0x20 [ 26.195899][ T339] _copy_from_user+0x20/0xd0 [ 26.200496][ T339] iovec_from_user+0x1bc/0x2f0 [ 26.205268][ T339] __import_iovec+0x70/0x390 [ 26.209863][ T339] import_iovec+0x7c/0xb0 [ 26.214202][ T339] vfs_writev+0x153/0x530 [ 26.218546][ T339] ? preempt_count_add+0x90/0x1b0 [ 26.223580][ T339] ? do_writev+0x2c0/0x2c0 [ 26.228005][ T339] ? __fget_files+0x2e1/0x340 [ 26.232686][ T339] ? __fdget_pos+0x1f7/0x380 [ 26.237363][ T339] ? do_writev+0x76/0x2c0 [ 26.241696][ T339] do_writev+0x14e/0x2c0 [ 26.245949][ T339] ? do_readv+0x450/0x450 [ 26.250281][ T339] ? asm_sysvec_call_function_single+0xa/0x20 [ 26.256356][ T339] ? __kasan_check_read+0x11/0x20 [ 26.261473][ T339] __x64_sys_writev+0x7d/0x90 [ 26.266155][ T339] do_syscall_64+0x31/0x40 [ 26.270573][ T339] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.276464][ T339] RIP: 0033:0x7f69a0687e59 [ 26.280881][ T339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.300490][ T339] RSP: 002b:00007f699f09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 26.309013][ T339] RAX: ffffffffffffffda RBX: 00007f69a0910180 RCX: 00007f69a0687e59 [ 26.316989][ T339] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000009 [ 26.324966][ T339] RBP: 00007f699f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 26.332946][ T339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.340919][ T339] R13: 00007f69a0910218 R14: 00007f69a0910180 R15: 00007ffc6184c588 [ 26.728754][ T332] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 26.851548][ T332] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 26.898978][ T332] EXT4-fs (loop3): external journal has bad superblock [ 26.999795][ T347] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 27.056204][ T320] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.099819][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.128174][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.203464][ T361] FAULT_INJECTION: forcing a failure. [ 27.203464][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 27.216475][ T361] CPU: 1 PID: 361 Comm: syz.4.9 Not tainted syzkaller #0 [ 27.223517][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.233595][ T361] Call Trace: [ 27.236909][ T361] __dump_stack+0x21/0x24 [ 27.241253][ T361] dump_stack_lvl+0x1a7/0x208 [ 27.245949][ T361] ? show_regs_print_info+0x18/0x18 [ 27.251169][ T361] ? __kasan_check_read+0x11/0x20 [ 27.256215][ T361] ? cpupri_find+0x11b/0x2f0 [ 27.260825][ T361] dump_stack+0x15/0x1c [ 27.265005][ T361] should_fail+0x3ab/0x500 [ 27.269646][ T361] ? avc_alloc_node+0x83/0x340 [ 27.274433][ T361] __should_failslab+0xa4/0xe0 [ 27.279217][ T361] should_failslab+0x9/0x20 [ 27.283737][ T361] kmem_cache_alloc+0x3d/0x2d0 [ 27.288516][ T361] avc_alloc_node+0x83/0x340 [ 27.293164][ T361] ? avc_xperms_free+0x270/0x270 [ 27.298210][ T361] ? __kasan_check_read+0x11/0x20 [ 27.303254][ T361] ? cpupri_find+0x11b/0x2f0 [ 27.307888][ T361] avc_update_node+0x50/0x750 [ 27.312669][ T361] ? pick_next_pushable_task+0x210/0x210 [ 27.318316][ T361] ? __balance_callback+0x5e/0xc0 [ 27.323355][ T361] avc_denied+0x133/0x1b0 [ 27.327710][ T361] avc_has_perm+0x363/0x3d0 [ 27.332238][ T361] ? avc_has_perm_noaudit+0x260/0x260 [ 27.337633][ T361] ? __balance_callback+0x5e/0xc0 [ 27.342684][ T361] selinux_socket_setsockopt+0x245/0x360 [ 27.348333][ T361] ? selinux_socket_getsockopt+0x340/0x340 [ 27.354166][ T361] ? __sched_text_start+0x8/0x8 [ 27.359042][ T361] ? __fget_files+0x2e1/0x340 [ 27.363740][ T361] security_socket_setsockopt+0x72/0xa0 [ 27.369297][ T361] __sys_setsockopt+0x196/0x480 [ 27.374160][ T361] ? __ia32_sys_recv+0xb0/0xb0 [ 27.378950][ T361] __x64_sys_setsockopt+0xbf/0xd0 [ 27.384014][ T361] do_syscall_64+0x31/0x40 [ 27.388454][ T361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.394365][ T361] RIP: 0033:0x7f1f26373e59 [ 27.398799][ T361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.418432][ T361] RSP: 002b:00007f1f24d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 27.426865][ T361] RAX: ffffffffffffffda RBX: 00007f1f265fc180 RCX: 00007f1f26373e59 [ 27.434879][ T361] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000007 [ 27.443135][ T361] RBP: 00007f1f24d8b090 R08: 0000000000000f00 R09: 0000000000000000 [ 27.451215][ T361] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 27.457245][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 27.457284][ T24] audit: type=1400 audit(1783605238.140:119): avc: denied { create } for pid=344 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.459218][ T361] R13: 00007f1f265fc218 R14: 00007f1f265fc180 R15: 00007ffe16b696c8 [ 27.487914][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.501179][ T24] audit: type=1400 audit(1783605238.440:120): avc: denied { setopt } for pid=344 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.522486][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.530814][ T24] audit: type=1400 audit(1783605238.440:121): avc: denied { bind } for pid=344 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.550780][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 27.551596][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.564793][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.573674][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.582765][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.649900][ T24] audit: type=1400 audit(1783605238.590:122): avc: denied { setopt } for pid=356 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.671965][ T24] audit: type=1400 audit(1783605238.610:123): avc: denied { bind } for pid=364 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.692278][ T24] audit: type=1400 audit(1783605238.610:124): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.726211][ T320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.737140][ T24] audit: type=1400 audit(1783605238.660:125): avc: denied { setopt } for pid=356 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.757688][ T320] usb 1-1: config 0 has no interfaces? [ 27.768343][ T367] EXT4-fs warning (device loop2): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 27.875855][ T24] audit: type=1400 audit(1783605238.810:126): avc: denied { read } for pid=375 comm="syz.3.15" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.902943][ T376] ====================================================== [ 27.902943][ T376] WARNING: the mand mount option is being deprecated and [ 27.902943][ T376] will be removed in v5.15! [ 27.902943][ T376] ====================================================== [ 27.928046][ T24] audit: type=1400 audit(1783605238.820:127): avc: denied { open } for pid=375 comm="syz.3.15" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.965281][ T24] audit: type=1400 audit(1783605238.820:128): avc: denied { ioctl } for pid=375 comm="syz.3.15" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.996413][ T320] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.006113][ T376] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 28.022602][ T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.036215][ T320] usb 1-1: Product: syz [ 28.038280][ T376] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,nodelalloc,inlinecrypt,nouid32,nomblk_io_submit,noinit_itable,init_itable=0x0000000000000005,,errors=continue [ 28.040494][ T320] usb 1-1: Manufacturer: syz [ 28.040510][ T320] usb 1-1: SerialNumber: syz [ 28.061987][ T376] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.098644][ T320] usb 1-1: config 0 descriptor?? [ 28.298385][ T54] usb 1-1: USB disconnect, device number 2 [ 28.729123][ T283] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 29.027467][ T402] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 29.158752][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.165876][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.173339][ T404] device bridge_slave_0 entered promiscuous mode [ 29.180171][ T387] ================================================================== [ 29.181189][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.188266][ T387] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 29.188276][ T387] Write of size 8 at addr ffff88810fd64d50 by task syz.0.17/387 [ 29.188287][ T387] [ 29.195896][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.202047][ T387] CPU: 1 PID: 387 Comm: syz.0.17 Not tainted syzkaller #0 [ 29.211167][ T404] device bridge_slave_1 entered promiscuous mode [ 29.211994][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.242606][ T387] Call Trace: [ 29.245948][ T387] __dump_stack+0x21/0x24 [ 29.250303][ T387] dump_stack_lvl+0x1a7/0x208 [ 29.255040][ T387] ? show_regs_print_info+0x18/0x18 [ 29.260257][ T387] ? thaw_kernel_threads+0x220/0x220 [ 29.265594][ T387] ? debug_smp_processor_id+0x17/0x20 [ 29.270982][ T387] print_address_description+0x7f/0x2c0 [ 29.276545][ T387] ? mutex_lock+0x85/0xf0 [ 29.280908][ T387] kasan_report+0x100/0x140 [ 29.285430][ T387] ? mutex_lock+0x85/0xf0 [ 29.289776][ T387] kasan_check_range+0x249/0x2a0 [ 29.294743][ T387] __kasan_check_write+0x14/0x20 [ 29.299697][ T387] mutex_lock+0x85/0xf0 [ 29.303870][ T387] ? mutex_trylock+0xb0/0xb0 [ 29.308507][ T387] ? l2tp_session_put+0xb2/0x1a0 [ 29.313463][ T387] ? l2tp_session_delete+0x3a9/0x4a0 [ 29.318856][ T387] pppol2tp_release+0x178/0x2b0 [ 29.323732][ T387] sock_close+0xb8/0x200 [ 29.327998][ T387] ? sock_mmap+0xa0/0xa0 [ 29.332254][ T387] __fput+0x2dc/0x730 [ 29.336260][ T387] ____fput+0x15/0x20 [ 29.340252][ T387] task_work_run+0x127/0x190 [ 29.344865][ T387] exit_to_user_mode_loop+0xcb/0xe0 [ 29.350085][ T387] exit_to_user_mode_prepare+0x76/0xa0 [ 29.355568][ T387] syscall_exit_to_user_mode+0x1d/0x40 [ 29.361044][ T387] do_syscall_64+0x3d/0x40 [ 29.365486][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.371405][ T387] RIP: 0033:0x7f9b4c6fbe59 [ 29.375843][ T387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.395898][ T387] RSP: 002b:00007fff8a063ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 29.404335][ T387] RAX: 0000000000000000 RBX: 00007f9b4c985da0 RCX: 00007f9b4c6fbe59 [ 29.412357][ T387] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 29.420445][ T387] RBP: 00007f9b4c985da0 R08: 0000000000000006 R09: 0000000000000000 [ 29.428443][ T387] R10: 00007f9b4c985cb0 R11: 0000000000000246 R12: 00000000000071d7 [ 29.436433][ T387] R13: 00007f9b4c98409c R14: 0000000000006f3b R15: 00007f9b4c984090 [ 29.444507][ T387] [ 29.446854][ T387] Allocated by task 389: [ 29.451113][ T387] __kasan_kmalloc+0xd4/0x100 [ 29.455804][ T387] __kmalloc+0x19f/0x330 [ 29.457907][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.460114][ T387] l2tp_session_create+0x39/0xb60 [ 29.467194][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.472244][ T387] pppol2tp_connect+0xbf5/0x1640 [ 29.479706][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.484393][ T387] __sys_connect+0x3ce/0x450 [ 29.491416][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.495962][ T387] __x64_sys_connect+0x7a/0x90 [ 29.495996][ T387] do_syscall_64+0x31/0x40 [ 29.512512][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.518416][ T387] [ 29.520767][ T387] Freed by task 387: [ 29.524769][ T387] kasan_set_track+0x4a/0x70 [ 29.529384][ T387] kasan_set_free_info+0x23/0x40 [ 29.534342][ T387] ____kasan_slab_free+0x125/0x160 [ 29.539467][ T387] __kasan_slab_free+0x11/0x20 [ 29.544245][ T387] slab_free_freelist_hook+0xc5/0x190 [ 29.549634][ T387] kfree+0xc0/0x270 [ 29.553453][ T387] l2tp_session_put+0xb2/0x1a0 [ 29.558242][ T387] l2tp_session_delete+0x3a9/0x4a0 [ 29.563456][ T387] pppol2tp_release+0x169/0x2b0 [ 29.568324][ T387] sock_close+0xb8/0x200 [ 29.572589][ T387] __fput+0x2dc/0x730 [ 29.576604][ T387] ____fput+0x15/0x20 [ 29.580613][ T387] task_work_run+0x127/0x190 [ 29.585218][ T387] exit_to_user_mode_loop+0xcb/0xe0 [ 29.590460][ T387] exit_to_user_mode_prepare+0x76/0xa0 [ 29.595936][ T387] syscall_exit_to_user_mode+0x1d/0x40 [ 29.601524][ T387] do_syscall_64+0x3d/0x40 [ 29.605992][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.611890][ T387] [ 29.614245][ T387] The buggy address belongs to the object at ffff88810fd64c00 [ 29.614245][ T387] which belongs to the cache kmalloc-512 of size 512 [ 29.628489][ T387] The buggy address is located 336 bytes inside of [ 29.628489][ T387] 512-byte region [ffff88810fd64c00, ffff88810fd64e00) [ 29.642211][ T387] The buggy address belongs to the page: [ 29.647893][ T387] page:ffffea00043f5900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fd64 [ 29.658149][ T387] head:ffffea00043f5900 order:2 compound_mapcount:0 compound_pincount:0 [ 29.666497][ T387] flags: 0x4000000000010200(slab|head) [ 29.671982][ T387] raw: 4000000000010200 ffffea0004466300 0000000700000007 ffff888100043080 [ 29.680683][ T387] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 29.689423][ T387] page dumped because: kasan: bad access detected [ 29.695851][ T387] page_owner tracks the page as allocated [ 29.701611][ T387] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 98, ts 5125331615, free_ts 0 [ 29.719600][ T387] prep_new_page+0x176/0x190 [ 29.724205][ T387] get_page_from_freelist+0x225f/0x23f0 [ 29.729769][ T387] __alloc_pages_nodemask+0x29a/0x640 [ 29.735550][ T387] new_slab+0x84/0x3f0 [ 29.739643][ T387] ___slab_alloc+0x2f8/0x4c0 [ 29.744246][ T387] __slab_alloc+0x63/0xa0 [ 29.748587][ T387] __kmalloc_track_caller+0x1e4/0x310 [ 29.754101][ T387] __alloc_skb+0xdc/0x520 [ 29.758464][ T387] alloc_uevent_skb+0x85/0x240 [ 29.763256][ T387] kobject_uevent_net_broadcast+0x335/0x5a0 [ 29.769167][ T387] kobject_uevent_env+0x52b/0x700 [ 29.774211][ T387] kobject_synth_uevent+0x452/0x940 [ 29.774583][ T404] device veth0_vlan entered promiscuous mode [ 29.779432][ T387] store_uevent+0x16/0x30 [ 29.779443][ T387] module_attr_store+0x5f/0x80 [ 29.779453][ T387] sysfs_kf_write+0x129/0x150 [ 29.779486][ T387] kernfs_fop_write_iter+0x2bd/0x400 [ 29.804531][ T387] page_owner free stack trace missing [ 29.810029][ T387] [ 29.812376][ T387] Memory state around the buggy address: [ 29.818034][ T387] ffff88810fd64c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.826214][ T387] ffff88810fd64c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.834296][ T387] >ffff88810fd64d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.842387][ T387] ^ [ 29.848601][ T404] device veth1_macvtap entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 29.849089][ T387] ffff88810fd64d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.863513][ T387] ffff88810fd64e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.871589][ T387] ================================================================== [ 29.879674][ T387] Disabling lock debugging due to kernel taint [ 29.891475][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.938852][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.955801][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.982951][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.015884][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.035967][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.055696][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.067427][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.075736][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.083241][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.090987][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.099455][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.107108][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.386108][ T7] device bridge_slave_1 left promiscuous mode [ 30.392388][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.400047][ T7] device bridge_slave_0 left promiscuous mode [ 30.406392][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.414221][ T7] device veth1_macvtap left promiscuous mode [ 30.420432][ T7] device veth0_vlan left promiscuous mode [ 31.526393][ T7] device bridge_slave_1 left promiscuous mode [ 31.532532][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.540044][ T7] device bridge_slave_0 left promiscuous mode [ 31.546435][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.554167][ T7] device bridge_slave_1 left promiscuous mode [ 31.560415][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.567844][ T7] device bridge_slave_0 left promiscuous mode [ 31.573953][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.581798][ T7] device bridge_slave_1 left promiscuous mode [ 31.587992][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.595366][ T7] device bridge_slave_0 left promiscuous mode [ 31.601678][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.609571][ T7] device bridge_slave_1 left promiscuous mode [ 31.615857][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.623255][ T7] device bridge_slave_0 left promiscuous mode [ 31.629530][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.637944][ T7] device veth1_macvtap left promiscuous mode [ 31.643954][ T7] device veth0_vlan left promiscuous mode [ 31.649825][ T7] device veth1_macvtap left promiscuous mode [ 31.655887][ T7] device veth0_vlan left promiscuous mode [ 31.661723][ T7] device veth1_macvtap left promiscuous mode [ 31.667786][ T7] device veth0_vlan left promiscuous mode [ 31.673631][ T7] device veth1_macvtap left promiscuous mode [ 31.679888][ T7] device veth0_vlan left promiscuous mode