last executing test programs: 6.830338701s ago: executing program 4 (id=77): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)=0x19) writev(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000001980)="a2", 0x1}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr=0x51420305, @broadcast}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) 6.703043398s ago: executing program 4 (id=80): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x1) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$eJzs3U9oHNcZAPBvZncl/1EtFVpoiw+mLbhgvJL8p3V7sq+lBoMPhV5asVoLoZXWaKXWEoLKd1PqQ0iCL84tOeSYkEMOIZccc80lIeeAiUUClg/Jht2dldeyZK8UrdfR/n4w0nvzRvu9N7vf084wwwQwsE41fqQRv46Ia0nEaEdbPrLGU63tNjfWSkOxVkqiXr/+dRJJRDzaWCu1t0+y38cjYj0ifhURHxcizqRbLznULtRWVuemKpXyYlYfX5q/OV5bWT07Oz81U54pL5z/058vXrpwcfLcZGd3H9c7a4W9jfXOF3f/d+fTv96/+867J9dLr00lcTlGsrbOcRyk1j4pxOVt6y/0IlgfJf3uAPuSy/K8kUq/jNHIZVm/k3rn5DD8UroH9FB9OKK+paMIDIBE0sOAan8PaBz/tpeX+f3jwZXWAUgj7ubGWum/0Y6fb52biCPNY5Nj3yRPHZk0jjfHXmZHOZTWb0fERD7/7Oc/yT5/+zdxEB2kpz660nqjnn3/0635J3aYf0ba505/pGz+G4qI5vy3uUP83C7z37UuY3z3jy/f3DX+7eH4Tb51bvfp+MlW/GSH+GlE/KvL+Pf+/sGl3drqb0Wcjp3jtyXPPz88fmO2Up5o/dwxxoenT/5l9/FHHNslfuuc7ZFmRzrHP5T1Ke1y/O9/8t5v158T/w+/2yl++tz9fzQi/t9l/J8/evtvu7U9uJ08bHwL2Ov7n0Qh7ncZ/4+XT32eFZ01BAAAAAAAAACAA5Q2r2VL0uJWOU2LxdY9vL+IY2mlWls6c6O6vDDduuZtLApp+0qr0VY9adQns+txxzbq9fpspXyuXc/az+eygLmjzXqxVK1M93nsAAAAAAAAAAAAAAAAAAAA8Ko4vu3+/29zzfv/tz+uGjisdn/kN3DYyX8YXJ35f6LjwYvA4ef/PwysuvyHwSX/YXDJfxhc8h8Gl/yHwSX/YXDJfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IlrV682lvrjjbVSoz6dX1meq/777HS5NlecXy4VS9XFm8WZanWmUi6WqvMver2kWr05EQvLt8aXyrWl8drK6j/nq8sL7WeKlgs9HxEAAAAAAAAAAAAAAAAAAAD89Iw0lyQtRhRa9TQtFiN+FhFjSSQ3ZivliYg4ERGf5QrDjfpkvzsNAAAAAAAAAAAAAAAAAAAAh0xtZXVuqlIpL/aukM9C9TBE94X8XjaOiPWD7UbjFff8V4VsB/Z51x2OQu7V+By++oU+TkoAAAAAAAAAAAAAAAAAADCgntz02+1ffN/bDgEAAAAAAAAAAAAAAAAAAMBASr9KIqKxnB79/cj21qFkM9f8HRH/uXf99VtTS0uLk431D7fWL72RrT/Xj/4D3WrnaRoRjTwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnqitrM5NVSrlxf0UkohoLC/YuN9jBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiPHwIAAP//R8/KnQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x148) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x2) fallocate(r2, 0x3, 0xefd, 0x10000) 4.707729295s ago: executing program 4 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x201, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) fchown(r5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_trace', 0x141a82, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x7, 0x1, 0xe, 0x0, 0x2, 0x88000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x3}, 0x50, 0x5, 0x70000000, 0x88e48c2658d1c163, 0x2, 0x4, 0x1, 0x0, 0x800, 0x0, 0x5}, r6, 0x7, r6, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f00000010c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, 0x0) close(r2) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x40) splice(r0, 0x0, r1, 0x0, 0x39000, 0x3) 4.210470864s ago: executing program 2 (id=135): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) close_range(r0, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x1}, 0x75}) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x5, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x300, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0x9a3050, &(0x7f0000000640)=ANY=[], 0x1, 0x24f, &(0x7f0000000880)="$eJzs3cFqE1EUBuCTNm1jRexaXAy4cVXUNwgSQRwQIlnoykB104ow3URXeQwfQXwkH6Or7kbsHUydVhdl2plmvg/CHPIz5JwscrO4N3n/8NPhwefjj+XPbzEaZTGMWMZpxF5sxGYkg+q6cVZvx3nLAABum+l0Pm67Bxo0uPhUUYznWxGxcyGZ/biZpgAAAAAAAAAAAGia/f8A0D/2/6+/ohjPd6vvb3+z/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoz2lZ3i//82i7PwCgedZ/AOgf6z8A9I/1HwD6583bd6/GeT6ZZtko4mS5mC1m6ZryFy/zyZPszN7qrpPFYrZV1fnkacqzer5b3f/s0nw7Hj9K+e/s+eu8lu/EwXUPDwAAAAAAAAAAAAAAAAAAAB2xn/1RO9+/mfL9f+WpOvf7ALXz+8N4MLyxMQAAAAAAAAAAAAAAAAAAAOBWO/7y9XB+dPSh6Hjx/V7qtyv9rE9x95LozlXe51F0YRxFQ0Xbn0wAAAAAAAAAAAAAAAAAANA/q0O/bXcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO1Z/f//9RX11xzEoJ1hAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLX2KwAA//9Ll454") timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) membarrier(0x10, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4000) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) rt_sigsuspend(&(0x7f0000000840)={[0x2]}, 0x8) membarrier(0x8, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x1, 0x7, 0x200}, &(0x7f0000000500)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000300012800b00010065727370616e000020000280040012000500160002000000060003008100000006000e"], 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000080)=0x2, 0x12) io_uring_enter(r10, 0x3b34, 0x9eac, 0x7, &(0x7f0000000240)={[0x9692]}, 0x8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0xb8, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb8}}, 0x0) 1.979188785s ago: executing program 1 (id=164): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000000440)="9637e7e23f9bf6b81bb91f924a76aa27c2db4a5cdaa7fcbe21d8652bfbff6ebc643a76dbbf55a17165cecd6d52cf5b932a47dbcee398bde19ddf0dadc84a09d6050da3087fee1984db767aeea530f911000002000000", 0x56}, {&(0x7f00000024c0)="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", 0x103c}], 0x2, 0x0, 0x1, {0x1}}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1dcd, 0x8979, 0xfffffff8, 'pptp\x00', {0x9}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x9, 0xe, [0x32, 0x21, 0x12, 0x23, 0x3b, 0x28, 0x20, 0xf, 0x13, 0x1, 0x31, 0xa, 0x1d, 0x1e, 0x21, 0x2c], 0x2, 0x9, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0xfffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES32=r7], 0x14}, 0x1, 0x0, 0x0, 0x44090}, 0x4040) mkdirat(r7, &(0x7f0000000280)='./file0\x00', 0x24) sendmsg$unix(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)='>', 0x1}], 0x1}, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) (async) recvfrom$unix(r5, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x2) 1.822376934s ago: executing program 1 (id=167): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x20110, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x80, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 1.755347898s ago: executing program 1 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x40, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0x6}, {0xffe0, 0x6}, {0xfff1, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$VT_RELDISP(r2, 0x5605) 1.681730482s ago: executing program 0 (id=172): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000500000000000500040000180000010400006269746d61703a706f7274000c00060004400000000005000100070000000500040000000000"], 0x50}}, 0x24008014) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000001010102000000000000000001000004100004800c0001800518000d8014000500fc0100000000000000000000000000000800b76e9f21000c2c000f8008000240000000000800014000000408000240000000070800034000000009080002400000081406001240000200"/120], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xf}]}, @NFT_MSG_DELFLOWTABLE={0x8c, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x444}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xda81}]}]}, @NFT_MSG_NEWTABLE={0xd8, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xb5, 0x6, "12642cf09259894a2ee78ad826ea1e7171642e82cfb61921128557e4d44e0b168ff6669cd6ed221f188b66705019c0484abd34c92ecdc5005a154d2fa7fe046cae5e7ad78b88b33306cc5459f053efba17eb6fc2e0207708480df82589592b0f1710e10fe96f28df4fece21e66b2afe194525d3b0a97447fd6f7e5061ff543c053543366af18d0a579cefeec6ddc153aed78aabce6ffeafe31901b4eff02d55b845e1dd85de657cd10269423c8bc8c2505"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x40) copy_file_range(r0, &(0x7f0000000300)=0x5, r0, 0x0, 0x1ff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000480)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, {0x1, @random="e83fa2dd2158"}, 0x38, {0x2, 0x4e22, @empty}, 'ip6gre0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01000a0000000700000000000009010000000100000003000093000000000d00000005000000020000000f000000000000808c22262823000001000f00000028850000010001000b0000000000000f020000005ef91000000000000009020000000400000000000012050000000600000004000013000000000b000000070000000700000009000000010000004e0a00000c000000010000800000000005000000050000000800000000000000000000014792c5914bbc478843d036000000000c008007100000000000000a0100000008000000000000110500000007000000100000000000000c04000000000000000000000030302e"], &(0x7f0000000040)=""/249, 0xfa, 0xf9, 0x6}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x83, &(0x7f0000000140)={r8}, 0x8) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000090601020000000000000000030000000900020073797a3100000000050001000700000054000780060004404e1f0000180014801400024000000000000000000000000000000000050007003a000000050015000600000008000840000000021800018014000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.652702714s ago: executing program 1 (id=173): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x6, 0x0, 0xffffffffffffff94}, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 1.599030557s ago: executing program 4 (id=175): r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/ip_mr_vif\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x40, 0x4000, 0x6, 0x1000}, &(0x7f0000000040)=0x10) (fail_nth: 1) 1.286404505s ago: executing program 4 (id=176): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0xd}]}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00', 0x2, r1) sendto$inet(r0, &(0x7f0000000580)="88b6", 0x2, 0x400c000, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r3, 0x0, 0x0, 0x4}]) write$selinux_attr(r3, &(0x7f0000000200)='system_u:object_r:mail_spool_t:s0\x00', 0x22) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000003700), r5) keyctl$setperm(0x5, r1, 0x340016) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010029028000007ce544de8e865c1e519400fcffffff0008080001b6", @ANYRES32=r2, @ANYBLOB="7b0a5a854cf26a09e2f216ad661d87"], 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x5880) listen(r0, 0xda90) accept$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x42, 0x45, 0x5, 0x0, 0xd, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000340), 0xc}, 0x12122, 0x10000, 0xfffffffe, 0x2, 0x4, 0x5, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000fefffff90000000000000000850000004f000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000009f6c816ce0f7172aa0cce950000000000000009554707a482163ade287f4f44b149a256c248699971a339fdcedfcd2e36e4afb73854f954eafb9e89ebd019"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010f27bd7000fddbdf250f00000020000180140002006970766c616e31000000000000000000080001009f8d48ec2e23149aafd091d1f65948504c3c926a51bb6cf95586010afa685b0cb4760ebba9bba48672dc75d072825534df54ea75120adc91d92dca7387a2cca430be7ccff7fda4abcf138bcc01e02c258a0007b7a7b67bb9b0bc62d28c5734b9d303a693334f6e57794ab7e6f872fea139a8558341a0a68404bf9e146dc75eb66c223881311cc5dcce05a6473ef7ff2da22a0dd3a0db73daac4360b4f103a3f5762a53b7cc19e214ca0ef1e44eff347d905be763da4c2c820a49b91c375744289e", @ANYRES32=r10, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x24008040}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf25100000004400018008000300020000001400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020069705f7674693000000000000000000008000900100000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300d4f9482f08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007663616e30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020076f83168315f746f5f687372000200000000030002000000c56863a76cdeef8b380a759d96d92c544a846541f6961deab570a07861a511e6140c7b368f210fcdbade59432463900a9dd6caae3bf12ece3561a94a14"], 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x4000800) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x352, 0x5f6f, 0x2, &(0x7f00000001c0)={[0x6]}, 0x8) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r11, &(0x7f0000000080)=""/196, 0xc4, 0x3) 1.244565987s ago: executing program 1 (id=178): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100000085000000a0", @ANYRES32, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095d707db06657a4a635e6e3173f2effefbd31ef9169c09879cebb9fa6f16c1d65b4e2ee7469287c5ec53961e78a108cc94259e6053d6cc1427421b4e00b0bcad7601cef19caf6f76a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) listen(0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 1.174946482s ago: executing program 3 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="df33c9f7b9a600000001000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.110520085s ago: executing program 3 (id=180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x7, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x401070c9, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r4, 0x830b318aaeefb05f, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x2040010) 1.105355255s ago: executing program 3 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000000403002bbd7000fedbdf250500000805c9ec7c7e027c8f62013c69ac85ea905884c89fb87e52d75b0588020000005ba094015403730b77e573bc6dcbae5eb1055f3349fbecb428ff68ff93eeed4a8c846097023398774042eb"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46041000030700000000000000030003"], 0x138) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.061211158s ago: executing program 3 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000104000f00000000000000000001", @ANYRES32=0x0, @ANYBLOB="2105d600000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 997.658352ms ago: executing program 2 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x40, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0x6}, {0xffe0, 0x6}, {0xfff1, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$VT_RELDISP(r2, 0x5605) 678.565601ms ago: executing program 0 (id=184): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES8], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002020000000000000001000005000000000000000001"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 643.029053ms ago: executing program 1 (id=185): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10008, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'\x00', 0x100}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xff}}}]}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000280)=0x9) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0xa1, 0xa54, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x7, 0x2800000, 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f00000001c0)=0x4) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000003c0)={'veth1_vlan\x00', 0xffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x30) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r10) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="8d100000", @ANYRESDEC=r4, @ANYBLOB="01002cbd7000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x44}}, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 566.613827ms ago: executing program 3 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = io_uring_setup(0x4ac, &(0x7f0000000280)={0x0, 0x75fb, 0x8, 0x2, 0x1a}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000300)={0xfffffffffffffffe, r0, 0x33, {0x1, 0x1}, 0x6}, 0x1) chroot(&(0x7f0000000100)='./file0\x00') (async, rerun: 64) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RREADDIR(r4, &(0x7f0000000140)={0xd7, 0x29, 0x2, {0x6, [{{0x10, 0x0, 0x1}, 0xe67, 0x6, 0x7, './file0'}, {{0x8, 0x4, 0x7}, 0x8000, 0x9, 0x10, './file0/../file0'}, {{0x80, 0x3}, 0x7, 0x2, 0x7, './file0'}, {{0x80, 0x0, 0x7}, 0x1, 0x4, 0x7, './file0'}, {{0x2, 0x3, 0x4}, 0xfffffffffffffff9, 0x4, 0x7, './file0'}, {{0x2, 0x1, 0x4}, 0x1, 0x4, 0x10, './file0/../file0'}]}}, 0xd7) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 566.368187ms ago: executing program 3 (id=187): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) sendfile(r0, r0, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x8000}], 0x1, 0x7e97) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x200f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 554.915818ms ago: executing program 0 (id=188): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x24008800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="740000002d0001002abd70000000000008000000", @ANYRES32], 0x74}], 0x1}, 0x0) io_uring_setup(0x6500, &(0x7f0000000200)={0x0, 0x60ec, 0x40, 0x3, 0x10000305}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 545.902088ms ago: executing program 2 (id=189): r0 = epoll_create1(0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x7, 0x24501) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{0x0, 0x80000}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x9, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xa6dc4e42cb0b3452, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x0, 0x0, 0x7, 0xb, 0xfffffffffffffff0, 0xfffffffffffffff7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], &(0x7f0000000300)='syzkaller\x00', 0x10, 0x25, &(0x7f0000000340)=""/37, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x24cf4, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1], 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) rmdir(&(0x7f0000000100)='./control\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xb8}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x34}}, 0xc014) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 488.042132ms ago: executing program 2 (id=190): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x40}, 0x100b28, 0xa, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec0000001000010800000000000000b000000000", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 366.414059ms ago: executing program 2 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYBLOB="010000000000000024001280090001"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 365.926589ms ago: executing program 2 (id=192): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_emit_ethernet(0x13e, &(0x7f0000001a00)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000086dd600107000108112efc010000000000000000000000000000ff02000000000000000000000000000100000e22010890786b6ec53f624acc56ae2fde13655ce6d60bd86e2d570581da9f4759d0b6291009e1b2a240192fde3ec12c739b7f7b6629ede478824c1e34715449339cf0db35b1fbaf7199912cc6bb1173ea492d925ecfb6e8ca6607c404a7bb7ba70e5f3f138d7be09faabb298dfab4aec729dec6aa870bfa9c7dcf822c951f7f5f0651e3d90b0711882c91b87e1757b632fbe75798a8988991d24b907271a41f8af6df0bf38b56f25cfd83bb8fbc8ae40ce837b893728e0f9d7d4a4686419dcde87840ff8e062dd3cac37216c79a5639651b47b7cc6ac85505db739260dd8faf84ab0800000000000000549e07f2c4987d0b2257573db46bb898d9e8a3321e24ad6148cce000a14e87578416a64ccdf6829b9bd29168f4721ed2d1fbe59927f959a21bab5b409861264041af75514f3cde664ea87a549537bcf68d3d76b7a49cb7eaec9579"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff000000", @ANYRES64=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x50d000) syz_clone3(&(0x7f0000000640)={0x8000, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f0000000440), {0x2b}, &(0x7f00000004c0)=""/101, 0x65, &(0x7f0000000540)=""/118, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r2}}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="d41034000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000380), 0x86a3d3e98a298a0d}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7ffb}, r3, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$msr(r4, &(0x7f00000002c0)=""/111, 0x6f) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000a00)=""/4096, 0x1000}) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5400000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002000128009000120766c616e00000000100002800c0002001e0000001f00000014003500766c616e3000"/60], 0x54}}, 0x8000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) 365.606859ms ago: executing program 4 (id=193): syz_io_uring_setup(0x49a9, &(0x7f00000007c0)={0x0, 0xad2a, 0x10000, 0x0, 0x33a}, &(0x7f0000000840), &(0x7f0000000880)) mq_open(0x0, 0x0, 0x11, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) getegid() statx(r2, &(0x7f0000000680)='./file0\x00', 0x0, 0x80, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000940)=ANY=[], 0x7c, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) fchdir(r1) (async) fchdir(r1) open(0x0, 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) (async) sendfile(r3, r3, 0x0, 0xe3aa6ea) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f000000a000), 0x1) 324.655101ms ago: executing program 0 (id=194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x20000000}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) fsopen(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$TIOCGPTPEER(r4, 0x5441, 0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x20002010}) close_range(r0, 0xffffffffffffffff, 0x0) 241.549846ms ago: executing program 0 (id=195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x1d, 0x2b, 0x1, 0xffffffff}]}) sync() ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) 0s ago: executing program 0 (id=196): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@abort}]}, 0x0, 0x47d, &(0x7f0000000340)="$eJzs3M9vFFUcAPDvzHZLAbEV8QcIUkUj8UdLyw85eNFowkETEz1gPNW2kEqhhtZECNHqAY+Gv8D4XxhPejHqRROvejckxHAB9bJmdmbor13a0u0usJ9PMtv3Zl73ve/MvN0383Y3gK41mD0kEQ9ExB8R0Z9nlxYYzP/cvH5p/J/rl8aTqNXe+Tupl7tx/dJ4WbT8v+15plYr8lsa1Hv5/Yix6enJ80V+eO7sR8OzFy6+NHV27PTk6clzo8ePHzm8r/fY6NGWxJnFdWPPpzN7d59478pb4yevfPBzkkYedyyLo1UG873b0LOtrqzDdixKJz3ZY1+R2//rwpZGZwKdVImI7HBV6/2/Pyqx9da2/njji442DthUtVqttuRVubJk83wNuI8l0ekWAJ1RvtFn17/l0sbhR8ddezW/AMrivlks+ZaeSPPE/uqy69tWGoyIk/P/fp0tsUn3IQAAFvs+G/+82Gj8l8ajeaI3e3iwmEMZiIiHImJnRDwcEbsi4pGIetnHIuLxdda/fIZk5fgnvXrHwa1BNv57pZjbWjr+S8siA5Uit6MefzU5NTU9eajYJwejuuXUVDI5cps6fnj996+abVs8/suWrP5yLFi042rPsmmTibG5sY3EvNi1zyP29DSKP6nPC0Qxr7c7IvbcYR1Tz/c03bZ6/LfR/GnXrPZNxHP58Z+PZfGXkqbzkyMvHxs9OtwX05OHhsuzYqVffrv8drP6NxR/C2THf1vD8/9W/ANJX8TshYtn6vO1s+uv4/KfXza9plnn+X9iR3H+9ybv1lf0Fhs+GZubOz8S0Zu8uXL96MKzlfmyfBb/wQON+//OWNgTT0TE3ojYFxFPZheFRdufioinI+LAbeL/6bVnPlx//O2ZK83in1jt+Mfi47/+ROXMj9+tHn9fRDQ7/kfqqYPFmrW8/q21gRvZdwAAAHCvyD8Dn6RDC+lkaCj/DP+u2JZOz8zOvXBq5uNzE/ln5QeimpZ3uvoX3Q8dKe4Nl/nRZfnD+X3jNCpb6/mh8ZnpiU4HD11u+4r+n6ZZ/8/8Vel064BN14J5NOAepf9D99L/oTslq/b/atvaArSfn2WB7tXo/f+zpqWHvt3UxgBt5fofutca+v98/qf5qAC4N3n/h+6l/0NXavrd+HRDX/lve+K/4vcM75b23P+JSO+KZtz/iZ41/5hFs0R1ZV+u9ef9P1uzpeF/dfqVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDX+DwAA//+09+Ro") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000f7ffff7f002900000032000000"], 0x28}, 0x40) kernel console output (not intermixed with test programs): [ 20.482740][ T29] audit: type=1400 audit(1769989782.531:62): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.505300][ T29] audit: type=1400 audit(1769989782.531:63): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.528446][ T29] audit: type=1400 audit(1769989782.531:64): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.551806][ T29] audit: type=1400 audit(1769989782.531:65): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.575164][ T29] audit: type=1400 audit(1769989782.531:66): avc: denied { read open } for pid=3196 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.216' (ED25519) to the list of known hosts. [ 25.858469][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.858487][ T29] audit: type=1400 audit(1769989787.901:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.888205][ T29] audit: type=1400 audit(1769989787.931:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.888884][ T3299] cgroup: Unknown subsys name 'net' [ 25.916710][ T29] audit: type=1400 audit(1769989787.971:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.041747][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.047927][ T3299] cgroup: Unknown subsys name 'rlimit' [ 26.148243][ T29] audit: type=1400 audit(1769989788.191:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.177104][ T29] audit: type=1400 audit(1769989788.191:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.186804][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.197798][ T29] audit: type=1400 audit(1769989788.191:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.227092][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.227659][ T29] audit: type=1400 audit(1769989788.191:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.256929][ T29] audit: type=1400 audit(1769989788.201:77): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.278352][ T29] audit: type=1400 audit(1769989788.211:78): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.303361][ T29] audit: type=1400 audit(1769989788.211:79): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.364266][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.419308][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.451224][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.458396][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.466439][ T3312] bridge_slave_0: entered allmulticast mode [ 27.472863][ T3312] bridge_slave_0: entered promiscuous mode [ 27.490013][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.504079][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.511539][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.518763][ T3312] bridge_slave_1: entered allmulticast mode [ 27.525595][ T3312] bridge_slave_1: entered promiscuous mode [ 27.578716][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.586116][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.593530][ T3322] bridge_slave_0: entered allmulticast mode [ 27.600823][ T3322] bridge_slave_0: entered promiscuous mode [ 27.613059][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.624984][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.633897][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 27.643101][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.650228][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.657791][ T3322] bridge_slave_1: entered allmulticast mode [ 27.664470][ T3322] bridge_slave_1: entered promiscuous mode [ 27.671801][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.731932][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.748466][ T3312] team0: Port device team_slave_0 added [ 27.754585][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.762373][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.770149][ T3313] bridge_slave_0: entered allmulticast mode [ 27.776738][ T3313] bridge_slave_0: entered promiscuous mode [ 27.784309][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.793722][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.801163][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.808385][ T3313] bridge_slave_1: entered allmulticast mode [ 27.814857][ T3313] bridge_slave_1: entered promiscuous mode [ 27.826861][ T3312] team0: Port device team_slave_1 added [ 27.872446][ T3322] team0: Port device team_slave_0 added [ 27.878420][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.885666][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.912803][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.924791][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.934038][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.941497][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.948834][ T3326] bridge_slave_0: entered allmulticast mode [ 27.955368][ T3326] bridge_slave_0: entered promiscuous mode [ 27.967039][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.974757][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.981950][ T3326] bridge_slave_1: entered allmulticast mode [ 27.988625][ T3326] bridge_slave_1: entered promiscuous mode [ 27.995901][ T3322] team0: Port device team_slave_1 added [ 28.002050][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.009218][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.036683][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.052004][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.088633][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.095892][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.121977][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.132985][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.140514][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.148078][ T3316] bridge_slave_0: entered allmulticast mode [ 28.154823][ T3316] bridge_slave_0: entered promiscuous mode [ 28.162357][ T3313] team0: Port device team_slave_0 added [ 28.168312][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.175517][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.182951][ T3316] bridge_slave_1: entered allmulticast mode [ 28.189248][ T3316] bridge_slave_1: entered promiscuous mode [ 28.201153][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.210570][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.217634][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.244713][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.256353][ T3313] team0: Port device team_slave_1 added [ 28.275464][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.311490][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.322868][ T3312] hsr_slave_0: entered promiscuous mode [ 28.328850][ T3312] hsr_slave_1: entered promiscuous mode [ 28.340093][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.347263][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.373845][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.390318][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.400362][ T3326] team0: Port device team_slave_0 added [ 28.408551][ T3322] hsr_slave_0: entered promiscuous mode [ 28.414893][ T3322] hsr_slave_1: entered promiscuous mode [ 28.420878][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 28.426656][ T3322] Cannot create hsr debugfs directory [ 28.446407][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.453520][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.480984][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.492637][ T3326] team0: Port device team_slave_1 added [ 28.528305][ T3316] team0: Port device team_slave_0 added [ 28.554070][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.561405][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.588202][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.600279][ T3316] team0: Port device team_slave_1 added [ 28.618005][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.625201][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.651878][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.693981][ T3313] hsr_slave_0: entered promiscuous mode [ 28.700416][ T3313] hsr_slave_1: entered promiscuous mode [ 28.706880][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.712880][ T3313] Cannot create hsr debugfs directory [ 28.719268][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.726568][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.753118][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.764878][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.772238][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.798839][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.872395][ T3326] hsr_slave_0: entered promiscuous mode [ 28.878462][ T3326] hsr_slave_1: entered promiscuous mode [ 28.884548][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 28.890387][ T3326] Cannot create hsr debugfs directory [ 28.897736][ T3316] hsr_slave_0: entered promiscuous mode [ 28.904211][ T3316] hsr_slave_1: entered promiscuous mode [ 28.910224][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.915998][ T3316] Cannot create hsr debugfs directory [ 28.992662][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.003608][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.015720][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.026778][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.088591][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.101863][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.114890][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.129583][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.153610][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.162850][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.177130][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.185829][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.224836][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.238712][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.255923][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.265254][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.277575][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.288087][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.300429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.307644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.325134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.332241][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.352876][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.369934][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.377784][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.394421][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.407911][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.418593][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.428867][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.444089][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.453279][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.460348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.475188][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.482395][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.538462][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.562436][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.575949][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.583097][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.603108][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.610376][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.619178][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.633692][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.642865][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.649957][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.672730][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.687199][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.694375][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.725973][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.750600][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.758482][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.772268][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.779560][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.794934][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.822098][ T3326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.832823][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.881432][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.897993][ T3322] veth0_vlan: entered promiscuous mode [ 29.916186][ T3322] veth1_vlan: entered promiscuous mode [ 29.948548][ T3322] veth0_macvtap: entered promiscuous mode [ 29.969787][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.989129][ T3322] veth1_macvtap: entered promiscuous mode [ 29.998374][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.042845][ T3312] veth0_vlan: entered promiscuous mode [ 30.078300][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.099960][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.119644][ T3312] veth1_vlan: entered promiscuous mode [ 30.144077][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.171325][ T3326] veth0_vlan: entered promiscuous mode [ 30.182148][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.198624][ T3312] veth0_macvtap: entered promiscuous mode [ 30.207260][ T3326] veth1_vlan: entered promiscuous mode [ 30.214062][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.227688][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.229267][ T3316] veth0_vlan: entered promiscuous mode [ 30.256077][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.268185][ T3313] veth0_vlan: entered promiscuous mode [ 30.283547][ T3313] veth1_vlan: entered promiscuous mode [ 30.290326][ T3316] veth1_vlan: entered promiscuous mode [ 30.297008][ T3312] veth1_macvtap: entered promiscuous mode [ 30.316331][ T3316] veth0_macvtap: entered promiscuous mode [ 30.331912][ T3316] veth1_macvtap: entered promiscuous mode [ 30.355129][ T3313] veth0_macvtap: entered promiscuous mode [ 30.362546][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.372066][ T3326] veth0_macvtap: entered promiscuous mode [ 30.379808][ T3326] veth1_macvtap: entered promiscuous mode [ 30.394649][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.403017][ T3313] veth1_macvtap: entered promiscuous mode [ 30.413670][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.427266][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.438245][ T2937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.458138][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.468915][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.481719][ T2937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.490739][ T2937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.515128][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.532108][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.540201][ T2937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.574755][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.592972][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.641848][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.681488][ T3484] syz.3.6 (3484) used greatest stack depth: 9904 bytes left [ 30.691277][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.700323][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.753666][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.757288][ T3491] ip6t_srh: unknown srh match flags FF3F [ 30.799970][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.811335][ T3496] sd 0:0:1:0: device reset [ 30.826545][ C1] hrtimer: interrupt took 34462 ns [ 30.837713][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.867855][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.880109][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 30.880128][ T29] audit: type=1400 audit(1769989792.921:128): avc: denied { create } for pid=3500 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.906816][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.907122][ T3502] sctp: [Deprecated]: syz.0.8 (pid 3502) Use of int in maxseg socket option. [ 30.907122][ T3502] Use struct sctp_assoc_value instead [ 30.924855][ T3494] Invalid logical block size (-1744830465) [ 30.957718][ T29] audit: type=1400 audit(1769989792.961:129): avc: denied { setopt } for pid=3500 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.967969][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.987542][ T3504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'. [ 31.040181][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 31.069826][ T29] audit: type=1326 audit(1769989793.111:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a333daeb9 code=0x7ffc0000 [ 31.093331][ T29] audit: type=1326 audit(1769989793.111:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a333daeb9 code=0x7ffc0000 [ 31.119321][ T29] audit: type=1400 audit(1769989793.111:132): avc: denied { create } for pid=3509 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 31.139471][ T29] audit: type=1400 audit(1769989793.151:133): avc: denied { write } for pid=3509 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 31.159695][ T29] audit: type=1400 audit(1769989793.151:134): avc: denied { create } for pid=3509 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.178941][ T29] audit: type=1400 audit(1769989793.151:135): avc: denied { setopt } for pid=3509 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.198652][ T29] audit: type=1326 audit(1769989793.171:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a333daeb9 code=0x7ffc0000 [ 31.222235][ T29] audit: type=1326 audit(1769989793.171:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a333daeb9 code=0x7ffc0000 [ 31.233359][ T3516] ======================================================= [ 31.233359][ T3516] WARNING: The mand mount option has been deprecated and [ 31.233359][ T3516] and is ignored by this kernel. Remove the mand [ 31.233359][ T3516] option from the mount to silence this warning. [ 31.233359][ T3516] ======================================================= [ 31.247888][ T3515] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure [ 31.302452][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 31.342629][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554650][ T3526] vlan2: entered promiscuous mode [ 31.559841][ T3526] bridge0: entered promiscuous mode [ 31.565430][ T3526] vlan2: entered allmulticast mode [ 31.570696][ T3526] bridge0: entered allmulticast mode [ 31.649702][ T3531] 9p: Bad value for 'rfdno' [ 31.788957][ T3509] syz.0.12 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 31.800467][ T3509] CPU: 1 UID: 0 PID: 3509 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.800498][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.800513][ T3509] Call Trace: [ 31.800521][ T3509] [ 31.800530][ T3509] __dump_stack+0x1d/0x30 [ 31.800595][ T3509] dump_stack_lvl+0x95/0xd0 [ 31.800619][ T3509] dump_stack+0x15/0x1b [ 31.800641][ T3509] dump_header+0x80/0x240 [ 31.800664][ T3509] oom_kill_process+0x295/0x350 [ 31.800695][ T3509] out_of_memory+0x97d/0xb80 [ 31.800724][ T3509] try_charge_memcg+0x62e/0xa10 [ 31.800753][ T3509] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 31.800793][ T3509] __read_swap_cache_async+0x17b/0x2d0 [ 31.800880][ T3509] swap_cluster_readahead+0x362/0x3c0 [ 31.800920][ T3509] swapin_readahead+0xde/0x840 [ 31.801010][ T3509] ? __rcu_read_unlock+0x33/0x70 [ 31.801041][ T3509] ? __rcu_read_unlock+0x4e/0x70 [ 31.801140][ T3509] ? swap_cache_get_folio+0x26f/0x280 [ 31.801242][ T3509] do_swap_page+0x59b/0x2a50 [ 31.801279][ T3509] ? __rcu_read_lock+0x36/0x50 [ 31.801311][ T3509] ? __pfx_default_wake_function+0x10/0x10 [ 31.801413][ T3509] handle_mm_fault+0xb40/0x3030 [ 31.801451][ T3509] ? vma_start_read+0x1c7/0x2c0 [ 31.801532][ T3509] do_user_addr_fault+0x62f/0x1050 [ 31.801562][ T3509] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 31.801631][ T3509] ? irqentry_exit+0x3c/0x510 [ 31.801659][ T3509] exc_page_fault+0x62/0xa0 [ 31.801699][ T3509] asm_exc_page_fault+0x26/0x30 [ 31.801796][ T3509] RIP: 0033:0x7fbb1ab6897e [ 31.801814][ T3509] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 36 f4 3a 00 85 c0 0f 8e 53 fd ff ff 2d 88 fe ff 49 39 c4 73 88 48 8d 1d 11 d6 3a 00 83 3d 16 f4 3a [ 31.801836][ T3509] RSP: 002b:00007ffcabe70e00 EFLAGS: 00010202 [ 31.801856][ T3509] RAX: 0000000000000001 RBX: 00007fbb1af17da0 RCX: 000055557549a808 [ 31.801871][ T3509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.801894][ T3509] RBP: 00007fbb1af17da0 R08: 0000000000000000 R09: 0000000000000000 [ 31.801979][ T3509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000007c69 [ 31.801993][ T3509] R13: 00007fbb1af1609c R14: 0000000000007ad3 R15: 00007fbb1af16090 [ 31.802058][ T3509] [ 32.022942][ T3509] memory: usage 307200kB, limit 307200kB, failcnt 639 [ 32.029727][ T3509] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 32.037939][ T3509] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 32.045371][ T3509] Memory cgroup stats for /syz0: [ 32.054951][ T3509] cache 0 [ 32.063259][ T3509] rss 0 [ 32.066046][ T3509] shmem 0 [ 32.069019][ T3509] mapped_file 0 [ 32.072541][ T3509] dirty 0 [ 32.075599][ T3509] writeback 0 [ 32.078989][ T3509] workingset_refault_anon 60 [ 32.084170][ T3509] workingset_refault_file 0 [ 32.088954][ T3509] swap 208896 [ 32.092367][ T3509] swapcached 0 [ 32.095789][ T3509] pgpgin 948 [ 32.099182][ T3509] pgpgout 948 [ 32.102575][ T3509] pgfault 374 [ 32.106076][ T3509] pgmajfault 41 [ 32.109786][ T3509] inactive_anon 0 [ 32.113734][ T3509] active_anon 0 [ 32.117299][ T3509] inactive_file 0 [ 32.121058][ T3509] active_file 0 [ 32.124534][ T3509] unevictable 0 [ 32.128024][ T3509] hierarchical_memory_limit 314572800 [ 32.133488][ T3509] hierarchical_memsw_limit 9223372036854771712 [ 32.139757][ T3509] total_cache 0 [ 32.143288][ T3509] total_rss 0 [ 32.146595][ T3509] total_shmem 0 [ 32.150168][ T3509] total_mapped_file 0 [ 32.154293][ T3509] total_dirty 0 [ 32.157951][ T3509] total_writeback 0 [ 32.162271][ T3509] total_workingset_refault_anon 60 [ 32.167671][ T3509] total_workingset_refault_file 0 [ 32.173000][ T3509] total_swap 208896 [ 32.176965][ T3509] total_swapcached 0 [ 32.180996][ T3509] total_pgpgin 948 [ 32.184833][ T3509] total_pgpgout 948 [ 32.188651][ T3509] total_pgfault 374 [ 32.192520][ T3509] total_pgmajfault 41 [ 32.196519][ T3509] total_inactive_anon 0 [ 32.200738][ T3509] total_active_anon 0 [ 32.204832][ T3509] total_inactive_file 0 [ 32.209012][ T3509] total_active_file 0 [ 32.213068][ T3509] total_unevictable 0 [ 32.217253][ T3509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.12,pid=3509,uid=0 [ 32.232198][ T3509] Memory cgroup out of memory: Killed process 3509 (syz.0.12) total-vm:96240kB, anon-rss:1328kB, file-rss:22464kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 32.253255][ T3543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.306789][ T3510] syz.0.12 (3510) used greatest stack depth: 7232 bytes left [ 32.559055][ T3560] vhci_hcd vhci_hcd.0: invalid port number 255 [ 32.565601][ T3560] vhci_hcd vhci_hcd.0: invalid port number 255 [ 32.620118][ T3561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.634000][ T3563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3563 comm=syz.4.31 [ 32.650033][ T3538] kexec: Could not allocate swap buffer [ 32.661913][ T3563] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 32.697419][ T3566] loop1: detected capacity change from 0 to 1024 [ 32.710750][ T3566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.722325][ T3566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 32.763955][ T3566] System zones: 0-1, 3-36 [ 32.776694][ T3566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.856356][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.866809][ T3571] loop4: detected capacity change from 0 to 512 [ 32.874345][ T3571] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 32.891927][ T3571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 32.904325][ T3571] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.33: corrupted in-inode xattr: e_value size too large [ 32.919236][ T3571] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.33: couldn't read orphan inode 15 (err -117) [ 32.934243][ T3571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.968280][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.012641][ T3582] netlink: 80 bytes leftover after parsing attributes in process `syz.4.36'. [ 33.023400][ T3582] netlink: 'syz.4.36': attribute type 10 has an invalid length. [ 33.035036][ T3582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.044321][ T3582] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 33.104413][ T3592] FAULT_INJECTION: forcing a failure. [ 33.104413][ T3592] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.117731][ T3592] CPU: 0 UID: 0 PID: 3592 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.117843][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.117856][ T3592] Call Trace: [ 33.117865][ T3592] [ 33.117873][ T3592] __dump_stack+0x1d/0x30 [ 33.117972][ T3592] dump_stack_lvl+0x95/0xd0 [ 33.117998][ T3592] dump_stack+0x15/0x1b [ 33.118098][ T3592] should_fail_ex+0x263/0x280 [ 33.118154][ T3592] should_fail+0xb/0x20 [ 33.118185][ T3592] should_fail_usercopy+0x1a/0x20 [ 33.118220][ T3592] _copy_to_iter+0x387/0xea0 [ 33.118317][ T3592] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 33.118342][ T3592] __skb_datagram_iter+0xc6/0x680 [ 33.118411][ T3592] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 33.118436][ T3592] skb_copy_datagram_iter+0x3d/0x100 [ 33.118512][ T3592] netlink_recvmsg+0x1a8/0x550 [ 33.118540][ T3592] ? __pfx_netlink_recvmsg+0x10/0x10 [ 33.118563][ T3592] sock_recvmsg+0x139/0x160 [ 33.118632][ T3592] ____sys_recvmsg+0xf5/0x280 [ 33.118657][ T3592] ___sys_recvmsg+0x11f/0x3b0 [ 33.118686][ T3592] do_recvmmsg+0x1ef/0x560 [ 33.118711][ T3592] ? fput+0x8f/0xc0 [ 33.118754][ T3592] __x64_sys_recvmmsg+0xe5/0x170 [ 33.118780][ T3592] x64_sys_call+0x2b75/0x3000 [ 33.118811][ T3592] do_syscall_64+0xc0/0x2a0 [ 33.118875][ T3592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.118902][ T3592] RIP: 0033:0x7f7a333daeb9 [ 33.118924][ T3592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.118945][ T3592] RSP: 002b:00007f7a31e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 33.118969][ T3592] RAX: ffffffffffffffda RBX: 00007f7a33655fa0 RCX: 00007f7a333daeb9 [ 33.118986][ T3592] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000003 [ 33.119002][ T3592] RBP: 00007f7a31e37090 R08: 0000000000000000 R09: 0000000000000000 [ 33.119026][ T3592] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 33.119080][ T3592] R13: 00007f7a33656038 R14: 00007f7a33655fa0 R15: 00007ffcad362188 [ 33.119098][ T3592] [ 33.376002][ T3599] loop4: detected capacity change from 0 to 1764 [ 33.391940][ T3599] ISOFS: unable to read i-node block [ 33.455828][ T3607] Zero length message leads to an empty skb [ 33.478057][ T3610] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.548995][ T3620] loop4: detected capacity change from 0 to 1024 [ 33.557219][ T3620] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.569313][ T3620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.578520][ T3618] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.604778][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.719195][ T3633] loop1: detected capacity change from 0 to 1024 [ 33.728834][ T3633] EXT4-fs: Ignoring removed bh option [ 33.758770][ T3633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.792224][ T3639] tipc: Started in network mode [ 33.797136][ T3639] tipc: Node identity 1, cluster identity 2346 [ 33.803478][ T3639] tipc: Node number set to 1 [ 33.873240][ T3633] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 33.885329][ T3633] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 33.895113][ T3645] Illegal XDP return value 3809399870 on prog (id 7) dev N/A, expect packet loss! [ 33.934618][ T3543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.995862][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.008966][ T3543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.022612][ T3641] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 34.030357][ T3641] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 34.065647][ T3657] netlink: 'syz.1.68': attribute type 21 has an invalid length. [ 34.076799][ T3543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.087735][ T3657] loop1: detected capacity change from 0 to 512 [ 34.098488][ T3657] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.112149][ T3657] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.127613][ T3657] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.141588][ T3657] EXT4-fs (loop1): 1 truncate cleaned up [ 34.151171][ T3657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.172356][ T3446] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.184308][ T3446] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.196139][ T3446] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.214419][ T3446] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.227193][ T3665] loop2: detected capacity change from 0 to 512 [ 34.244233][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.270849][ T3665] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 34.283687][ T3561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.288006][ T3665] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.302037][ T3665] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #16: comm syz.2.70: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 32769(4), depth 65535(65535) [ 34.328780][ T3669] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 34.345763][ T3665] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.70: couldn't read orphan inode 16 (err -117) [ 34.372119][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.392908][ T3561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.394187][ T3687] loop3: detected capacity change from 0 to 512 [ 34.411576][ T3687] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.430487][ T3687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 34.453504][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.455851][ T3687] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.76: corrupted in-inode xattr: e_value size too large [ 34.482151][ T3687] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.76: couldn't read orphan inode 15 (err -117) [ 34.495103][ T3561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.524122][ T3687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.566409][ T2937] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.582417][ T2937] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.616789][ T2937] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.662175][ T2937] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.698767][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.786635][ T3701] SELinux: failed to load policy [ 34.955857][ T3722] loop0: detected capacity change from 0 to 256 [ 34.963447][ T3719] FAULT_INJECTION: forcing a failure. [ 34.963447][ T3719] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.977270][ T3719] CPU: 0 UID: 0 PID: 3719 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.977321][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.977335][ T3719] Call Trace: [ 34.977343][ T3719] [ 34.977351][ T3719] __dump_stack+0x1d/0x30 [ 34.977382][ T3719] dump_stack_lvl+0x95/0xd0 [ 34.977472][ T3719] dump_stack+0x15/0x1b [ 34.977555][ T3719] should_fail_ex+0x263/0x280 [ 34.977656][ T3719] should_fail_alloc_page+0xf2/0x100 [ 34.977684][ T3719] alloc_pages_bulk_noprof+0x101/0x520 [ 34.977717][ T3719] copy_splice_read+0xf3/0x6c0 [ 34.977832][ T3719] ? __pfx_copy_splice_read+0x10/0x10 [ 34.977905][ T3719] splice_direct_to_actor+0x26e/0x670 [ 34.977931][ T3719] ? __pfx_direct_splice_actor+0x10/0x10 [ 34.977957][ T3719] do_splice_direct+0x119/0x1a0 [ 34.977976][ T3719] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 34.978008][ T3719] do_sendfile+0x382/0x650 [ 34.978038][ T3719] __x64_sys_sendfile64+0x105/0x150 [ 34.978067][ T3719] x64_sys_call+0x2db1/0x3000 [ 34.978095][ T3719] do_syscall_64+0xc0/0x2a0 [ 34.978185][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.978217][ T3719] RIP: 0033:0x7f7a333daeb9 [ 34.978308][ T3719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.978329][ T3719] RSP: 002b:00007f7a31e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 34.978360][ T3719] RAX: ffffffffffffffda RBX: 00007f7a33655fa0 RCX: 00007f7a333daeb9 [ 34.978377][ T3719] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 34.978390][ T3719] RBP: 00007f7a31e37090 R08: 0000000000000000 R09: 0000000000000000 [ 34.978403][ T3719] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000002 [ 34.978416][ T3719] R13: 00007f7a33656038 R14: 00007f7a33655fa0 R15: 00007ffcad362188 [ 34.978449][ T3719] [ 35.219063][ T3722] FAT-fs (loop0): Directory bread(block 64) failed [ 35.236926][ T3722] FAT-fs (loop0): Directory bread(block 65) failed [ 35.244498][ T3722] FAT-fs (loop0): Directory bread(block 66) failed [ 35.298581][ T3722] FAT-fs (loop0): Directory bread(block 67) failed [ 35.313423][ T3722] FAT-fs (loop0): Directory bread(block 68) failed [ 35.323340][ T3722] FAT-fs (loop0): Directory bread(block 69) failed [ 35.353378][ T3722] FAT-fs (loop0): Directory bread(block 70) failed [ 35.360345][ T3722] FAT-fs (loop0): Directory bread(block 71) failed [ 35.367210][ T3722] FAT-fs (loop0): Directory bread(block 72) failed [ 35.374585][ T3722] FAT-fs (loop0): Directory bread(block 73) failed [ 35.432675][ T3731] loop1: detected capacity change from 0 to 512 [ 35.442373][ T3731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.501331][ T3731] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.93: inode has both inline data and extents flags [ 35.578689][ T3731] EXT4-fs (loop1): Remounting filesystem read-only [ 35.623207][ T3731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.723569][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.776653][ T3745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.98'. [ 35.861620][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.916029][ T3695] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.991422][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 35.991438][ T29] audit: type=1400 audit(1769989798.041:282): avc: denied { map } for pid=3732 comm="syz.3.94" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.021765][ T29] audit: type=1400 audit(1769989798.041:283): avc: denied { execute } for pid=3732 comm="syz.3.94" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.062217][ T29] audit: type=1400 audit(1769989798.051:284): avc: denied { read write } for pid=3694 comm="syz.4.80" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.085448][ T29] audit: type=1400 audit(1769989798.051:285): avc: denied { open } for pid=3694 comm="syz.4.80" path="/26/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.108420][ T3772] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.80: lblock 3 mapped to illegal pblock 3 (length 3) [ 36.194336][ T3772] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 36.206793][ T3772] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.206793][ T3772] [ 36.208569][ T29] audit: type=1400 audit(1769989798.251:286): avc: denied { mount } for pid=3784 comm="syz.1.108" name="/" dev="ramfs" ino=6230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.217339][ T3772] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm syz.4.80: lblock 8 mapped to illegal pblock 8 (length 8) [ 36.259652][ T29] audit: type=1400 audit(1769989798.301:287): avc: denied { bpf } for pid=3784 comm="syz.1.108" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.261061][ T3772] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 36.280414][ T29] audit: type=1400 audit(1769989798.301:288): avc: denied { perfmon } for pid=3784 comm="syz.1.108" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.293084][ T3772] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.293084][ T3772] [ 36.334561][ T29] audit: type=1400 audit(1769989798.381:289): avc: denied { append } for pid=3786 comm="syz.1.110" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.358881][ T29] audit: type=1400 audit(1769989798.381:290): avc: denied { open } for pid=3786 comm="syz.1.110" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.405902][ T29] audit: type=1326 audit(1769989798.451:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a333daeb9 code=0x7ffc0000 [ 36.436155][ T3780] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.80: Freeing blocks not in datazone - block = 8, count = 8 [ 36.451519][ T3780] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.80: Freeing blocks not in datazone - block = 4, count = 2 [ 36.509369][ T3798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 36.521753][ T3794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.113'. [ 36.525074][ T3800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 36.542420][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.695807][ T3814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.121'. [ 36.875212][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 37.030538][ T3854] netlink: 'syz.1.136': attribute type 12 has an invalid length. [ 37.038861][ T3854] netlink: 'syz.1.136': attribute type 29 has an invalid length. [ 37.046883][ T3854] netlink: 148 bytes leftover after parsing attributes in process `syz.1.136'. [ 37.056140][ T3854] netlink: 51 bytes leftover after parsing attributes in process `syz.1.136'. [ 37.088385][ T3859] netlink: 80 bytes leftover after parsing attributes in process `syz.3.138'. [ 37.100537][ T3859] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 37.174459][ T3859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.195355][ T3859] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 37.406387][ T3880] netlink: 80 bytes leftover after parsing attributes in process `syz.0.145'. [ 37.433301][ T3880] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 37.465080][ T3880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.481237][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.484469][ T3880] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 37.490082][ T3883] FAT-fs (loop3): Filesystem has been set read-only [ 37.531249][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.557578][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.566769][ T3882] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.581893][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.607307][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.609292][ T3882] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.628878][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.639181][ T3887] netlink: 14 bytes leftover after parsing attributes in process `syz.0.148'. [ 37.647951][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.661970][ T3887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.667229][ T3883] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 37.684110][ T3887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.784615][ T3887] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 37.806316][ T3887] bond0 (unregistering): Released all slaves [ 38.091225][ T3900] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 38.097914][ T3900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 38.105660][ T3900] vhci_hcd vhci_hcd.0: Device attached [ 38.126018][ T3902] vhci_hcd: connection closed [ 38.126328][ T3446] vhci_hcd vhci_hcd.3: stop threads [ 38.136617][ T3446] vhci_hcd vhci_hcd.3: release socket [ 38.142527][ T3446] vhci_hcd vhci_hcd.3: disconnect device [ 38.177675][ T3905] ip6t_srh: unknown srh match flags FF3F [ 38.215492][ T3909] process 'syz.1.155' launched './file1' with NULL argv: empty string added [ 38.703717][ T3918] set_capacity_and_notify: 5 callbacks suppressed [ 38.703910][ T3918] loop3: detected capacity change from 0 to 1024 [ 38.795997][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.810847][ T3918] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.899118][ T3918] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.158: lblock 3 mapped to illegal pblock 3 (length 3) [ 38.917257][ T3918] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 38.930965][ T3918] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.930965][ T3918] [ 38.946308][ T3923] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm syz.3.158: lblock 8 mapped to illegal pblock 8 (length 8) [ 38.967577][ T3923] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 38.980079][ T3923] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.980079][ T3923] [ 39.022635][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.048079][ T3926] loop3: detected capacity change from 0 to 256 [ 39.210329][ T3929] netlink: 'syz.1.162': attribute type 6 has an invalid length. [ 39.484301][ T3945] xt_connbytes: Forcing CT accounting to be enabled [ 39.498965][ T3945] xt_NFQUEUE: number of total queues is 0 [ 39.558297][ T3958] lo: entered allmulticast mode [ 39.575613][ T3958] tunl0: entered allmulticast mode [ 39.596362][ T3958] gre0: entered allmulticast mode [ 39.646562][ T3963] loop3: detected capacity change from 0 to 1024 [ 39.659673][ T3958] gretap0: entered allmulticast mode [ 39.666749][ T3965] FAULT_INJECTION: forcing a failure. [ 39.666749][ T3965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.680160][ T3965] CPU: 0 UID: 0 PID: 3965 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.680195][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.680209][ T3965] Call Trace: [ 39.680217][ T3965] [ 39.680227][ T3965] __dump_stack+0x1d/0x30 [ 39.680272][ T3965] dump_stack_lvl+0x95/0xd0 [ 39.680296][ T3965] dump_stack+0x15/0x1b [ 39.680443][ T3965] should_fail_ex+0x263/0x280 [ 39.680478][ T3965] should_fail+0xb/0x20 [ 39.680507][ T3965] should_fail_usercopy+0x1a/0x20 [ 39.680617][ T3965] _copy_from_user+0x1c/0xb0 [ 39.680642][ T3965] do_sock_getsockopt+0xf1/0x210 [ 39.680679][ T3965] __x64_sys_getsockopt+0x11d/0x1a0 [ 39.680718][ T3965] x64_sys_call+0x2dc7/0x3000 [ 39.680803][ T3965] do_syscall_64+0xc0/0x2a0 [ 39.680838][ T3965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.680974][ T3965] RIP: 0033:0x7f894dc2aeb9 [ 39.680997][ T3965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.681025][ T3965] RSP: 002b:00007f894c687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 39.681051][ T3965] RAX: ffffffffffffffda RBX: 00007f894dea5fa0 RCX: 00007f894dc2aeb9 [ 39.681067][ T3965] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000004 [ 39.681082][ T3965] RBP: 00007f894c687090 R08: 0000200000000040 R09: 0000000000000000 [ 39.681098][ T3965] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.681130][ T3965] R13: 00007f894dea6038 R14: 00007f894dea5fa0 R15: 00007ffc93ecaf78 [ 39.681151][ T3965] [ 39.846175][ T3958] erspan0: entered allmulticast mode [ 39.872890][ T3958] ip_vti0: entered allmulticast mode [ 39.882524][ T3958] ip6_vti0: entered allmulticast mode [ 39.890206][ T3958] sit0: entered allmulticast mode [ 39.898050][ T3958] ip6tnl0: entered allmulticast mode [ 39.943655][ T3958] ip6gre0: entered allmulticast mode [ 39.985730][ T3958] syz_tun: entered allmulticast mode [ 40.022898][ T3958] ip6gretap0: entered allmulticast mode [ 40.046749][ T3958] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.054125][ T3958] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.113651][ T3958] bridge0: entered allmulticast mode [ 40.139769][ T3958] vcan0: entered allmulticast mode [ 40.161063][ T3958] team0: entered allmulticast mode [ 40.166392][ T3958] team_slave_0: entered allmulticast mode [ 40.172378][ T3958] team_slave_1: entered allmulticast mode [ 40.192308][ T3958] dummy0: entered allmulticast mode [ 40.199604][ T3958] nlmon0: entered allmulticast mode [ 40.207250][ T3958] caif0: entered allmulticast mode [ 40.212760][ T3958] batadv0: entered allmulticast mode [ 40.218538][ T3958] vxcan0: entered allmulticast mode [ 40.224795][ T3958] vxcan1: entered allmulticast mode [ 40.230785][ T3958] veth0: entered allmulticast mode [ 40.237258][ T3958] veth1: entered allmulticast mode [ 40.244288][ T3958] wg0: entered allmulticast mode [ 40.250651][ T3958] wg1: entered allmulticast mode [ 40.257029][ T3958] wg2: entered allmulticast mode [ 40.263095][ T3958] veth0_to_bridge: entered allmulticast mode [ 40.272687][ T3958] veth1_to_bridge: entered allmulticast mode [ 40.281971][ T3958] veth0_to_bond: entered allmulticast mode [ 40.289589][ T3958] bond_slave_0: entered allmulticast mode [ 40.295856][ T3958] veth1_to_bond: entered allmulticast mode [ 40.303360][ T3958] bond_slave_1: entered allmulticast mode [ 40.309466][ T3958] veth0_to_team: entered allmulticast mode [ 40.317387][ T3958] veth1_to_team: entered allmulticast mode [ 40.325566][ T3958] veth0_to_batadv: entered allmulticast mode [ 40.332870][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.340556][ T3958] batadv_slave_0: entered allmulticast mode [ 40.348028][ T3958] veth1_to_batadv: entered allmulticast mode [ 40.355452][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.363302][ T3958] batadv_slave_1: entered allmulticast mode [ 40.370710][ T3958] xfrm0: entered allmulticast mode [ 40.377866][ T3958] veth0_to_hsr: entered allmulticast mode [ 40.385255][ T3958] hsr_slave_0: entered allmulticast mode [ 40.392301][ T3958] veth1_to_hsr: entered allmulticast mode [ 40.399174][ T3958] hsr_slave_1: entered allmulticast mode [ 40.406431][ T3958] hsr0: entered allmulticast mode [ 40.413458][ T3958] veth1_virt_wifi: entered allmulticast mode [ 40.420789][ T3958] veth0_virt_wifi: entered allmulticast mode [ 40.428570][ T3958] veth1_vlan: entered allmulticast mode [ 40.435382][ T3958] veth0_vlan: entered allmulticast mode [ 40.444328][ T3958] vlan0: entered allmulticast mode [ 40.449693][ T3958] vlan1: entered allmulticast mode [ 40.455189][ T3958] macvlan0: entered allmulticast mode [ 40.462555][ T3958] macvlan1: entered allmulticast mode [ 40.469025][ T3958] ipvlan0: entered allmulticast mode [ 40.474890][ T3958] ipvlan1: entered allmulticast mode [ 40.480439][ T3958] veth1_macvtap: entered allmulticast mode [ 40.487456][ T3958] veth0_macvtap: entered allmulticast mode [ 40.494449][ T3958] macvtap0: entered allmulticast mode [ 40.500643][ T3958] macsec0: entered allmulticast mode [ 40.507476][ T3958] geneve0: entered allmulticast mode [ 40.514378][ T3958] geneve1: entered allmulticast mode [ 40.520592][ T3958] netdevsim netdevsim0 eth0: entered allmulticast mode [ 40.527894][ T3958] netdevsim netdevsim0 eth1: entered allmulticast mode [ 40.535016][ T3958] netdevsim netdevsim0 eth2: entered allmulticast mode [ 40.542409][ T3958] netdevsim netdevsim0 eth3: entered allmulticast mode [ 40.571917][ T2937] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.583442][ T2937] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.602341][ T2937] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.611894][ T2937] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.709185][ T4009] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 40.717276][ T4009] batadv0: left allmulticast mode [ 40.884418][ T4021] loop4: detected capacity change from 0 to 512 [ 40.900401][ T4021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.936867][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.954046][ T4021] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.965587][ T4021] EXT4-fs (loop4): shut down requested (2) [ 41.007474][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 41.007491][ T29] audit: type=1400 audit(1769989803.051:440): avc: denied { create } for pid=4017 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.077004][ T29] audit: type=1400 audit(1769989803.091:441): avc: denied { bind } for pid=4017 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.219605][ T4034] loop0: detected capacity change from 0 to 512 [ 41.231419][ T4034] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 41.240412][ T4021] ================================================================== [ 41.248703][ T4021] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 41.257090][ T4021] [ 41.259521][ T4021] write to 0xffff88812e13f3a8 of 8 bytes by task 4020 on cpu 1: [ 41.261074][ T4034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 41.267433][ T4021] filemap_splice_read+0x523/0x780 [ 41.280941][ T4021] splice_direct_to_actor+0x26e/0x670 [ 41.286611][ T4021] do_splice_direct+0x119/0x1a0 [ 41.291757][ T4021] do_sendfile+0x382/0x650 [ 41.296303][ T4021] __x64_sys_sendfile64+0x105/0x150 [ 41.301627][ T4021] x64_sys_call+0x2db1/0x3000 [ 41.304367][ T4034] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.196: corrupted in-inode xattr: e_value size too large [ 41.306435][ T4021] do_syscall_64+0xc0/0x2a0 [ 41.306470][ T4021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.321336][ T4034] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.196: couldn't read orphan inode 15 (err -117) [ 41.325648][ T4021] [ 41.325659][ T4021] write to 0xffff88812e13f3a8 of 8 bytes by task 4021 on cpu 0: [ 41.332905][ T4034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.343426][ T4021] filemap_splice_read+0x523/0x780 [ 41.343463][ T4021] splice_direct_to_actor+0x26e/0x670 [ 41.376446][ T4021] do_splice_direct+0x119/0x1a0 [ 41.381433][ T4021] do_sendfile+0x382/0x650 [ 41.385908][ T4021] __x64_sys_sendfile64+0x105/0x150 [ 41.391135][ T4021] x64_sys_call+0x2db1/0x3000 [ 41.396173][ T4021] do_syscall_64+0xc0/0x2a0 [ 41.400776][ T4021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.406773][ T4021] [ 41.409099][ T4021] value changed: 0x0000000002190000 -> 0x000000000279f000 [ 41.416552][ T4021] [ 41.418873][ T4021] Reported by Kernel Concurrency Sanitizer on: [ 41.425115][ T4021] CPU: 0 UID: 0 PID: 4021 Comm: syz.4.193 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.434811][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.445134][ T4021] ================================================================== [ 41.467169][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.613001][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.