last executing test programs: 3m42.59161949s ago: executing program 32 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8000a919, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@deltaction={0x164, 0x31, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40991c42}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xfffffffffffffe70, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff611}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3m28.079647717s ago: executing program 33 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) creat(0x0, 0x1b) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write(r0, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.', 0x1b) 3m19.993096116s ago: executing program 34 (id=334): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0xc00600000000c006) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10020) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0xffffffffffffff4c, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x4040804) 2m35.560810088s ago: executing program 35 (id=472): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0xfd, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x4, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000008c0)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) listen(0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x8, 0x41}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00a1b00d9c00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"/28], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000009, 0x10012, r3, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000060601030000000000000000010000070900030073797a32000000000900030073797a300000000009a381be5f797a30000000000900030073797a30000000000900030073797a3000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) 2m35.371240692s ago: executing program 36 (id=474): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = open(&(0x7f0000000180)='.\x00', 0x258040, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/39, &(0x7f0000000200)=0x27) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x0) 2m35.228992226s ago: executing program 37 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket(0x2, 0x80805, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2m30.308960767s ago: executing program 38 (id=496): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2419b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x3fe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x2c0000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000000240)=""/28, 0xffd2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m27.890679066s ago: executing program 39 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x50, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000200)={{r6}, {@val={r7}, @max}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000b40)={r7, 0x5, 0x1}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000001}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r13) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x500) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x200040cc) 2m27.224292222s ago: executing program 40 (id=509): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) utime(0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0xfd}) openat(0xffffffffffffff9c, 0x0, 0x501800, 0x1b3) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x3e, 0x4, 0xd323, 0x400, 0x101, 0x49, 0x6}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={0x0}}, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000006000000850000008600000085000000d0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000480)={0x0, 0x0, 0x3, 0x2}, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4040050) r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000)=0x5b, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000f80)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000e80)={@local, r6}, 0x14) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 2m17.431065103s ago: executing program 41 (id=559): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x2, 0x6, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m14.476810265s ago: executing program 42 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x80000480}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) sendmsg$nl_route(r0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x2}, {0x8, 0x3, 0x0, 0x0, 0x1}]}}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 2m11.375770622s ago: executing program 43 (id=629): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') unlink(&(0x7f0000000080)='./bus\x00') rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') 2m6.952548571s ago: executing program 44 (id=660): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x3}, 0x0, 0xfffffffffffffffe, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x5aa, &(0x7f0000000a80)="$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") (async) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4088}, 0x800) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0) (async) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000040)) (async) r9 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=kd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f00000003c0), 0x20000, &(0x7f0000000400)={@_ha_fsid={[0xd8, 0xccb]}, {0x6, 0x0, 0xc0a, 0x1}}, 0xfff, &(0x7f0000000440)={@_ha_fsid}, 0x0}, 0x2, &(0x7f0000000600)=[{0x3, 0x9fa3, &(0x7f00000004c0)='!\x00', &(0x7f0000000500)="be981456a3955a99a98bbd2be5f79fbe80034fb5ccfdf6a30c", 0x19}, {0x1, 0x3, &(0x7f0000000540)='GPL\x00', &(0x7f0000000580)="c8f4431ed6e7347cb995db3e2ad0e86d5b2f06e9222f51bd9babc7cc5529bc2085e9100d8267d239cf52db785430550e7371d4296e5d55ed0ddbbb71c2c8c88cbb2873aa8d00af4d457a5ad36cc3d2ccc3a0ad7dc0b4db059d4baa8a25889ae9724fcc31aa27a0de", 0x68, 0x18}]}) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x88) pwritev2(r10, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) setsockopt$MRT_DEL_MFC(r10, 0x0, 0xcd, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000140), &(0x7f0000000900)='syzkaller\x00', 0xd000000, 0xd, &(0x7f00000009c0)=""/13, 0x41000, 0x8, '\x00', r7, 0x1b, r10, 0x8, &(0x7f0000000a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x4, 0x6087, 0x101}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000001040)=[{0x1, 0x1, 0x8006, 0x7}, {0x2, 0x5, 0x9, 0x7}], 0x10, 0x3}, 0x94) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000300)=0x4) socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 2m3.828245837s ago: executing program 45 (id=686): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x3, 0xff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="100001d2b43c0c00000000b1fea2f6a6e98486699d2435c35e42d6eb50b14119fa8d000d3565232f123f1e1d6a9310353356c92b2352bd08c0d199d3d6a887c3a3f3495fbb938bef4905d2b0f90621381553fd"], 0x10}, 0x1, 0x0, 0x0, 0x20044001}, 0x804) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xf}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x10000001}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b80000940019000100000000003d0b0000e0000002002295660e0000000000000000000000000000000000000000000000fffe0000000000000a002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff000000000000000300000000"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000e50000000000000000002191274a00000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000040)={@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000380)={0x3, 0x3, 0xa6, &(0x7f00000002c0)=""/166}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x5, 0x5, 0x1, 0xfff}, {0x1ff, 0x2, 0x6, 0x3}]}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) 1m59.044809215s ago: executing program 46 (id=727): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) recvfrom$inet_nvme(r0, &(0x7f0000000000)=""/161, 0xa1, 0x2, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'vlan0\x00'}}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = epoll_create(0xfff) epoll_pwait2(r4, &(0x7f00000004c0)=[{}], 0x1, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20002003}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0xc9}}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c001880080001400000000608001f400000000208"], 0x54}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x5, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000380)=0x7f) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup=r0, r5, 0x10, 0x8, r5, @void, @value=r5, @void, @void, r7}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 1m38.636608716s ago: executing program 47 (id=946): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x14, 0x14, 0x1, 0x4, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) 1m30.407312598s ago: executing program 48 (id=1046): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000008a000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000100)) 1m11.276075708s ago: executing program 49 (id=1243): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840) 48.958257116s ago: executing program 50 (id=1517): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ']\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @remote}}}}}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068a80fa8c1800a144fa2e2000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040005006d04000012b0000000"], 0x11c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xa3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ']\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @remote}}}}}}, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068a80fa8c1800a144fa2e2000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040005006d04000012b0000000"], 0x11c) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xa3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) 44.996795214s ago: executing program 51 (id=1543): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x2a9, &(0x7f00000003c0)="$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") sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000ffe700000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x8]}, 0x0, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x292, @tick=0xffffffff, 0x3, {0x1, 0xfc}, 0x0, 0x1}) r6 = syz_io_uring_setup(0x9ed, &(0x7f0000000100)={0x0, 0x6b30, 0x13291, 0xfffffffd, 0x3b3}, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000000)) io_uring_enter(r6, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'pimreg0\x00', {0xfffff000}}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 43.699079726s ago: executing program 52 (id=1555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x2115, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004, 0x1, @perf_bp={&(0x7f0000000300)}, 0xc108, 0x101, 0x1000c, 0x6, 0xa, 0x9, 0xeffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0xc000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendfile(r2, r2, &(0x7f0000000c80)=0x3ff, 0x80000001) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x0, 0x7}}, './file1\x00'}) connect$tipc(r6, &(0x7f0000000380)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f00000000c0)='-\x00', 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00800000bfa200000000000007020000f8fffffffe03000008000000b704000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r1, &(0x7f0000000b40)={0x2, 0x4e21, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f00000003c0)=""/10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4000, 0xf, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket(0x840000000002, 0x3, 0x100) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000c40), 0xc}, 0x0, 0x0, 0x3, 0x8, 0x43fe, 0x2, 0xffff}, 0x0, 0xffffffffffffffff, r6, 0x3) ioctl$NILFS_IOCTL_RESIZE(r9, 0x40086e8b, &(0x7f0000000140)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) socket$kcm(0x2, 0x200000000000001, 0x106) connect$inet(r9, &(0x7f0000000400)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000cc0)={[{@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@oldalloc}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0xb, 0x44a, &(0x7f0000000400)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x2a, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000050000000000000001000100950000000000000018220000", @ANYRES32=r7, @ANYBLOB="0000000001004000180100002020752500000000002020207b1af8ecfe3d8d53be843f6f604b9ec736ff00000000bfa1000000fdffff06010000f8ffffffb702000008000000b70300006b0400008500000006000000af2d2e430e0000000000000001000000b7080000000000007b8af8ff000006000000000075df00007b8af0ff00000000bfa1e1240000000007010000f8ffffffbfa4000007047015288cd873aea0", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018190000", @ANYRES32=r7, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000003539feff00000000184200000700000000000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x4c, &(0x7f0000000a40)=""/76, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000ac0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x3, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0x10, 0xffffffff}, 0x94) 42.069090306s ago: executing program 53 (id=1563): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = socket(0xa, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x3}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4b3, 0x3109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0xff1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf3, 0x8, 0x35}}}}}]}}]}}, 0xffffffffffffffff) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0xfff}, @period={0x5d, 0x7, 0xa, 0x3, 0x774, {0xfff, 0xfffd, 0x3e, 0x1}, 0x0, 0x0}}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x140c, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004010}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 24.40714953s ago: executing program 55 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0x2, 0x8, 0x0, 0x50, 0xfffffffffffffffc}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2869}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x4, 0x7, 0x9, 0x593f, 0x1e}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xec, &(0x7f0000000240)=""/236, 0x41100, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x35, 0xc25}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r1, r3, 0x15, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000ecbf9ceb0000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05002400128009000100626f6e64000000001400028008000a000000000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20044060) 23.607074699s ago: executing program 56 (id=1698): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x6}}, @TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 23.349209976s ago: executing program 1 (id=1701): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_open_pts(0xffffffffffffffff, 0x40500) mount(0x0, 0x0, 0x0, 0x1214042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x1ff}}, {@nombcache}, {@data_err_ignore}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) dup(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 22.896534367s ago: executing program 1 (id=1704): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a37337e1bf4f564e4379ac8b8e76066a335e630774a8c007599fce882385170c0f", 0x3e}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000001000)=""/61, 0x3d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 22.740099941s ago: executing program 1 (id=1706): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 22.323166251s ago: executing program 1 (id=1716): io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x538, 0x1d8, 0xf8, 0x1d8, 0xf8, 0xf8, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0xff], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r4 = accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x5, 0xd6, 0x8, @private1, @empty, 0x80, 0x7, 0x1, 0x26c1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7, 0x7, 0x53, 0xff, {{0x1a, 0x4, 0x3, 0x1, 0x68, 0x64, 0x0, 0x5, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x0, [{@broadcast, 0x7}]}, @lsrr={0x83, 0x27, 0xed, [@remote, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @multicast1, @local, @remote, @private=0xa010100, @loopback, @multicast2]}, @rr={0x7, 0x0, 0xa4, [@multicast2, @multicast2, @empty, @rand_addr=0xffff, @remote, @remote]}, @end, @end, @lsrr={0x83, 0xfe01, 0xdd, [@private=0xa010100, @private=0xa010102, @empty, @remote, @loopback]}, @end]}}}}}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa, 0x1}, {0xffff, 0xfff2}, {0xe, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000003c0)={@initdev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7ae3, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x9, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) 22.267611453s ago: executing program 57 (id=1716): io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x538, 0x1d8, 0xf8, 0x1d8, 0xf8, 0xf8, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0xff], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r4 = accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x5, 0xd6, 0x8, @private1, @empty, 0x80, 0x7, 0x1, 0x26c1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7, 0x7, 0x53, 0xff, {{0x1a, 0x4, 0x3, 0x1, 0x68, 0x64, 0x0, 0x5, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x0, [{@broadcast, 0x7}]}, @lsrr={0x83, 0x27, 0xed, [@remote, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @multicast1, @local, @remote, @private=0xa010100, @loopback, @multicast2]}, @rr={0x7, 0x0, 0xa4, [@multicast2, @multicast2, @empty, @rand_addr=0xffff, @remote, @remote]}, @end, @end, @lsrr={0x83, 0xfe01, 0xdd, [@private=0xa010100, @private=0xa010102, @empty, @remote, @loopback]}, @end]}}}}}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa, 0x1}, {0xffff, 0xfff2}, {0xe, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000003c0)={@initdev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7ae3, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x9, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) 22.114901846s ago: executing program 8 (id=1719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4050}, 0x0) 21.641091718s ago: executing program 8 (id=1721): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x80000) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0xfffff, r2) ioctl$BLKFRAGET(r1, 0x1265, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x10049014) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000047c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfffffff8}}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002f40)={{0x0, 0x8, 0xd554, 0x8000000000000000, 0x7, 0x1, 0x0, 0xe382, 0x6f, 0x8001, 0x5, 0x7, 0x41, 0x2, 0x43}, 0x10, [0x0, 0x0]}) socket(0x22, 0x80000, 0x6) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) 21.13527208s ago: executing program 8 (id=1723): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000ef000000ef0000000b0000000000000000000003000000000200000005000000090000000b0000000400000f0300000005000000020000000700000003000000020000000d000000040000000800008006000000020000000100000001000000c8f3fa000000000000007f0000000b0000000000000e0300000000000000030000000000000e04000000010000000600000000000007000000000500000006000084010000000600000000000000040000000100000005000000010400000900000003000000c80000000b00000000000000feffffff000000000000000009000000050000000100"/275], &(0x7f0000000500)=""/92, 0x113, 0x5c, 0x1, 0x6}, 0x28) (async, rerun: 64) r1 = getuid() (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=r1, @ANYBLOB="0300000000000de3fc1c18edc4689251fd50a2", @ANYRES16=r1, @ANYRES32, @ANYRES8=r1], 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x40000080) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000040)) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) pwritev(r4, 0x0, 0x0, 0x4, 0x9) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xc00007c}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000140)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x4e1d, 0x2, @loopback, 0xa}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd631701"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804f1a, &(0x7f00000000c0), 0x41, 0x4cc, &(0x7f0000000c00)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000a00)={0x1, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}]}, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81b1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0xca9f7681bfcf8841) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f8, &(0x7f0000000080)) (async, rerun: 32) r11 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x0) ioctl$EVIOCGSW(r11, 0x8040451b, &(0x7f0000000c00)=""/4096) (async, rerun: 64) timerfd_gettime(r0, &(0x7f0000000000)) (rerun: 64) 20.533219075s ago: executing program 8 (id=1729): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a37337e1bf4f564e4379ac8b8e76066a335e630774a8c007599fce882385170c0f", 0x3e}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000001000)=""/61, 0x3d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 20.251784052s ago: executing program 8 (id=1730): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x80000) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0xfffff, r2) ioctl$BLKFRAGET(r1, 0x1265, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x10049014) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000047c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfffffff8}}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002f40)={{0x0, 0x8, 0xd554, 0x8000000000000000, 0x7, 0x1, 0x0, 0xe382, 0x6f, 0x8001, 0x5, 0x7, 0x41, 0x2, 0x43}, 0x10, [0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x5, 0x5, {{0x15, 0x4, 0x0, 0x3c, 0x54, 0x68, 0x0, 0xad, 0x0, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x1b, 0x32, [@local, @rand_addr=0x64010102, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x80, 0x0}]}, @noop, @timestamp_addr={0x44, 0x24, 0x3c, 0x1, 0x5, [{@local, 0x80000001}, {@rand_addr=0x64010101, 0x800}, {@loopback, 0x2}, {@remote, 0x2}]}]}}}}}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) 19.557036129s ago: executing program 8 (id=1733): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0x3a5d88f819660b6a, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x11fa, 0x8}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x4c}}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) 19.556921399s ago: executing program 58 (id=1733): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0x3a5d88f819660b6a, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x11fa, 0x8}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x4c}}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) 19.197183468s ago: executing program 6 (id=1737): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x80, 0x2, 0x0, 0x0, "1d97ee0710e02311"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0x9, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) acct(&(0x7f0000000400)='./dev/cpu_dma_latency\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./pipefs/gssd/clntXX/gssd\x00', 0x105400, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) 18.424594487s ago: executing program 6 (id=1738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001340)) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f80000001600010029bd7000fedbdf25ff020000000000000000000000000001000000000000000000000000000000004e230000000700010200802062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e8001000000000000000000000000000004d5330000ac1414230000000000000000000000000800000000000000b5070000000000000600000000000000010000800000000009000000000000000900000000000000ffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff00000000e8060000fbffffff2abd7000000000000000020641000000000000000808"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) lseek(r0, 0xdc, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r5, @ANYBLOB="402000000000000014001a80100004800c000980080001"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 16.103065414s ago: executing program 6 (id=1739): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open$dir(0x0, 0x0, 0x68) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', 0x0}) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) open_by_handle_at(0xffffffffffffffff, 0x0, 0x8400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000102010000000500000a04000180000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4080) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000) syz_usb_disconnect(r4) syz_usb_connect$rtl8150(0x6, 0x31, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x56, [{{0x9, 0x2, 0xc}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x5509, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r5, 0x3) shutdown(r5, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 15.143447007s ago: executing program 6 (id=1741): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a37337e1bf4f564e4379ac8b8e76066a335e630774a8c007599fce882385170c0f", 0x3e}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000001000)=""/61, 0x3d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 15.04620694s ago: executing program 6 (id=1742): syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x4044805) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) 14.717289348s ago: executing program 6 (id=1743): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0xdc) 14.717080938s ago: executing program 59 (id=1743): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0xdc) 12.59978648s ago: executing program 2 (id=1717): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5r0}, './file1\x00'}) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) r4 = syz_open_procfs(0x0, &(0x7f0000000740)='oom_score\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000780)=@ethtool_rxfh={0x46, 0xe006, 0x3, 0x0, 0x1, "aa3b4d", 0x848, [0x2, 0x10, 0xfb0, 0x9, 0x3]}}) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000800)={0x6, 0x4, 0x4, 0x0, 0xc0, 0x3, 0x0, 0x3, 0x70, 0x6, 0x8, 0x4, 0x0, 0x6}, 0xe) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) close_range(r2, r4, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f00000009c0)={0x7, 0xbf93}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) utimes(&(0x7f0000000c80)='./file1\x00', &(0x7f0000000cc0)={{0x0, 0x2710}, {0x77359400}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000d00)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000d40)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x52, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r9, 0x700, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c800}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r9, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x61}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000004}, 0x840) fsetxattr$security_evm(r2, &(0x7f0000000fc0), &(0x7f0000001000)=@v1={0x2, "1e2a5eea84e82e48f2"}, 0xa, 0x2) 12.144124191s ago: executing program 2 (id=1754): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a37337e1bf4f564e4379ac8b8e76066a335e630774a8c007599fce882385170c0f", 0x3e}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000001000)=""/61, 0x3d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 11.508348847s ago: executing program 0 (id=1761): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001a80)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@grpjquota}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'hugetlb.1GB.usage_in_bytes\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '#! '}}, {@fsuuid={'fsuuid', 0x3d, {[0x5, 0x33, 0x62, 0x33, 0x36, 0x36, 0x37, 0x109fe096d106d8d3], 0x2d, [0x38, 0x37, 0x39, 0x34], 0x2d, [0x35, 0x65, 0x38, 0x4a], 0x2d, [0x3c, 0x39, 0x38, 0x38], 0x2d, [0x35, 0x37, 0x65, 0x33, 0x35, 0x64, 0x64, 0x66]}}}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640), 0x4) cachestat(r1, &(0x7f0000000040)={0x405}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) socketpair(0x18, 0xa, 0x2, 0x0) 11.323593941s ago: executing program 2 (id=1762): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), 0xffffffffffffffff) r2 = socket$kcm(0x1e, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1) write(r3, &(0x7f00000000c0)='10 1 0\x00', 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001c0004000000000000000002e0000002000000000000000000000000e8001100"], 0x154}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x2000000, {0x2, 0x3, 0x0, 0xd89631e63750130c}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x2, 0xff}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000007c0)={r8, @in={{0x2, 0x4e22, @loopback}}, [0x3, 0x2, 0x7, 0x2, 0x1ff, 0x2, 0x4, 0xffffffff, 0x3, 0x6, 0x2, 0x1, 0x1, 0x9072, 0x1800000]}, &(0x7f00000008c0)=0x100) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x80000000}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) rt_tgsigqueueinfo(0x0, 0x0, 0x36, &(0x7f0000000500)={0x10, 0x2, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) 11.150304946s ago: executing program 0 (id=1765): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0xfffffffd, 0x5, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbffffffdffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00', @ANYBLOB='&'], 0x28}}], 0x1, 0x4040040) r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x1c1300) unshare(0x20000400) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380"], 0xfc}}, 0x0) 11.036980328s ago: executing program 2 (id=1767): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/209, 0xd1}, {&(0x7f0000004b80)=""/165, 0xa5}, {&(0x7f0000004c40)=""/25, 0x19}, {&(0x7f0000004c80)=""/169, 0xa9}], 0x5}, 0x4}], 0x1, 0x10022, 0x0) 10.98606814s ago: executing program 60 (id=1767): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='\x00', 0x800, 0x104, &(0x7f00000000c0)={0x0, 0x16a4336c, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mq_timedsend(r3, &(0x7f00000001c0), 0x0, 0x3, &(0x7f0000000280)={0x77359400}) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5", 0xf}], 0x1, 0xe, 0x6) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x1, 0x784, 0x4e23, 0x7, 0xa, 0x0, 0x0, 0x3a}, {@in6=@empty, 0x4d2, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x4, 0x0, 0x32}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 9.661696452s ago: executing program 0 (id=1779): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004d00000085100000fbffffff85200000030000008510000002008000184a0000fdffffff0000000000000000d8328000ffffffff6a261800000000000191f9ffb2390000"], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x5b, &(0x7f0000000500)=""/91, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0xf3cd}, 0x10, 0xc688, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000640), 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x240c1ec49e528d74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001"], 0x2c}}, 0x0) 9.611803584s ago: executing program 61 (id=1779): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004d00000085100000fbffffff85200000030000008510000002008000184a0000fdffffff0000000000000000d8328000ffffffff6a261800000000000191f9ffb2390000"], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x5b, &(0x7f0000000500)=""/91, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0xf3cd}, 0x10, 0xc688, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000640), 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x240c1ec49e528d74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001"], 0x2c}}, 0x0) 1.960663571s ago: executing program 9 (id=1871): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2c075, 0x37caa}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000006c0)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000004e00)={'vxcan0\x00'}) bind$can_raw(r3, 0x0, 0x0) close(r3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f0000000040)=""/134, 0x86, 0x215bc38) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r5, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00810000"], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) syz_open_dev$sg(0x0, 0x0, 0x401) r7 = gettid() r8 = epoll_create(0x3fc) r9 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r9, &(0x7f0000000080)={r8, r9}) capset(&(0x7f0000000100)={0x20080522, r7}, &(0x7f0000000280)={0x7ff, 0xfbfffffa, 0xfffffffb, 0x10085, 0x40002df7, 0x1}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb20d78ee079025a165439c3807988a195c5e9da978992601d9a95ee2d46e69f5fa6d85020", 0x52}], 0x1}, 0x94) 1.744997917s ago: executing program 3 (id=1875): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000880)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getresuid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f00000008c0)) setresuid(0x0, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000091000002000000"], 0x0, 0x1a, 0x0, 0xa, 0x0, 0x10000, @value=r4}, 0x28) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) lstat(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f0000000300)={0x7ef0, 0x4}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x7a, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa808100100086dd60f53a0400403a00fe80ecdf18096abf000000000000000000000000bbff020000000000000000000000000001020090780000050060000000004000fffc01000000000000000006258f3e000000000000fc0200000000000000000000000000003a00000000000000f4c638bed6f068cc0008d7323a833cc2a5540bd0e3f8ee0688081bf5c0330fbf1639c20da8153ed9870b02de85fb4cc47a2c9daaffc6a7ffb7fb40288b73924e8233912d4662c88ef8ed3c048d6ab558ac59c6acf249ec50638ac41bd68e7a19236f00bd9730bc1969546211fa88750000000000"], 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0x10b, 0xbc, &(0x7f0000000080)=""/188}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000400)={'wg2\x00'}) socketpair(0x1d, 0x6, 0xd, &(0x7f0000000000)) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000200)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000005540)=ANY=[@ANYBLOB="14000000022a7e6f124338e4a6e81271bb010103"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1.491490063s ago: executing program 7 (id=1877): perf_event_open(&(0x7f0000000700)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x80000) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0xfffff, r1) ioctl$BLKFRAGET(r0, 0x1265, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8, 0xa, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.378497666s ago: executing program 3 (id=1878): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 1.373873806s ago: executing program 5 (id=1880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e, 0x30000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600402fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.329835017s ago: executing program 7 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x4, 0x0, 0x3}, 0x50) ioctl(r0, 0xc138fd0f, &(0x7f0000000000)="0400000000000000000000003801") 1.292815848s ago: executing program 3 (id=1882): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x5}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@deltaction={0x224, 0x31, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xfffffe3f, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff71a1}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x655d}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd13}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x224}, 0x1, 0xf0ffffffffffff, 0x0, 0x2405c805}, 0x24048094) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00034002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0xb5, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa57', 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000003f40), 0xfe, 0x2a4, &(0x7f0000000a80)="$eJzs3bFrJFUcB/DfzO4mxjuOUxsrEUREA+EsBMFGGw8O5BARQQ9O5LRRLkJM2qyVjYW9SiqbIFYaBRuxCTb+AVFTxMYmWBgUTDGyO7Oy2Ww2s+7srGQ/H9jZN5s3eW/Jft9MmJl9AcytqxHxbEQ0ImI5IloRkfRXeDh/XC1Wt5Z2b0dk2Uu/J916+Xqut92liGhHxNMRzd7PNnZeO/hz7/pjH663Hv1s59Wlut5fv8OD/ReOPr35wVc3ntxIi9cuF8/976NKyZDXmknE/dNo7H8iaZasuDjljnCOL37q5P6BiHikm/9WpEVkP1pb+L4VT3wyfLuFo3r7CUxDlrU6+8B2BsydtHsMnKQrEZGX03RlJT+G/7mRxDura+8tv7W6fvfOrEcq4FxfHmfZ6BpJO/+/d//5bxa/vjSQ/98aef5LeaqKDgN16+T/5Re3f+mUjxqz7g1Qg297hU7+l1/ffDzkHy6UMifX5B8umrInXuUf5tlY+U/r6RMwplHZHXF9lf0/zC/5h/lVNv/tGvsEVKTVKwxP8OT7/7+KKwj/exeBul3pLh3/w/wayH9xyUBxt2q5g/7rb955e3odBKp2q1fozz8AMF+yxRnfgAzMzKzHHwAAAAAAAAAAAAAAAAAA4LStpd3bvUddbf7wccThc/m0Rf3t59MWNIppR+7pLu/9Izkxu1Ey1mxHw92acPtJfV7x3dc3R8z3MMyVX6ttv/xfZKG7/PGhqtvPvX9y9czp8DbvRrQ7la81m6c//0nZaW/O/P33nbNh641yDVQlGVh/5pV62x90vD3b9m/sRXzXGX+uDRv/0niw+zx8/Lnc/xXL8e9Heizv/j1J7wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjTPwEAAP//d/F4Hg==") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x20}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000900e300000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff0400"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.292586518s ago: executing program 7 (id=1883): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0xfffffffd, 0x5, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbffffffdffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00', @ANYBLOB='&'], 0x28}}], 0x1, 0x4040040) 1.057270284s ago: executing program 9 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYBLOB="04000d8008"], 0x24}, 0x1, 0x5502000000000000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 1.053333234s ago: executing program 9 (id=1886): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x42, 0x9, 0x82ba, 0x0, 0x64317119, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x29) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4003, 0x0, 0x40, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0xb37, 0x4) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r4, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000380)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a9d40454a67f8010000004bd295857d5c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0015000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800000036d8d33699b52d0f60", 0xbd, 0x800, 0x0, 0x0) lseek(r3, 0xffffffffffff8000, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0x9, @private0, 0x7}}, 0x4, 0x6, 0xd4123ad, 0x0, 0xc2, 0x320, 0xff}, &(0x7f00000001c0)=0x9c) 957.084346ms ago: executing program 5 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r1, 0x35}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x1, 0x10, 0x183d, 0xfffffffc, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0xf, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000710001002abd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="0c00a95f0800010020b1ef9a0d2cfdaf43a914bff2755ad1928612fa7e42d582c12c15af1174bcc22e1eaecf6f4ec115d7eb"], 0x2f}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip_vti0\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x1, 0x7fff, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x65, 0x0, 0xc, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x44, 0x5c, 0x1, 0x5, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x10000}, {@multicast2, 0x80}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@private=0xa010102, 0x218}, {@rand_addr=0x64010102}, {@local, 0x2}]}, @end, @ssrr={0x89, 0x17, 0xbe, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @multicast1]}, @ssrr={0x89, 0x13, 0xed, [@loopback, @broadcast, @multicast1, @rand_addr=0x64010101]}, @rr={0x7, 0x13, 0x6f, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}]}}}}}) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000040)={r14, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000380)={r14, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r13, 0x107, 0x2, &(0x7f0000000140)={r14, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000001240)={0x7e8, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x74}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x81, 0xf, 0x0, 0x3}, {0x2, 0x8, 0x4, 0xfffffffb}, {0x2, 0x2, 0x8, 0x7}, {0x5, 0x6, 0x3, 0x9}, {0x9, 0x10, 0x3b, 0xc}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000854) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80200000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x18, r17, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x800) 956.686536ms ago: executing program 7 (id=1889): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r1, 0x35}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x1, 0x10, 0x183d, 0xfffffffc, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0xf, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000710001002abd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="0c00a95f0800010020b1ef9a0d2cfdaf43a914bff2755ad1928612fa7e42d582c12c15af1174bcc22e1eaecf6f4ec115d7eb"], 0x2f}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip_vti0\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x1, 0x7fff, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x65, 0x0, 0xc, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x44, 0x5c, 0x1, 0x5, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x10000}, {@multicast2, 0x80}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@private=0xa010102, 0x218}, {@rand_addr=0x64010102}, {@local, 0x2}]}, @end, @ssrr={0x89, 0x17, 0xbe, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @multicast1]}, @ssrr={0x89, 0x13, 0xed, [@loopback, @broadcast, @multicast1, @rand_addr=0x64010101]}, @rr={0x7, 0x13, 0x6f, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}]}}}}}) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000040)={r14, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000380)={r14, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r13, 0x107, 0x2, &(0x7f0000000140)={r14, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000001240)={0x7e8, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x74}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x81, 0xf, 0x0, 0x3}, {0x2, 0x8, 0x4, 0xfffffffb}, {0x2, 0x2, 0x8, 0x7}, {0x5, 0x6, 0x3, 0x9}, {0x9, 0x10, 0x3b, 0xc}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000854) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80200000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x18, r17, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x800) 933.824216ms ago: executing program 4 (id=1890): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (fail_nth: 8) 823.99462ms ago: executing program 9 (id=1891): perf_event_open(&(0x7f0000000700)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x80000) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0xfffff, r1) ioctl$BLKFRAGET(r0, 0x1265, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8, 0xa, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 773.31666ms ago: executing program 4 (id=1892): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 622.471464ms ago: executing program 5 (id=1893): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000020701020000000000000000000000031400078009000240100010000800014000000005c8210393490a6c0dcae0579297756a"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20004064) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 602.075255ms ago: executing program 4 (id=1894): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)="760160", 0x3}], 0x2}}], 0x1, 0x20008000) 580.924216ms ago: executing program 7 (id=1895): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) write$binfmt_format(r2, &(0x7f0000000240)='-1\x00', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="83050000000000004400128009000100766c616e00000000340002800400048006000100030000000c000200020000000e000000100003800c000100020000009b0400000600050088a8000008000500", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') fchdir(r6) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000040)={0x6, 0x274, 0x10, 0x3}) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d740101685fc8608e", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e26f6f0edc4", 0xda}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdff", 0x3}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40adced23638423cdc401bdd228b0590432be970bd3c9c7b2a6ee3dabba57022a222a4b012ef17e0385b92f034fe82ff530fddd4285581275eecee8a722e309654717a604b740ca6dbc00e7c878d6dd35f55413fc7c8cb1fd3beda73c7db9903f9d44c4faf64095a03292fda7cb99bc539914391c4ca199090cd5fd133969265c62ed24a87055dd031a71479489af1fde720611d613ab67cd77d9b0741367da527a4afcc9f7bbe806c0c0e155c5d5f227dc9933bb33b535f241c984bdb7084664329f3185c355d429c41f52ea5532f4e27ac3599939bd6a476e88e857942705607ad7c2183b1245e5de7482b14f33eb832fc878eee3535f92329133405896bd60b4c07736b72210aa4ea89d000359571524c2245ab8b67af41b0aefd1c88d8019bf591498f2813a2901d317c83826c716e6bba1e26c2b5621dbc41642d3c8f7594e75258fabb2587705005128182a564a0db4b63338deed92b1e17e539423594ba0373f44a5936c1b77fe2f6d2116d8d202e841e1269042ef6a8ab1f76fde15efd57f54b9c7139e1875896d3a78ec9", 0x5c2) 550.039636ms ago: executing program 9 (id=1896): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="108be57d0138d6c5c7df30a6af81038254e0b5a5716cc530649e2310536eda6ac276841975e1c5da233f0ddaa0c65173ef7804c479d4928bc6c6e5b5dea565c45c9014e4afa0c150b5338977fcf5ccfecc9d6c67a7c02069768bdb38047a59e93ec5b345d2d9311966ff7616da2096c240fc486c6828d5e89bb6f688b5620b08364a278d880c1af45ddded"], 0x1, 0x11aa, &(0x7f0000001280)="$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") prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_secret(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x49, 0x0}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r4, 0x5) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0xe, "0001000000000000"}], 0x18}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) recvmsg(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)}, 0x40) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00), 0x100}], 0x1}, 0x40) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) 548.161836ms ago: executing program 3 (id=1897): socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x801, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000200009937a61400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) (async, rerun: 64) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x62, 0xffffffff, 0x1, 0x6, 0x7, 0x5, 0x5, 0x4f}, 0x0) (async, rerun: 64) tkill(r2, 0x7) (async, rerun: 64) wait4(r2, 0x0, 0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00)=r2, 0x12) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async, rerun: 32) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (rerun: 32) 458.027408ms ago: executing program 4 (id=1898): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x4, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(0x0, &(0x7f0000002480)=[{}], 0x1f4) semctl$IPC_RMID(0x0, 0x0, 0x0) 457.653609ms ago: executing program 7 (id=1899): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x40, 0x2) mkdirat(r1, &(0x7f0000000240)='./proc/mtrr\x00', 0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x801, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0x400c4d05, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/54, 0x36}], 0x1}, 0x9}], 0x2, 0x2022, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x841e, 0xa04f, 0x90, 0x0, 0x8, 0xfffffffe, 0xc, 0x9, 0x6, 0x9, 0x4, 0x3, 0x0, 0xe, 0x6, 0xf05e, 0x7, 0x401, 0x180000, 0x5, 0x27e, 0xffffffff}}) r9 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010004000000000002000600", @ANYRES32=0x0, @ANYBLOB="04000000000000006ca05ddf10c1560087742cff01078aa5890fcab58a09866f80203541a01a1e847afebb50692ce91f5689c32e75d4ca82dabcac3ffe56a130b9c39a337e83b3beeb277beb211c47a1998dc09753cc004ecf6e00000000000000000000000200000000"], 0x34, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r10, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) 391.79063ms ago: executing program 5 (id=1900): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0xfffffffd, 0x5, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbffffffdffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00', @ANYBLOB='&'], 0x28}}], 0x1, 0x4040040) 305.236992ms ago: executing program 4 (id=1901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x11000, 0x0, 0x0}, &(0x7f0000000780)=0x40) 230.363254ms ago: executing program 5 (id=1902): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x5, @empty, 0x1, 0x20}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000cc0)="3ef0", 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x20040004) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'pimreg0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x6, 0x3, 0x7, 0x81, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x1, 0x7, 0x7, 0x0, 0x800, 0x3, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x0, 0x2, 0x2, 0x3, 0x8, 0x4, 0xa2, 0x2, 0x4, 0xfdf, 0x4, 0xffffffff, 0x7584, 0x1, 0xff, 0x1a5a, 0x10, 0x0, 0xfffffff7, 0x4, 0x89, 0xffffff00, 0xa, 0x224, 0xa, 0x6, 0xd3e9, 0x400, 0x3d, 0xfff, 0xfffffff5, 0x2b6395a6, 0x8005510, 0x4, 0x3ff, 0x3, 0x6, 0x7f, 0x7, 0xafd6, 0x3, 0x1, 0x3fe, 0x5, 0x9dc, 0x0, 0x80b1, 0x5, 0x80000001, 0x9, 0x5, 0x3, 0x4, 0xa, 0x1, 0xd640, 0x7, 0x4000008, 0x3, 0x1, 0x8000011, 0x9, 0x401, 0x8, 0x8, 0x5, 0x1, 0xc9, 0x1ff, 0xfffffffa, 0x1, 0x4, 0x7ffb, 0x8, 0x8001, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x3509, 0xde9, 0x7fff, 0x80, 0x105, 0x80000000, 0x6, 0x5, 0x2, 0xc, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) read(r4, 0x0, 0x0) readahead(r4, 0x80000001, 0x1) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f00000003c0)={0x3}) unshare(0x2c040480) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)) unshare(0x2000000) 218.824454ms ago: executing program 4 (id=1903): syz_io_uring_setup(0x7c61, &(0x7f00000001c0)={0x0, 0x591f, 0x30, 0x1, 0x350}, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x76802, 0x100) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_clone3(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="314b2a68ed1157cc"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80b000000877d81920d90b5b5d18832728f2db20501040000000000000000010000035402010000000000010000000b01000802000100", @ANYRES64], 0xbb8}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r1 = inotify_init1(0x81c00) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x44000160) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f00000006c0)=""/226, 0xe2}], 0x2}, 0x7}], 0x1, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x44, 0x8000000000000001}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x8, 0x1, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) 121.434557ms ago: executing program 3 (id=1904): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 68.854288ms ago: executing program 5 (id=1905): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@noinit_itable}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") unshare(0x26020480) shutdown(0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x3fc000000000000, 0x2000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000003480)={{r0, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000080)={@_ha_fsid={[0x6, 0xc]}, {0x8, 0x1e, 0x9c, 0x8}}, 0xb, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7}, 0x5, &(0x7f00000033c0)=[{0x3, 0x7, &(0x7f00000001c0)='quota', &(0x7f0000000280)="a2ae7879723d415137e862ff78b89d0474536c0100000041a40ec658de2a20959b734b95fd2470b5837127c6038e5017bec4dc6e19683858a04038d5cb5546a1ffa3072bc902944010f0cacce02753bae8e483c348bdfd9cbbaabc9ce55b6821f31354b6fe89c9da97de70820e89ec70787c496c187952e3a758fff16a35211bdf6f0130d34862b43081b812b9f2dddf76d8037946a7879b0600ae59b5adf249bb4852df0404fc72e2092fcf747bfc95cdf07803af894cd7cebf792c432dff10c0d8548295c521142cf5fc4f6217e6d57e9812d8ec0500"/230, 0xe6, 0x22}, {0x2, 0x8, &(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)="5e6ad8b93ed086c94ad0d7c7de7e68409360b2dab5cc069f8d9395fb6fee892d8ff99141364faa7d985e531aa43b7bce84639eb2313afc8dc4f178d75ec4158c37e8a8172c998fa06224d27df88d6b557f1fe8bc786ddb5a36954026067d0f2bf8897d15f909b0fa150db79a4106bf6b8ec490beeb38168c2b69211699093bd710fa4b820839cdedc2e537547769645ab49fd88bd559156c7d", 0x99, 0x10}, {0x1, 0xfffffff7, &(0x7f00000005c0)='\x00\x00\x11\xbb\r\xd3\x86\xee\x06j\x1e\xa0\x18\xf1\x90\xdd\x9c\xbf\xfe:\xc0L\xa8;p\xde\xfaT\x04\xc0{\f2\xcb/\xd5\xa2\x8c\xa4\t\xf3\xb5\xaa\x948s\x84\xa2&\xfd#\xad\xf7A\x82%;\xa5]\x8bIk[\x81\x18\x10\x87Lf\xdd@\x1c\xdfG\x88\x13M\xc5\xebWf\xe4 \xb57\xeb\xf2_\x94%E\xa5\xc2L%\xce8\a\xaes\xf9\x02\xfa)\xcc\xf3r\xb4\xc1\x18\xe4x7N\xb3p\xd7T\xc8\xe0\x8ee~\xb3\xd0\x0e\xd4\xdd`', &(0x7f0000002240)="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", 0x1000, 0x2}, {0x3, 0xa, &(0x7f0000003240)='\f\x00', &(0x7f0000003280)="544dd13bc12c864360d273efb489a4b51b01a59b857182667f312afcfb43a8ce6006852b4b21cac0bd46db6bc245ba31592e7ed211242813c559010d5b9949817b7d3749b9da6732f90d4a40961d140f685a39fdf145ad9cfbb7742b434782b454a756ddd7fd7613bb8c634e719956dd403157ea", 0x74, 0x20}, {0x3, 0x2, &(0x7f0000003300)='quota', &(0x7f00000008c0)="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", 0x1d7, 0x4}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000003980)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003940)={&(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x3d4}, 0x1, 0x0, 0x0, 0x4048004}, 0x70000082) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000d00)=""/4082) r7 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) setsockopt(r7, 0x84, 0xc0, &(0x7f00000002c0), 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000fa0000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendto$inet6(r7, 0x0, 0x0, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = socket$inet6(0xa, 0x1, 0x3) r10 = dup2(r9, r9) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f00000000c0)={@remote, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40003, 0x40, 0x5, 0x13f, 0x0, 0x600000}) 254.97µs ago: executing program 3 (id=1906): perf_event_open(&(0x7f0000000700)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_secret(0x80000) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0xfffff, r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 0s ago: executing program 9 (id=1907): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47e, &(0x7f0000000640)="$eJzs3MtvG8UfAPDv2kn66+uXUMqjpYXQUlHxSJr0QQ9cikDiABISHIo4hSStSt0GNUGiVQUth3JElbgjuCHxF3ChXBBwQuKEBBJHhFShXlo4Ga29a1zHTpzEsQP+fKRNZjKzmvnu7tjjWW8C6Fuj6Y8kYltE/BwRw9Xs3RVGq7/u3Lo8/eety9NJlMuv/pFU6t2+dXk6r5rvt7WaKZeXaPfaGxFTpdLshSw/vnDu7fH5i5eePnNu6vTs6dnzk8ePHzm8d+jY5NGOxJnGdXv3e3N7dr34+vWXp09ef/O7L9L+bsvK6+PolNHq0W3qQKcb67HtdelkoIcdYUWKEZGersHK+B+OYmyulQ3HCx/0tHPAuiqXC+VNrYuvlIH/sHSiDvSj/I0+/fybb12aemwIN09EbR3jTrZVSwaikNUZzD4jrYfRiDh55a9P0i3WaR0CAKDejRMR8VSz+V8h7q+r9//sHspIRNwTETsi4t6I2BkR90VU6j4QEQ+usP3GOySL5z/l4VUF1qZ0/vdsdm/r7vlfPvuLkWKW216JfzA5daY0eyg7JgdjcFOan1iija+f//GjVmX18790S9vP54JZP34faFigm5lamFpLzPVuXo3YPdAs/qQ2503nx7siYvcq2zjzxOd7WpWNLBv/EjowKS9/GvF49fxfiYb4c0nL+5MTzxybPDr+vyjNHhrPr4rFvv/h2iut2l98/g98FtFm/B1w80Y5tjRc/w2HdSQZylKl0uyF+RU28FPEtV8+bPmZZrXX/1DyWiWdd+3dqYWFCxMRQ8lLi/8++c++eT6vn17/B/fX4k+ibvzvyPZJz/9DEZFexHsj4uGIeCTr+6MRsS8i9i9xCL597rG3Vh7/EqvyHZTGP9P09a92/Y+kqfmLl85W7tevIlE8+82XK48/tSU7/0cquYPZPu28/rXbwbUePwAAAPg3KFS+A58UxmrpQmFsrPod/p2xpVCam1948tTcO+dnqt+VH4nBQr7SNVy3HjqRreXl+cmG/OFs3fjj4uZKfmx6rjTT6+Chz21tMf5TvxWrv3/taQ+BdeV5Lehfxj/0L+Mf+pfxD/3L+If+1Wz8v9+DfgDdt8z7/+Zu9QPoPvN/6F/GP/Sv5cb/vu48iwx0V8tn4wtreuRfokeJr4bW9r8a2k9EYYOEvEETxTbqXM1GYfUvg9G08kDb/8zirkT+pr585U1Ni3r4ogQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBBfwcAAP//7+7Zrg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r1, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x44b, 0x70bd28, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}}, 0x20}}, 0x4) write(r3, &(0x7f0000000210)="0100", 0x2) read(r2, &(0x7f0000000000)=""/8, 0x8) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000006e093fbe29877c237c03000000006b119e000000000085100000020000008500000000000000950000070000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): filter on device netdevsim2 [ 235.738032][T13681] loop7: detected capacity change from 0 to 164 [ 235.752794][T13680] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.779309][T13680] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.818934][T13681] FAULT_INJECTION: forcing a failure. [ 235.818934][T13681] name failslab, interval 1, probability 0, space 0, times 0 [ 235.832573][T13681] CPU: 1 UID: 0 PID: 13681 Comm: syz.7.1595 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 235.832636][T13681] Tainted: [W]=WARN [ 235.832642][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.832654][T13681] Call Trace: [ 235.832660][T13681] [ 235.832668][T13681] __dump_stack+0x1d/0x30 [ 235.832691][T13681] dump_stack_lvl+0x95/0xd0 [ 235.832711][T13681] dump_stack+0x15/0x1b [ 235.832798][T13681] should_fail_ex+0x25e/0x270 [ 235.832824][T13681] should_failslab+0x8c/0xb0 [ 235.832846][T13681] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 235.832943][T13681] ? security_file_alloc+0x32/0xf0 [ 235.832968][T13681] ? security_file_alloc+0x32/0xf0 [ 235.832994][T13681] security_file_alloc+0x32/0xf0 [ 235.833027][T13681] init_file+0x5b/0x1b0 [ 235.833050][T13681] alloc_empty_file+0x85/0x1e0 [ 235.833073][T13681] path_openat+0x54/0x2000 [ 235.833183][T13681] ? __css_rstat_updated+0xbb/0x280 [ 235.833209][T13681] ? _parse_integer+0x27/0x40 [ 235.833229][T13681] ? __rcu_read_unlock+0x4e/0x70 [ 235.833248][T13681] ? __perf_event_task_sched_in+0xa7a/0xae0 [ 235.833272][T13681] ? perf_cgroup_switch+0x10c/0x480 [ 235.833324][T13681] do_file_open+0x16c/0x290 [ 235.833352][T13681] do_sys_openat2+0xa0/0x130 [ 235.833376][T13681] __x64_sys_openat+0xf2/0x120 [ 235.833409][T13681] x64_sys_call+0x1e39/0x3020 [ 235.833428][T13681] do_syscall_64+0x136/0x3c0 [ 235.833455][T13681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.833497][T13681] RIP: 0033:0x7fca53cce0d9 [ 235.833513][T13681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.833528][T13681] RSP: 002b:00007fca52727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.833616][T13681] RAX: ffffffffffffffda RBX: 00007fca53f55fa0 RCX: 00007fca53cce0d9 [ 235.833630][T13681] RDX: 00000000000026e1 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 235.833641][T13681] RBP: 00007fca52727090 R08: 0000000000000000 R09: 0000000000000000 [ 235.833670][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.833680][T13681] R13: 00007fca53f56038 R14: 00007fca53f55fa0 R15: 00007ffdb23e9bf8 [ 235.833771][T13681] [ 235.841630][T13670] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 236.125336][T13690] loop7: detected capacity change from 0 to 512 [ 236.137238][T13690] FAT-fs (loop7): bogus logical sector size 0 [ 236.152451][T13690] FAT-fs (loop7): Can't find a valid FAT filesystem [ 236.161240][T12301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.176675][T12979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.251198][ T6785] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.295964][ T6785] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.462350][T13640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.165681][T13717] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1602'. [ 237.224621][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 237.265644][T13077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.274819][T13719] set_capacity_and_notify: 1 callbacks suppressed [ 237.274835][T13719] loop7: detected capacity change from 0 to 1024 [ 237.275895][T13208] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.300163][T13719] EXT4-fs: Mount option(s) incompatible with ext2 [ 237.307457][T12761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.339756][T13717] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1602'. [ 237.453775][T13719] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1602'. [ 237.471751][T13729] loop1: detected capacity change from 0 to 2048 [ 237.500036][T13729] EXT4-fs: Ignoring removed nobh option [ 237.553383][T13729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.687951][T13729] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.764054][T13740] loop9: detected capacity change from 0 to 128 [ 237.805406][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 237.805425][ T28] audit: type=1400 audit(1786184219.219:3215): avc: denied { write } for pid=13745 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.005033][T13740] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.018174][T13740] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.086194][T13740] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 238.161330][T13752] loop6: detected capacity change from 0 to 8192 [ 238.168669][ T28] audit: type=1400 audit(1786184219.579:3216): avc: denied { write } for pid=13737 comm="syz.9.1603" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.189997][T13752] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.203231][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1603'. [ 238.236225][T13761] loop7: detected capacity change from 0 to 256 [ 238.243576][T13740] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 238.269487][ T28] audit: type=1400 audit(1786184219.689:3217): avc: denied { write } for pid=13753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.364577][ T28] audit: type=1400 audit(1786184219.689:3218): avc: denied { watch } for pid=13750 comm="syz.6.1604" path="/5/file1" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 238.368237][T13761] FAULT_INJECTION: forcing a failure. [ 238.368237][T13761] name failslab, interval 1, probability 0, space 0, times 0 [ 238.414620][T13771] loop8: detected capacity change from 0 to 512 [ 238.418288][T13761] CPU: 1 UID: 0 PID: 13761 Comm: syz.7.1606 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 238.418314][T13761] Tainted: [W]=WARN [ 238.418319][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.418330][T13761] Call Trace: [ 238.418336][T13761] [ 238.418344][T13761] __dump_stack+0x1d/0x30 [ 238.418437][T13761] dump_stack_lvl+0x95/0xd0 [ 238.418455][T13761] dump_stack+0x15/0x1b [ 238.418472][T13761] should_fail_ex+0x25e/0x270 [ 238.418497][T13761] should_failslab+0x8c/0xb0 [ 238.418578][T13761] __kvmalloc_node_noprof+0x15b/0x590 [ 238.418602][T13761] ? alloc_netdev_mqs+0xa7/0xa90 [ 238.418619][T13761] ? alloc_netdev_mqs+0xa7/0xa90 [ 238.418704][T13761] ? __pfx_vlan_setup+0x10/0x10 [ 238.418728][T13761] alloc_netdev_mqs+0xa7/0xa90 [ 238.418746][T13761] register_vlan_device+0x26b/0x3c0 [ 238.418815][T13761] vlan_ioctl_handler+0x1cc/0x530 [ 238.418841][T13761] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 238.418865][T13761] sock_ioctl+0x4bd/0x610 [ 238.418885][T13761] ? mutex_lock+0x57/0x90 [ 238.418986][T13761] ? __pfx_sock_ioctl+0x10/0x10 [ 238.419005][T13761] __se_sys_ioctl+0xce/0x140 [ 238.419061][T13761] __x64_sys_ioctl+0x43/0x50 [ 238.419079][T13761] x64_sys_call+0x1563/0x3020 [ 238.419099][T13761] do_syscall_64+0x136/0x3c0 [ 238.419201][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.419221][T13761] RIP: 0033:0x7fca53cce0d9 [ 238.419236][T13761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.419253][T13761] RSP: 002b:00007fca52727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.419274][T13761] RAX: ffffffffffffffda RBX: 00007fca53f55fa0 RCX: 00007fca53cce0d9 [ 238.419286][T13761] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000003 [ 238.419306][T13761] RBP: 00007fca52727090 R08: 0000000000000000 R09: 0000000000000000 [ 238.419318][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.419330][T13761] R13: 00007fca53f56038 R14: 00007fca53f55fa0 R15: 00007ffdb23e9bf8 [ 238.419349][T13761] [ 238.421205][ T28] audit: type=1400 audit(1786184219.829:3219): avc: denied { write } for pid=13775 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.630441][T13771] FAT-fs (loop8): bogus logical sector size 0 [ 238.651678][ T28] audit: type=1400 audit(1786184219.929:3220): avc: denied { nlmsg_read } for pid=13772 comm="syz.6.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.677947][T13771] FAT-fs (loop8): Can't find a valid FAT filesystem [ 238.703936][T13077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.736898][T13778] netlink: 'syz.7.1609': attribute type 2 has an invalid length. [ 238.747927][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1609'. [ 238.855209][T13781] syzkaller0: entered promiscuous mode [ 238.892932][T13781] syzkaller0: entered allmulticast mode [ 238.902630][T13740] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.914963][T13785] syz_tun: entered allmulticast mode [ 238.943963][T13785] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 238.952774][T13785] mroute: pending queue full, dropping entries [ 238.992054][ T28] audit: type=1400 audit(1786184220.389:3221): avc: denied { write } for pid=13780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.107649][T13784] syz_tun: left allmulticast mode [ 239.433211][ T28] audit: type=1400 audit(1786184220.849:3222): avc: denied { write } for pid=13807 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.505896][T13819] loop8: detected capacity change from 0 to 8192 [ 239.571710][T13832] loop7: detected capacity change from 0 to 512 [ 239.578599][T13827] syzkaller0: entered promiscuous mode [ 239.595779][T13827] syzkaller0: entered allmulticast mode [ 239.606998][T13832] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 239.625445][ T28] audit: type=1400 audit(1786184221.039:3223): avc: denied { write } for pid=13823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.664135][T13832] EXT4-fs (loop7): 1 truncate cleaned up [ 239.685548][T13832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.697664][ T28] audit: type=1400 audit(1786184221.099:3224): avc: denied { write } for pid=13843 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.723787][T13847] ALSA: seq fatal error: cannot create timer (-22) [ 239.738364][T13819] Config c/1 of g1 needs at least one function. [ 239.742556][T13832] EXT4-fs error (device loop7): __ext4_iget:5533: inode #12: block 2: comm syz.7.1620: invalid block [ 239.756331][T13819] udc usbip-vudc.0: failed to start g1: -22 [ 239.763389][T13819] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 239.779126][T13819] UDC core: g1: couldn't find an available UDC or it's busy [ 239.793952][T13832] EXT4-fs error (device loop7): __ext4_iget:5533: inode #12: block 2: comm syz.7.1620: invalid block [ 239.879611][T13859] EXT4-fs error (device loop7): __ext4_iget:5533: inode #12: block 2: comm syz.7.1620: invalid block [ 239.905650][T13867] loop6: detected capacity change from 0 to 128 [ 239.927072][T13832] EXT4-fs error (device loop7): __ext4_iget:5533: inode #12: block 2: comm syz.7.1620: invalid block [ 239.938044][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1625'. [ 239.965164][T13867] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.966728][T13875] netlink: 'syz.9.1627': attribute type 10 has an invalid length. [ 239.988779][T13832] EXT4-fs error (device loop7): __ext4_iget:5533: inode #12: block 2: comm syz.7.1620: invalid block [ 240.024674][T13867] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.057855][T13879] netlink: 'syz.1.1628': attribute type 2 has an invalid length. [ 240.069698][T13881] loop9: detected capacity change from 0 to 128 [ 240.081504][T13859] EXT4-fs error (device loop7): __ext4_iget:5533: inode #12: block 2: comm syz.7.1620: invalid block [ 240.092664][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 240.104843][T13875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.127702][T13881] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.136004][T13867] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.161554][T13832] EXT4-fs error (device loop7): __ext4_iget:5533: inode #12: block 2: comm syz.7.1620: invalid block [ 240.179621][T13881] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.279898][T13875] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 240.290140][T12903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.317341][T13882] veth0: entered promiscuous mode [ 240.338274][T13886] bond0: entered promiscuous mode [ 240.353948][T13886] bond_slave_0: entered promiscuous mode [ 240.398510][T13886] bond_slave_1: entered promiscuous mode [ 240.417085][T13886] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 240.462648][T13869] bond0: left promiscuous mode [ 240.467513][T13869] bond_slave_0: left promiscuous mode [ 240.473211][T13869] bond_slave_1: left promiscuous mode [ 240.478847][T13869] netdevsim netdevsim8 netdevsim2: left promiscuous mode [ 240.497986][T13869] veth0: left promiscuous mode [ 240.509220][T13890] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1629'. [ 240.569774][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 241.001599][T13922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.008171][T13926] netlink: 'syz.8.1633': attribute type 16 has an invalid length. [ 241.035902][T13926] netlink: 'syz.8.1633': attribute type 17 has an invalid length. [ 241.051458][T13926] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 241.082672][T12761] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.109133][T13919] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 241.222610][T13944] FAULT_INJECTION: forcing a failure. [ 241.222610][T13944] name failslab, interval 1, probability 0, space 0, times 0 [ 241.248229][T13944] CPU: 1 UID: 0 PID: 13944 Comm: syz.9.1636 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 241.248262][T13944] Tainted: [W]=WARN [ 241.248269][T13944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.248278][T13944] Call Trace: [ 241.248283][T13944] [ 241.248345][T13944] __dump_stack+0x1d/0x30 [ 241.248367][T13944] dump_stack_lvl+0x95/0xd0 [ 241.248384][T13944] dump_stack+0x15/0x1b [ 241.248399][T13944] should_fail_ex+0x25e/0x270 [ 241.248421][T13944] should_failslab+0x8c/0xb0 [ 241.248502][T13944] __kvmalloc_node_noprof+0x15b/0x590 [ 241.248527][T13944] ? cache_write+0x9a/0x190 [ 241.248545][T13944] ? cache_write+0x9a/0x190 [ 241.248613][T13944] cache_write+0x9a/0x190 [ 241.248630][T13944] ? __pfx_cache_write_procfs+0x10/0x10 [ 241.248652][T13944] cache_write_procfs+0x49/0x60 [ 241.248674][T13944] proc_reg_write+0x128/0x1c0 [ 241.248753][T13944] ? __pfx_proc_reg_write+0x10/0x10 [ 241.248876][T13944] vfs_write+0x252/0x990 [ 241.248894][T13944] ? __fget_files+0x184/0x1c0 [ 241.248981][T13944] ? mutex_lock+0x57/0x90 [ 241.249001][T13944] ksys_write+0xdc/0x1a0 [ 241.249019][T13944] __x64_sys_write+0x40/0x50 [ 241.249052][T13944] x64_sys_call+0x27e1/0x3020 [ 241.249070][T13944] do_syscall_64+0x136/0x3c0 [ 241.249094][T13944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.249111][T13944] RIP: 0033:0x7fb2f229e0d9 [ 241.249171][T13944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.249186][T13944] RSP: 002b:00007fb2f0cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.249234][T13944] RAX: ffffffffffffffda RBX: 00007fb2f2525fa0 RCX: 00007fb2f229e0d9 [ 241.249246][T13944] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 241.249261][T13944] RBP: 00007fb2f0cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.249271][T13944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.249283][T13944] R13: 00007fb2f2526038 R14: 00007fb2f2525fa0 R15: 00007ffc174e71f8 [ 241.249342][T13944] [ 241.573391][T13953] netlink: 'syz.8.1639': attribute type 2 has an invalid length. [ 241.620539][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1639'. [ 241.722415][T13077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.742969][T13971] netlink: 'syz.7.1645': attribute type 16 has an invalid length. [ 241.775330][T13978] syz_tun: entered allmulticast mode [ 241.781731][T13971] netlink: 'syz.7.1645': attribute type 17 has an invalid length. [ 241.806373][T13978] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 241.814676][T13971] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 241.815194][T13978] mroute: pending queue full, dropping entries [ 241.941666][T13989] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 241.960334][T13994] netlink: 'syz.8.1647': attribute type 16 has an invalid length. [ 241.968261][T13989] EXT4-fs (loop7): group descriptors corrupted! [ 241.975191][T13994] netlink: 'syz.8.1647': attribute type 17 has an invalid length. [ 241.981755][T13976] syz_tun: left allmulticast mode [ 242.000588][T13955] xfrm0 speed is unknown, defaulting to 1000 [ 242.021026][T13994] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 242.094953][T14003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.189096][T14003] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.240795][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 242.264490][T14015] netlink: 95 bytes leftover after parsing attributes in process `syz.6.1651'. [ 242.302936][T14018] syzkaller0: entered promiscuous mode [ 242.321119][T14018] syzkaller0: entered allmulticast mode [ 242.424303][T13077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.543967][T14025] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1655'. [ 242.627147][T14025] Unsupported ieee802154 address type: 0 [ 242.778085][T14042] 9p: Bad value for 'rfdno' [ 242.875925][T14053] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1659'. [ 242.951414][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 242.951437][ T28] audit: type=1400 audit(1786184224.369:3245): avc: denied { write } for pid=14047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.043285][T14053] set_capacity_and_notify: 4 callbacks suppressed [ 243.043302][T14053] loop1: detected capacity change from 0 to 4096 [ 243.080327][T14069] veth0: entered promiscuous mode [ 243.089934][ T28] audit: type=1400 audit(1786184224.509:3246): avc: denied { write } for pid=14067 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.112449][T14069] bond0: entered promiscuous mode [ 243.119768][T14069] bond_slave_0: entered promiscuous mode [ 243.125887][T14069] bond_slave_1: entered promiscuous mode [ 243.132071][T14068] bond0: left promiscuous mode [ 243.135804][T14053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.137071][T14068] bond_slave_0: left promiscuous mode [ 243.151069][T14044] loop6: detected capacity change from 0 to 1024 [ 243.154859][T14068] bond_slave_1: left promiscuous mode [ 243.155233][T14068] veth0: left promiscuous mode [ 243.196247][T14057] loop9: detected capacity change from 0 to 512 [ 243.202850][T14051] loop8: detected capacity change from 0 to 4096 [ 243.213246][T14044] EXT4-fs: Ignoring removed orlov option [ 243.244861][T14051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.255870][T14057] EXT4-fs: quotafile must be on filesystem root [ 243.281032][T14077] FAULT_INJECTION: forcing a failure. [ 243.281032][T14077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.295466][T13077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.317175][T14077] CPU: 1 UID: 0 PID: 14077 Comm: syz.7.1663 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 243.317265][T14077] Tainted: [W]=WARN [ 243.317272][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.317284][T14077] Call Trace: [ 243.317291][T14077] [ 243.317300][T14077] __dump_stack+0x1d/0x30 [ 243.317322][T14077] dump_stack_lvl+0x95/0xd0 [ 243.317407][T14077] dump_stack+0x15/0x1b [ 243.317424][T14077] should_fail_ex+0x25e/0x270 [ 243.317447][T14077] should_fail+0xb/0x20 [ 243.317466][T14077] should_fail_usercopy+0x1a/0x20 [ 243.317496][T14077] _copy_to_user+0x20/0xa0 [ 243.317517][T14077] simple_read_from_buffer+0xb5/0x130 [ 243.317540][T14077] proc_fail_nth_read+0x10e/0x150 [ 243.317591][T14077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.317664][T14077] vfs_read+0x18e/0x7c0 [ 243.317681][T14077] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 243.317764][T14077] ksys_read+0xdc/0x1a0 [ 243.317846][T14077] __x64_sys_read+0x40/0x50 [ 243.317864][T14077] x64_sys_call+0x2886/0x3020 [ 243.317883][T14077] do_syscall_64+0x136/0x3c0 [ 243.317911][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.317937][T14077] RIP: 0033:0x7fca53c8e90e [ 243.317954][T14077] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.318032][T14077] RSP: 002b:00007fca52726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.318053][T14077] RAX: ffffffffffffffda RBX: 00007fca527276c0 RCX: 00007fca53c8e90e [ 243.318067][T14077] RDX: 000000000000000f RSI: 00007fca527270a0 RDI: 0000000000000005 [ 243.318080][T14077] RBP: 00007fca52727090 R08: 0000000000000000 R09: 0000000000000000 [ 243.318093][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.318123][T14077] R13: 00007fca53f56038 R14: 00007fca53f55fa0 R15: 00007ffdb23e9bf8 [ 243.318142][T14077] [ 243.332759][T14044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.435071][T13208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.442332][ T28] audit: type=1400 audit(1786184224.779:3247): avc: denied { bind } for pid=14080 comm="syz.9.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.533421][T14094] loop7: detected capacity change from 0 to 512 [ 243.591955][T14094] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.624879][T14100] syzkaller0: entered promiscuous mode [ 243.631056][T14100] syzkaller0: entered allmulticast mode [ 243.668353][T14104] program syz.6.1658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.682229][ T28] audit: type=1400 audit(1786184225.069:3248): avc: denied { write } for pid=14073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.715662][ T28] audit: type=1400 audit(1786184225.119:3249): avc: denied { write } for pid=14106 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.739525][T14104] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 243.758971][ T28] audit: type=1400 audit(1786184225.169:3250): avc: denied { write } for pid=14041 comm="syz.6.1658" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.855159][T14120] netlink: 2024 bytes leftover after parsing attributes in process `syz.1.1671'. [ 243.864400][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'. [ 243.902987][T14127] netlink: 'syz.8.1675': attribute type 10 has an invalid length. [ 243.913712][T14129] veth0: entered promiscuous mode [ 243.919180][T14129] bond0: entered promiscuous mode [ 243.924372][T14129] bond_slave_0: entered promiscuous mode [ 243.928899][T14127] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1675'. [ 243.930442][ T28] audit: type=1400 audit(1786184225.339:3251): avc: denied { write } for pid=14108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.967235][T14129] bond_slave_1: entered promiscuous mode [ 243.975053][T14129] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 243.982878][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1658'. [ 243.992075][ T28] audit: type=1400 audit(1786184225.379:3252): avc: denied { mounton } for pid=14041 comm="syz.6.1658" path="/15/file1/sys" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 243.992543][T14136] C: renamed from veth1_to_team (while UP) [ 244.018563][ T28] audit: type=1400 audit(1786184225.399:3253): avc: denied { write } for pid=14134 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.044343][T14136] netlink: 'syz.8.1675': attribute type 3 has an invalid length. [ 244.054065][T14136] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1675'. [ 244.063486][T14136] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.093673][ T28] audit: type=1400 audit(1786184225.509:3254): avc: denied { write } for pid=14138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.118144][T14132] loop7: detected capacity change from 0 to 4096 [ 244.123303][T14127] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 244.146759][T14128] bond0: left promiscuous mode [ 244.153578][T14132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.166644][T14128] bond_slave_0: left promiscuous mode [ 244.180614][T14128] bond_slave_1: left promiscuous mode [ 244.189675][T14128] netdevsim netdevsim9 netdevsim2: left promiscuous mode [ 244.203075][T14128] veth0: left promiscuous mode [ 244.208320][T14122] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.1674'. [ 244.304440][T14166] xfrm0 speed is unknown, defaulting to 1000 [ 244.321159][T12903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.407364][T14177] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1678'. [ 244.501894][T12979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.751301][T14185] loop9: detected capacity change from 0 to 512 [ 244.804212][T14185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.833107][T14193] loop7: detected capacity change from 0 to 512 [ 244.842831][T14193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.863337][T14185] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.147592][T14212] FAULT_INJECTION: forcing a failure. [ 245.147592][T14212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.193515][T14212] CPU: 0 UID: 0 PID: 14212 Comm: syz.8.1684 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 245.193545][T14212] Tainted: [W]=WARN [ 245.193552][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.193564][T14212] Call Trace: [ 245.193571][T14212] [ 245.193658][T14212] __dump_stack+0x1d/0x30 [ 245.193678][T14212] dump_stack_lvl+0x95/0xd0 [ 245.193709][T14212] dump_stack+0x15/0x1b [ 245.193727][T14212] should_fail_ex+0x25e/0x270 [ 245.193754][T14212] should_fail+0xb/0x20 [ 245.193777][T14212] should_fail_usercopy+0x1a/0x20 [ 245.193879][T14212] _copy_from_user+0x1c/0xb0 [ 245.193965][T14212] map_update_elem+0x3fa/0x6d0 [ 245.193997][T14212] __sys_bpf+0x9b5/0xc30 [ 245.194109][T14212] ? vfs_write+0x800/0x990 [ 245.194130][T14212] __x64_sys_bpf+0x69/0x80 [ 245.194216][T14212] x64_sys_call+0x10cb/0x3020 [ 245.194302][T14212] do_syscall_64+0x136/0x3c0 [ 245.194328][T14212] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 245.194358][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.194374][T14212] RIP: 0033:0x7efd5e3ae0d9 [ 245.194427][T14212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.194443][T14212] RSP: 002b:00007efd5ce07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.194459][T14212] RAX: ffffffffffffffda RBX: 00007efd5e635fa0 RCX: 00007efd5e3ae0d9 [ 245.194471][T14212] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 245.194482][T14212] RBP: 00007efd5ce07090 R08: 0000000000000000 R09: 0000000000000000 [ 245.194492][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.194514][T14212] R13: 00007efd5e636038 R14: 00007efd5e635fa0 R15: 00007ffdd4d0f258 [ 245.194596][T14212] [ 245.396594][T14205] loop6: detected capacity change from 0 to 512 [ 245.440101][T14205] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 245.475219][T14222] syzkaller0: entered promiscuous mode [ 245.477475][T14205] EXT4-fs (loop6): 1 truncate cleaned up [ 245.485591][T14222] syzkaller0: entered allmulticast mode [ 245.495557][T14205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.553810][T12979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.650972][T12903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.662733][T14201] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.674499][T14230] netlink: 'syz.6.1686': attribute type 16 has an invalid length. [ 245.693360][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.707133][T14230] netlink: 'syz.6.1686': attribute type 17 has an invalid length. [ 245.734484][T14230] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 245.736835][T14243] loop8: detected capacity change from 0 to 1024 [ 245.761820][T14243] EXT4-fs: Ignoring removed nobh option [ 245.778598][T14243] EXT4-fs: Ignoring removed bh option [ 245.781051][T14253] netlink: 'syz.7.1687': attribute type 16 has an invalid length. [ 245.796293][T14253] netlink: 'syz.7.1687': attribute type 17 has an invalid length. [ 245.812567][T14243] EXT4-fs: Ignoring removed nobh option [ 245.830410][T14253] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 245.852701][T14256] netlink: 'syz.6.1691': attribute type 2 has an invalid length. [ 245.857629][T14243] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 245.888378][ T49] bond0: (slave netdevsim2): Releasing backup interface [ 245.898343][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.911649][T14243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.989596][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.044672][T14284] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 246.044672][T14284] Please contact the netfilter-devel mailing list or update your nftables rules. [ 246.067197][T14257] xfrm0 speed is unknown, defaulting to 1000 [ 246.070786][T14279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.085994][T14279] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.104900][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.133661][T12979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.145001][T14292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.160790][T14292] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.266286][ T49] bridge_slave_1: left allmulticast mode [ 246.272486][ T49] bridge_slave_1: left promiscuous mode [ 246.278942][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.287185][ T49] bridge_slave_0: left allmulticast mode [ 246.293200][ T49] bridge_slave_0: left promiscuous mode [ 246.299177][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.342816][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.352527][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.362163][ T49] bond0 (unregistering): Released all slaves [ 246.375850][T14305] veth0: entered promiscuous mode [ 246.386393][T14304] veth0: left promiscuous mode [ 246.468310][ T49] hsr_slave_0: left promiscuous mode [ 246.473944][ T49] hsr_slave_1: left promiscuous mode [ 246.479728][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.487160][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.494725][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.502172][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.509225][T14303] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.524601][ T49] veth1_macvtap: left promiscuous mode [ 246.530421][ T49] veth0_macvtap: left promiscuous mode [ 246.536231][ T49] veth1_vlan: left promiscuous mode [ 246.541795][ T49] veth0_vlan: left promiscuous mode [ 246.554542][T13208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.604297][T14325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=14325 comm=syz.6.1697 [ 246.641510][ T49] team0 (unregistering): Port device team_slave_1 removed [ 246.652971][ T49] team0 (unregistering): Port device team_slave_0 removed [ 246.685602][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.692773][T14257] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.700061][T14257] bridge_slave_0: entered allmulticast mode [ 246.706753][T14257] bridge_slave_0: entered promiscuous mode [ 246.715640][T14329] macsec1: entered allmulticast mode [ 246.721036][T14329] veth1_macvtap: entered allmulticast mode [ 246.733547][T14331] veth1_macvtap (unregistering): left allmulticast mode [ 246.752294][T14257] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.762688][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.769901][T14257] bridge_slave_1: entered allmulticast mode [ 246.776528][T14257] bridge_slave_1: entered promiscuous mode [ 246.796198][T14257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.808547][T14257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.844584][T14257] team0: Port device team_slave_0 added [ 246.870436][T14257] team0: Port device team_slave_1 added [ 246.899873][T14257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.907706][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.934585][T14257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.947264][T14257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.954264][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.973069][T14338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.980703][T14257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.001067][T14326] xfrm0 speed is unknown, defaulting to 1000 [ 247.001975][T14338] EXT4-fs (loop1): 1 truncate cleaned up [ 247.012661][T14341] syzkaller0: entered promiscuous mode [ 247.017366][T14338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.019468][T14341] syzkaller0: entered allmulticast mode [ 247.112355][T14257] hsr_slave_0: entered promiscuous mode [ 247.118567][T14257] hsr_slave_1: entered promiscuous mode [ 247.124496][T14257] debugfs: 'hsr0' already exists in 'hsr' [ 247.130272][T14257] Cannot create hsr debugfs directory [ 247.147174][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.229591][T14351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.242492][T14351] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.276426][T13077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.285454][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.296410][T12979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.328674][T14357] __nla_validate_parse: 3 callbacks suppressed [ 247.328751][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1705'. [ 247.331852][T14356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.356941][T14356] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.395737][T14357] veth0: entered promiscuous mode [ 247.404133][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.423177][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.430560][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.438479][T14326] bridge_slave_0: entered allmulticast mode [ 247.444998][T14326] bridge_slave_0: entered promiscuous mode [ 247.454251][T14354] veth0: left promiscuous mode [ 247.460628][T14326] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.471861][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.486402][T14326] bridge_slave_1: entered allmulticast mode [ 247.492906][T14326] bridge_slave_1: entered promiscuous mode [ 247.510748][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.549101][T14326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.574662][T14326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.620469][T14326] team0: Port device team_slave_0 added [ 247.629199][T14326] team0: Port device team_slave_1 added [ 247.634226][T14380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.647769][T14376] syz_tun: entered allmulticast mode [ 247.650128][T14380] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.667749][T14376] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 247.676569][T14376] mroute: pending queue full, dropping entries [ 247.704951][T13208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.714305][T14375] syz_tun: left allmulticast mode [ 247.724553][T14326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.732158][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.758507][T14326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.770261][T14326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.780251][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.815687][T14364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.865401][T14326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.869517][T14392] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 247.921423][ T49] bridge_slave_1: left allmulticast mode [ 247.927085][ T49] bridge_slave_1: left promiscuous mode [ 247.937177][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.960591][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 247.960607][ T28] audit: type=1400 audit(1786184229.379:3375): avc: denied { write } for pid=14401 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.989416][ T49] bridge_slave_0: left allmulticast mode [ 248.001685][ T49] bridge_slave_0: left promiscuous mode [ 248.011984][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.023489][ T28] audit: type=1400 audit(1786184229.419:3376): avc: denied { connect } for pid=14402 comm="syz.8.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.084123][ T28] audit: type=1400 audit(1786184229.469:3377): avc: denied { write } for pid=14406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.114483][ T28] audit: type=1400 audit(1786184229.489:3378): avc: denied { write } for pid=14419 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.149050][ T28] audit: type=1400 audit(1786184229.569:3379): avc: denied { write } for pid=14423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.175166][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.186513][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.191477][ T28] audit: type=1400 audit(1786184229.609:3380): avc: denied { write } for pid=14434 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.227153][ T49] bond0 (unregistering): Released all slaves [ 248.264107][T14439] FAULT_INJECTION: forcing a failure. [ 248.264107][T14439] name failslab, interval 1, probability 0, space 0, times 0 [ 248.299108][T14326] hsr_slave_0: entered promiscuous mode [ 248.306694][T14439] CPU: 1 UID: 0 PID: 14439 Comm: syz.6.1720 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 248.306730][T14439] Tainted: [W]=WARN [ 248.306736][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.306745][T14439] Call Trace: [ 248.306751][T14439] [ 248.306757][T14439] __dump_stack+0x1d/0x30 [ 248.306839][T14439] dump_stack_lvl+0x95/0xd0 [ 248.306858][T14439] dump_stack+0x15/0x1b [ 248.306875][T14439] should_fail_ex+0x25e/0x270 [ 248.306900][T14439] ? xprt_alloc+0x351/0x4a0 [ 248.306931][T14439] should_failslab+0x8c/0xb0 [ 248.307011][T14439] __kmalloc_cache_noprof+0x7b/0x3d0 [ 248.307100][T14439] ? xprt_alloc+0x351/0x4a0 [ 248.307123][T14439] xprt_alloc+0x351/0x4a0 [ 248.307146][T14439] xs_setup_xprt+0x68/0x250 [ 248.307171][T14439] xs_setup_udp+0x3d/0x390 [ 248.307292][T14439] xprt_create_transport+0xf7/0x340 [ 248.307357][T14439] rpc_create+0x3c6/0x570 [ 248.307385][T14439] ? nfs_init_timeout_values+0x262/0x290 [ 248.307480][T14439] nfs_mount+0x3a1/0x510 [ 248.307511][T14439] nfs_try_get_tree+0x536/0x8e0 [ 248.307542][T14439] nfs_get_tree+0xb81/0xc60 [ 248.307561][T14439] vfs_get_tree+0x57/0x1d0 [ 248.307606][T14439] vfs_cmd_create+0x8a/0x140 [ 248.307632][T14439] vfs_fsconfig_locked+0x6f/0x210 [ 248.307660][T14439] __se_sys_fsconfig+0x671/0x7e0 [ 248.307690][T14439] __x64_sys_fsconfig+0x67/0x80 [ 248.307776][T14439] x64_sys_call+0xd6e/0x3020 [ 248.307864][T14439] do_syscall_64+0x136/0x3c0 [ 248.307970][T14439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.307989][T14439] RIP: 0033:0x7f70822de0d9 [ 248.308082][T14439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.308101][T14439] RSP: 002b:00007f7080d37028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 248.308122][T14439] RAX: ffffffffffffffda RBX: 00007f7082565fa0 RCX: 00007f70822de0d9 [ 248.308211][T14439] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 248.308223][T14439] RBP: 00007f7080d37090 R08: 0000000000000000 R09: 0000000000000000 [ 248.308235][T14439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.308247][T14439] R13: 00007f7082566038 R14: 00007f7082565fa0 R15: 00007fff02b83ee8 [ 248.308264][T14439] [ 248.534432][T14326] hsr_slave_1: entered promiscuous mode [ 248.548818][T14326] debugfs: 'hsr0' already exists in 'hsr' [ 248.565450][T14326] Cannot create hsr debugfs directory [ 248.591579][ T28] audit: type=1400 audit(1786184229.999:3381): avc: denied { write } for pid=14437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.603979][T14257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.646503][ T28] audit: type=1400 audit(1786184230.059:3382): avc: denied { write } for pid=14455 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.670222][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.685222][ T49] hsr_slave_0: left promiscuous mode [ 248.696254][ T49] hsr_slave_1: left promiscuous mode [ 248.702191][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.713913][T14463] set_capacity_and_notify: 7 callbacks suppressed [ 248.714001][T14463] loop8: detected capacity change from 0 to 4096 [ 248.717950][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.738170][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.746556][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.757352][T14463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.774546][ T49] veth1_macvtap: left promiscuous mode [ 248.781158][ T49] veth0_macvtap: left promiscuous mode [ 248.786716][ T49] veth1_vlan: left promiscuous mode [ 248.792193][ T49] veth0_vlan: left promiscuous mode [ 248.816602][ T28] audit: type=1400 audit(1786184230.229:3383): avc: denied { write } for pid=14464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.842034][T14477] loop6: detected capacity change from 0 to 4096 [ 248.864228][T14477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.866362][ T28] audit: type=1400 audit(1786184230.279:3384): avc: denied { write } for pid=14479 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.945363][ T49] team0 (unregistering): Port device team_slave_1 removed [ 248.956284][ T49] team0 (unregistering): Port device team_slave_0 removed [ 249.008740][T14458] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1721'. [ 249.021027][T14257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.038478][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.046293][T14257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.053876][T13208] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.075852][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.087129][T14470] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1722'. [ 249.109879][T12979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.114834][T14257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.136433][T14257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.153756][T14499] xfrm0 speed is unknown, defaulting to 1000 [ 249.217646][T14405] xfrm0 speed is unknown, defaulting to 1000 [ 249.267529][T14257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.282172][T14257] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.305888][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.312992][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.328570][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.335706][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.410360][T14533] Config c/1 of g1 needs at least one function. [ 249.416775][T14533] udc usbip-vudc.0: failed to start g1: -22 [ 249.427630][T14533] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 249.440685][T14533] UDC core: g1: couldn't find an available UDC or it's busy [ 249.535665][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.548545][T14555] loop6: detected capacity change from 0 to 512 [ 249.581452][T14555] FAT-fs (loop6): bogus logical sector size 0 [ 249.598577][T14555] FAT-fs (loop6): Can't find a valid FAT filesystem [ 249.620034][T14569] loop8: detected capacity change from 0 to 512 [ 249.659005][T14569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.671639][T14569] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.687529][T14405] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.704078][T14405] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.711689][T14405] bridge_slave_0: entered allmulticast mode [ 249.718401][T14405] bridge_slave_0: entered promiscuous mode [ 249.769795][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.790127][T14405] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.797362][T14405] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.804884][T14405] bridge_slave_1: entered allmulticast mode [ 249.819798][T14405] bridge_slave_1: entered promiscuous mode [ 249.888822][T14326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.930037][T14326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 249.982204][T14326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.007119][T14326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.015550][T14326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.026048][T14326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.034733][T14326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.046065][T14326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.265478][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.296801][T14405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.308170][T14257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.320365][T14405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.341237][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.353501][T14405] team0: Port device team_slave_0 added [ 250.360604][T14405] team0: Port device team_slave_1 added [ 250.376820][T14405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.384430][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.410468][T14405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.483430][T14405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.490609][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.518705][T14405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.540090][T14581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.621062][ T49] bridge_slave_1: left allmulticast mode [ 250.635710][ T49] bridge_slave_1: left promiscuous mode [ 250.656322][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.669156][ T49] bridge_slave_0: left allmulticast mode [ 250.672655][T14638] Config c/1 of g1 needs at least one function. [ 250.681185][ T49] bridge_slave_0: left promiscuous mode [ 250.688240][T14638] udc usbip-vudc.0: failed to start g1: -22 [ 250.688516][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.695536][T14638] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 250.718256][T14638] UDC core: g1: couldn't find an available UDC or it's busy [ 250.760614][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.773289][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.787084][ T49] bond0 (unregistering): Released all slaves [ 250.797407][T14405] hsr_slave_0: entered promiscuous mode [ 250.803525][T14405] hsr_slave_1: entered promiscuous mode [ 250.805227][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1736'. [ 250.809509][T14405] debugfs: 'hsr0' already exists in 'hsr' [ 250.820759][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1736'. [ 250.824369][T14405] Cannot create hsr debugfs directory [ 250.876882][T14326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.896908][T14257] veth0_vlan: entered promiscuous mode [ 250.922660][ T49] hsr_slave_0: left promiscuous mode [ 250.935069][ T49] hsr_slave_1: left promiscuous mode [ 250.942923][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.950920][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.958751][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.966252][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.976725][ T49] veth1_macvtap: left promiscuous mode [ 250.982250][ T49] veth0_macvtap: left promiscuous mode [ 250.987739][ T49] veth1_vlan: left promiscuous mode [ 250.993097][ T49] veth0_vlan: left promiscuous mode [ 251.045420][ T49] team0 (unregistering): Port device team_slave_1 removed [ 251.056080][ T49] team0 (unregistering): Port device team_slave_0 removed [ 251.101050][T14326] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.119941][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.127059][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.136584][T14257] veth1_vlan: entered promiscuous mode [ 251.144891][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.151932][ T6794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.180270][T14639] xfrm0 speed is unknown, defaulting to 1000 [ 251.209689][T14257] veth0_macvtap: entered promiscuous mode [ 251.239733][T14405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.264499][T14257] veth1_macvtap: entered promiscuous mode [ 251.284203][T14257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.300649][T14405] bond0: (slave netdevsim2): Releasing backup interface [ 251.313200][T14405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.337496][T14257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.418539][T14405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.438173][ T6794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.455671][ T5181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.482835][T14326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.498110][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.532789][T14405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.581718][ T49] bond0: (slave netdevsim2): Releasing backup interface [ 251.591879][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.608611][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 251.649430][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.698762][T14639] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.716040][T14639] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.737396][T14639] bridge_slave_0: entered allmulticast mode [ 251.752122][T14639] bridge_slave_0: entered promiscuous mode [ 251.764769][T14639] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.771939][T14639] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.779566][T14639] bridge_slave_1: entered allmulticast mode [ 251.787465][T14639] bridge_slave_1: entered promiscuous mode [ 251.802278][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.828408][T14708] loop3: detected capacity change from 0 to 512 [ 251.898018][T14708] EXT4-fs (loop3): 1 orphan inode deleted [ 251.908129][T14708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.921866][T14708] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.007175][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 254.042078][T14639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.067909][ T6794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.079003][T14639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.092816][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1739'. [ 254.103250][T14405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.116405][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.127894][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.155855][T14639] team0: Port device team_slave_0 added [ 254.167673][T14405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.179799][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.188667][T14639] team0: Port device team_slave_1 added [ 254.192216][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.209561][T14405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.218547][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.247444][T14639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.254445][T14639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.280823][T14639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.295658][T14326] veth0_vlan: entered promiscuous mode [ 254.315573][ T49] bridge_slave_1: left allmulticast mode [ 254.321409][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 254.321421][ T28] audit: type=1326 audit(1786184235.729:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.357969][ T49] bridge_slave_1: left promiscuous mode [ 254.360841][ T28] audit: type=1326 audit(1786184235.729:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.389659][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.392787][ T28] audit: type=1326 audit(1786184235.739:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.422938][ T28] audit: type=1326 audit(1786184235.739:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.448969][ T49] bridge_slave_0: left allmulticast mode [ 254.449633][ T28] audit: type=1326 audit(1786184235.739:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.454701][ T49] bridge_slave_0: left promiscuous mode [ 254.482013][ T28] audit: type=1326 audit(1786184235.739:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.512506][ T28] audit: type=1326 audit(1786184235.739:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.538801][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.564914][ T28] audit: type=1326 audit(1786184235.739:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.601118][ T28] audit: type=1400 audit(1786184235.739:3486): avc: denied { listen } for pid=14759 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.623631][ T28] audit: type=1326 audit(1786184235.739:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.6.1739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70822de0d9 code=0x7ffc0000 [ 254.661640][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.673121][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.685991][ T49] bond0 (unregistering): Released all slaves [ 254.694591][T14405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.709704][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.722197][T14639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.735032][T14639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.764028][T14639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.825282][ T49] hsr_slave_0: left promiscuous mode [ 254.835334][ T49] hsr_slave_1: left promiscuous mode [ 254.849570][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.867871][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.877443][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.896500][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.913343][ T49] veth1_vlan: left promiscuous mode [ 254.921899][ T49] veth0_vlan: left promiscuous mode [ 255.017161][ T49] team0 (unregistering): Port device team_slave_1 removed [ 255.042284][T14830] loop6: detected capacity change from 0 to 512 [ 255.049513][ T49] team0 (unregistering): Port device team_slave_0 removed [ 255.085855][T14830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.098514][T14830] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.172780][T14326] veth1_vlan: entered promiscuous mode [ 255.193204][T14639] hsr_slave_0: entered promiscuous mode [ 255.209868][T14639] hsr_slave_1: entered promiscuous mode [ 255.254949][T14326] veth0_macvtap: entered promiscuous mode [ 255.285121][T14405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.293697][T14326] veth1_macvtap: entered promiscuous mode [ 255.320300][T14405] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.333786][T14326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.350706][T14326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.367262][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.374323][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.385793][T14839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.418608][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.425675][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.468159][ T5181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.499230][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.508846][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.524822][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.555318][T14405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.584556][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 255.608331][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.656468][T14875] netlink: 'syz.5.1700': attribute type 16 has an invalid length. [ 255.678431][T14875] netlink: 'syz.5.1700': attribute type 17 has an invalid length. [ 255.698964][ T30] bond0: (slave netdevsim2): Releasing backup interface [ 255.723530][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.756605][T14875] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 255.782539][T14864] xfrm0 speed is unknown, defaulting to 1000 [ 255.797939][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.875350][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.906394][T14405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.984422][T14639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.999316][T14639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.008780][T14639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.017500][T14639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.059125][T14639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.065827][T14918] loop5: detected capacity change from 0 to 512 [ 256.081086][T14639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.095814][T14918] FAT-fs (loop5): bogus logical sector size 0 [ 256.102299][T14918] FAT-fs (loop5): Can't find a valid FAT filesystem [ 256.110623][ T30] bridge_slave_1: left allmulticast mode [ 256.117379][ T30] bridge_slave_1: left promiscuous mode [ 256.210227][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.219685][ T30] bridge_slave_0: left allmulticast mode [ 256.225412][ T30] bridge_slave_0: left promiscuous mode [ 256.231095][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.292162][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.708329][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.723871][ T30] bond0 (unregistering): Released all slaves [ 256.734934][T14639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.744013][T14639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.857330][T14405] veth0_vlan: entered promiscuous mode [ 256.951830][ T30] hsr_slave_0: left promiscuous mode [ 256.962875][ T30] hsr_slave_1: left promiscuous mode [ 256.979111][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.986643][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.994396][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.002158][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.020706][ T30] veth1_macvtap: left promiscuous mode [ 257.028429][ T30] veth0_macvtap: left promiscuous mode [ 257.036087][ T30] veth1_vlan: left promiscuous mode [ 257.041965][ T30] veth0_vlan: left promiscuous mode [ 257.058204][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.069547][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.107572][ T30] team0 (unregistering): Port device team_slave_1 removed [ 257.116819][ T30] team0 (unregistering): Port device team_slave_0 removed [ 257.136012][T14958] loop3: detected capacity change from 0 to 512 [ 257.145623][T14958] EXT4-fs: Ignoring removed nobh option [ 257.146594][T14959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34064 sclass=netlink_route_socket pid=14959 comm=syz.5.1748 [ 257.157311][T14958] EXT4-fs: Ignoring removed oldalloc option [ 257.191517][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 257.201606][T14958] EXT4-fs: old and new quota format mixing [ 257.226387][T14405] veth1_vlan: entered promiscuous mode [ 257.273997][T14864] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.281735][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.288960][T14864] bridge_slave_0: entered allmulticast mode [ 257.295480][T14864] bridge_slave_0: entered promiscuous mode [ 257.313864][T14864] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.321057][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.329635][T14864] bridge_slave_1: entered allmulticast mode [ 257.336143][T14864] bridge_slave_1: entered promiscuous mode [ 257.346836][T14405] veth0_macvtap: entered promiscuous mode [ 257.365019][T14639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.373221][T14405] veth1_macvtap: entered promiscuous mode [ 257.402172][T14405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.421694][T14864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.438126][T14405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.454813][T14864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.478191][T14639] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.496134][T14864] team0: Port device team_slave_0 added [ 257.522655][T14864] team0: Port device team_slave_1 added [ 257.556414][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.563536][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.586602][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.593705][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.615111][T14864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.622384][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.649024][T14864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.662473][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 257.670290][T14864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.678917][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.705845][T14864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.707557][T14987] netlink: 'syz.5.1751': attribute type 10 has an invalid length. [ 257.719167][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 257.738565][T12301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.747545][T12301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.768882][T14996] loop5: detected capacity change from 0 to 128 [ 257.777105][T14985] team1: entered promiscuous mode [ 257.788044][T14985] team1: entered allmulticast mode [ 257.793585][T14996] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.806939][T14985] 8021q: adding VLAN 0 to HW filter on device team1 [ 257.815525][T14996] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.854504][T14987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.865131][T14987] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 257.898630][T15009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1752'. [ 257.901527][T14864] hsr_slave_0: entered promiscuous mode [ 257.916467][T14864] hsr_slave_1: entered promiscuous mode [ 257.922618][T14864] debugfs: 'hsr0' already exists in 'hsr' [ 257.931956][T14864] Cannot create hsr debugfs directory [ 257.970814][T15014] loop3: detected capacity change from 0 to 1764 [ 257.999219][T15017] loop2: detected capacity change from 0 to 512 [ 258.028140][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.041387][T15017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.054407][T15017] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.119666][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.149609][T14639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.197024][T15036] loop3: detected capacity change from 0 to 512 [ 258.249945][T15036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.264172][T15036] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.275931][T14639] veth0_vlan: entered promiscuous mode [ 258.288147][T14639] veth1_vlan: entered promiscuous mode [ 258.318462][T14864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.333373][T14864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.348318][T14864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.360161][T14864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.370238][T14864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.379424][T14864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.387203][T14864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.401552][T14864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.410806][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.413748][T14639] veth0_macvtap: entered promiscuous mode [ 258.427584][T14639] veth1_macvtap: entered promiscuous mode [ 258.474817][T14639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.484544][T14639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.505519][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.568913][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.612323][T14864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.639276][T15101] dvmrp0: entered allmulticast mode [ 258.649466][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.677847][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.700490][T15100] loop5: detected capacity change from 0 to 256 [ 258.708286][T14864] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.721433][T15100] FAT-fs (loop5): bogus logical sector size 65529 [ 258.729380][T12301] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.736452][T12301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.745945][T15100] FAT-fs (loop5): Can't find a valid FAT filesystem [ 258.762942][T12301] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.770044][T12301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.840814][T15100] loop5: detected capacity change from 0 to 1024 [ 258.850527][T15109] loop0: detected capacity change from 0 to 512 [ 258.884790][T15129] netlink: 'syz.3.1763': attribute type 2 has an invalid length. [ 258.916214][T15109] EXT4-fs: quotafile must be on filesystem root [ 258.927940][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'. [ 258.948308][T15109] xt_cgroup: invalid path, errno=-2 [ 259.101877][T15147] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 259.110797][T14864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.191488][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.255728][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 259.362116][T15197] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.391678][T15206] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1771'. [ 259.415490][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.476872][T14864] veth0_vlan: entered promiscuous mode [ 259.483075][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 259.483088][ T28] audit: type=1400 audit(1786184240.899:3548): avc: denied { write } for pid=15190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.517896][T14864] veth1_vlan: entered promiscuous mode [ 259.528549][T15221] netlink: 'syz.5.1773': attribute type 2 has an invalid length. [ 259.538346][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1773'. [ 259.546254][T15182] xfrm0 speed is unknown, defaulting to 1000 [ 259.564217][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.575599][ T28] audit: type=1400 audit(1786184240.989:3549): avc: denied { write } for pid=15222 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.620561][T14864] veth0_macvtap: entered promiscuous mode [ 259.637703][T14864] veth1_macvtap: entered promiscuous mode [ 259.666218][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.713947][T14864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.751958][T14864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.858427][ T49] bridge_slave_1: left allmulticast mode [ 259.870665][ T49] bridge_slave_1: left promiscuous mode [ 259.883869][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.901309][ T49] bridge_slave_0: left allmulticast mode [ 259.911925][ T49] bridge_slave_0: left promiscuous mode [ 259.917698][ T28] audit: type=1400 audit(1786184241.329:3550): avc: denied { write } for pid=15229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.944686][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.973630][ T28] audit: type=1400 audit(1786184241.389:3551): avc: denied { write } for pid=15244 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.078439][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.102085][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.114308][ T49] bond0 (unregistering): Released all slaves [ 260.139431][T15226] set_capacity_and_notify: 1 callbacks suppressed [ 260.139456][T15226] loop5: detected capacity change from 0 to 1024 [ 260.155385][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 260.181664][ T28] audit: type=1400 audit(1786184241.599:3552): avc: denied { write } for pid=14639 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.197353][T15226] EXT4-fs: Ignoring removed bh option [ 260.213250][T15226] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 260.231246][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.239368][ T28] audit: type=1400 audit(1786184241.599:3553): avc: denied { write } for pid=14639 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.277488][ T28] audit: type=1400 audit(1786184241.599:3554): avc: denied { write } for pid=14639 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.300194][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.360617][ T28] audit: type=1400 audit(1786184241.599:3555): avc: denied { write } for pid=14639 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.382777][ T28] audit: type=1400 audit(1786184241.599:3556): avc: denied { write } for pid=14639 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.404840][ T28] audit: type=1400 audit(1786184241.599:3557): avc: denied { write } for pid=14639 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.436206][T15182] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.443685][T15182] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.468019][T15182] bridge_slave_0: entered allmulticast mode [ 260.474728][T15182] bridge_slave_0: entered promiscuous mode [ 260.485064][ T49] hsr_slave_0: left promiscuous mode [ 260.500802][ T49] hsr_slave_1: left promiscuous mode [ 260.513701][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.522416][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.531778][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.539325][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.550104][ T49] veth1_macvtap: left promiscuous mode [ 260.555583][ T49] veth0_macvtap: left promiscuous mode [ 260.561197][ T49] veth1_vlan: left promiscuous mode [ 260.566411][ T49] veth0_vlan: left promiscuous mode [ 260.654377][ T49] team0 (unregistering): Port device team_slave_1 removed [ 260.665978][ T49] team0 (unregistering): Port device team_slave_0 removed [ 260.701805][T15182] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.708939][T15182] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.716095][T15182] bridge_slave_1: entered allmulticast mode [ 260.722626][T15182] bridge_slave_1: entered promiscuous mode [ 260.729129][T15257] batadv_slave_1: entered promiscuous mode [ 260.741126][T15277] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1776'. [ 260.774727][T15182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.784231][T15254] batadv_slave_1: left promiscuous mode [ 260.794044][T15182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.816398][T15182] team0: Port device team_slave_0 added [ 260.823105][T15182] team0: Port device team_slave_1 added [ 260.875924][T15182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.892298][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.921177][T15182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.932712][T15182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.939922][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.971592][T15182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.997295][T15295] loop3: detected capacity change from 0 to 512 [ 261.019722][T15295] FAT-fs (loop3): bogus logical sector size 0 [ 261.034814][T15295] FAT-fs (loop3): Can't find a valid FAT filesystem [ 261.043968][T15297] bridge_slave_0: left allmulticast mode [ 261.059398][T15297] bridge_slave_0: left promiscuous mode [ 261.073211][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.091014][T15297] bridge_slave_1: left allmulticast mode [ 261.096738][T15297] bridge_slave_1: left promiscuous mode [ 261.102852][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.112662][T15297] bond0: (slave bond_slave_0): Releasing backup interface [ 261.124186][T15297] bond0: (slave bond_slave_1): Releasing backup interface [ 261.136166][T15297] team0: Port device team_slave_0 removed [ 261.145152][T15297] team0: Port device team_slave_1 removed [ 261.151958][T15297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.159722][T15297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.168277][T15297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.175735][T15297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.185023][T15297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.331599][ T6794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.346503][T15273] xfrm0 speed is unknown, defaulting to 1000 [ 261.352999][ T6794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.611904][T15296] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1784'. [ 261.675209][T15182] hsr_slave_0: entered promiscuous mode [ 261.682659][T15182] hsr_slave_1: entered promiscuous mode [ 261.688723][T15182] debugfs: 'hsr0' already exists in 'hsr' [ 261.694602][T15182] Cannot create hsr debugfs directory [ 261.705748][T15273] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.717571][T15273] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.725036][T15273] bridge_slave_0: entered allmulticast mode [ 261.731659][T15273] bridge_slave_0: entered promiscuous mode [ 261.752061][T15273] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.759352][T15273] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.766575][T15273] bridge_slave_1: entered allmulticast mode [ 261.778289][T15273] bridge_slave_1: entered promiscuous mode [ 261.798319][T15273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.809415][T15273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.827981][T15273] team0: Port device team_slave_0 added [ 261.834792][T15273] team0: Port device team_slave_1 added [ 261.858964][T15319] FAULT_INJECTION: forcing a failure. [ 261.858964][T15319] name failslab, interval 1, probability 0, space 0, times 0 [ 261.874959][T15319] CPU: 0 UID: 0 PID: 15319 Comm: syz.4.1788 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 261.875017][T15319] Tainted: [W]=WARN [ 261.875023][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.875062][T15319] Call Trace: [ 261.875069][T15319] [ 261.875077][T15319] __dump_stack+0x1d/0x30 [ 261.875098][T15319] dump_stack_lvl+0x95/0xd0 [ 261.875114][T15319] dump_stack+0x15/0x1b [ 261.875128][T15319] should_fail_ex+0x25e/0x270 [ 261.875227][T15319] should_failslab+0x8c/0xb0 [ 261.875247][T15319] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 261.875265][T15319] ? __alloc_skb+0x2db/0x6f0 [ 261.875289][T15319] ? __alloc_skb+0x2db/0x6f0 [ 261.875372][T15319] __alloc_skb+0x2db/0x6f0 [ 261.875395][T15319] ? __alloc_skb+0x205/0x6f0 [ 261.875418][T15319] rtmsg_ifinfo_build_skb+0x5b/0x1b0 [ 261.875436][T15319] ? __schedule+0x799/0xd10 [ 261.875531][T15319] ? terminate_walk+0x1d5/0x200 [ 261.875623][T15319] ? __pfx_rtnetlink_event+0x10/0x10 [ 261.875642][T15319] rtnetlink_event+0x18c/0x200 [ 261.875709][T15319] raw_notifier_call_chain+0x72/0x1a0 [ 261.875726][T15319] ? _raw_spin_lock+0x52/0xa0 [ 261.875795][T15319] netif_change_tx_queue_len+0x130/0x210 [ 261.875879][T15319] dev_change_tx_queue_len+0xb8/0x170 [ 261.875901][T15319] dev_ifsioc+0x1ae/0xfc0 [ 261.875918][T15319] ? __mutex_lock_slowpath+0xa/0x10 [ 261.876009][T15319] ? mutex_lock+0x88/0x90 [ 261.876026][T15319] dev_ioctl+0x709/0x960 [ 261.876043][T15319] sock_do_ioctl+0x1aa/0x230 [ 261.876063][T15319] sock_ioctl+0x439/0x610 [ 261.876190][T15319] ? mutex_lock+0x57/0x90 [ 261.876207][T15319] ? __pfx_sock_ioctl+0x10/0x10 [ 261.876224][T15319] __se_sys_ioctl+0xce/0x140 [ 261.876241][T15319] __x64_sys_ioctl+0x43/0x50 [ 261.876292][T15319] x64_sys_call+0x1563/0x3020 [ 261.876311][T15319] do_syscall_64+0x136/0x3c0 [ 261.876333][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.876384][T15319] RIP: 0033:0x7f807846e0d9 [ 261.876397][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.876412][T15319] RSP: 002b:00007f8076ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.876462][T15319] RAX: ffffffffffffffda RBX: 00007f80786f6090 RCX: 00007f807846e0d9 [ 261.876474][T15319] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000006 [ 261.876485][T15319] RBP: 00007f8076ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.876496][T15319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.876507][T15319] R13: 00007f80786f6128 R14: 00007f80786f6090 R15: 00007ffcab128d48 [ 261.876553][T15319] [ 261.884614][T15273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.143738][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.170160][T15273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.189121][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.202040][T15273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.209115][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.235439][T15273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.255860][T15327] FAULT_INJECTION: forcing a failure. [ 262.255860][T15327] name failslab, interval 1, probability 0, space 0, times 0 [ 262.268731][T15327] CPU: 1 UID: 0 PID: 15327 Comm: syz.3.1792 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 262.268760][T15327] Tainted: [W]=WARN [ 262.268766][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.268775][T15327] Call Trace: [ 262.268781][T15327] [ 262.268789][T15327] __dump_stack+0x1d/0x30 [ 262.268886][T15327] dump_stack_lvl+0x95/0xd0 [ 262.268912][T15327] dump_stack+0x15/0x1b [ 262.268938][T15327] should_fail_ex+0x25e/0x270 [ 262.268963][T15327] should_failslab+0x8c/0xb0 [ 262.268984][T15327] __kmalloc_noprof+0xd4/0x4a0 [ 262.269077][T15327] ? bm_init+0x70/0x720 [ 262.269097][T15327] ? bm_init+0x70/0x720 [ 262.269186][T15327] bm_init+0x70/0x720 [ 262.269203][T15327] ? pcpu_block_update_hint_alloc+0x637/0x650 [ 262.269225][T15327] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 262.269381][T15327] textsearch_prepare+0x195/0x200 [ 262.269403][T15327] string_mt_check+0x122/0x160 [ 262.269427][T15327] xt_check_match+0x3b7/0x5e0 [ 262.269472][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.269514][T15327] ? xt_find_match+0x1e4/0x240 [ 262.269556][T15327] translate_table+0xbd5/0x1210 [ 262.269667][T15327] ? _copy_from_user+0x89/0xb0 [ 262.269687][T15327] do_ip6t_set_ctl+0x73d/0x990 [ 262.269729][T15327] nf_setsockopt+0x199/0x1b0 [ 262.269758][T15327] ipv6_setsockopt+0x11a/0x130 [ 262.269784][T15327] udpv6_setsockopt+0x89/0xa0 [ 262.269846][T15327] sock_common_setsockopt+0x69/0x80 [ 262.269943][T15327] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.269966][T15327] __sys_setsockopt+0x184/0x200 [ 262.270015][T15327] __x64_sys_setsockopt+0x64/0x80 [ 262.270059][T15327] x64_sys_call+0x2327/0x3020 [ 262.270149][T15327] do_syscall_64+0x136/0x3c0 [ 262.270206][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.270223][T15327] RIP: 0033:0x7f7f862be0d9 [ 262.270238][T15327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.270255][T15327] RSP: 002b:00007f7f84d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.270337][T15327] RAX: ffffffffffffffda RBX: 00007f7f86545fa0 RCX: 00007f7f862be0d9 [ 262.270350][T15327] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 262.270439][T15327] RBP: 00007f7f84d17090 R08: 00000000000013f8 R09: 0000000000000000 [ 262.270452][T15327] R10: 0000200000001400 R11: 0000000000000246 R12: 0000000000000001 [ 262.270464][T15327] R13: 00007f7f86546038 R14: 00007f7f86545fa0 R15: 00007ffeaafab8d8 [ 262.270482][T15327] [ 262.541354][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 262.554298][T15273] hsr_slave_0: entered promiscuous mode [ 262.560551][T15273] hsr_slave_1: entered promiscuous mode [ 262.572588][T15273] debugfs: 'hsr0' already exists in 'hsr' [ 262.578636][T15273] Cannot create hsr debugfs directory [ 262.637153][T15336] veth0: entered promiscuous mode [ 262.666385][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.683377][T15329] bond0: entered promiscuous mode [ 262.688676][T15329] bond_slave_0: entered promiscuous mode [ 262.694453][T15329] bond_slave_1: entered promiscuous mode [ 262.717110][T15328] bond0: left promiscuous mode [ 262.722795][T15328] bond_slave_0: left promiscuous mode [ 262.728280][T15328] bond_slave_1: left promiscuous mode [ 262.733891][T15328] veth0: left promiscuous mode [ 262.740959][T15344] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1798'. [ 262.767193][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.798872][T15350] loop3: detected capacity change from 0 to 512 [ 262.818319][T15350] FAT-fs (loop3): bogus logical sector size 0 [ 262.824894][T15350] FAT-fs (loop3): Can't find a valid FAT filesystem [ 262.973851][ T49] bridge_slave_1: left allmulticast mode [ 262.976686][T15355] loop5: detected capacity change from 0 to 512 [ 262.988642][ T49] bridge_slave_1: left promiscuous mode [ 262.994166][T15355] FAT-fs (loop5): bogus logical sector size 0 [ 262.994451][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.001081][T15355] FAT-fs (loop5): Can't find a valid FAT filesystem [ 263.142945][ T49] bridge_slave_0: left allmulticast mode [ 263.171342][ T49] bridge_slave_0: left promiscuous mode [ 263.317618][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.686113][T15344] loop4: detected capacity change from 0 to 4096 [ 263.944858][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.954777][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.964749][ T49] bond0 (unregistering): Released all slaves [ 263.974378][T15366] netlink: 'syz.4.1802': attribute type 2 has an invalid length. [ 264.055233][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 264.154611][ T49] hsr_slave_0: left promiscuous mode [ 264.160322][T15380] netlink: 'syz.3.1807': attribute type 16 has an invalid length. [ 264.168437][T15380] netlink: 'syz.3.1807': attribute type 17 has an invalid length. [ 264.168656][ T49] hsr_slave_1: left promiscuous mode [ 264.197417][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.207086][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.215500][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.229633][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.250844][ T49] veth1_macvtap: left promiscuous mode [ 264.260789][ T49] veth0_macvtap: left promiscuous mode [ 264.269370][ T49] veth1_vlan: left promiscuous mode [ 264.277872][ T49] veth0_vlan: left promiscuous mode [ 264.357521][ T49] team0 (unregistering): Port device team_slave_1 removed [ 264.368431][ T49] team0 (unregistering): Port device team_slave_0 removed [ 264.414327][T15380] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 264.514839][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 264.550179][T15386] loop5: detected capacity change from 0 to 8192 [ 264.587626][T15386] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.616917][T15403] batadv_slave_1: entered promiscuous mode [ 264.630196][T15402] batadv_slave_1: left promiscuous mode [ 264.703743][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 264.703755][ T28] audit: type=1400 audit(1786184246.119:3569): avc: denied { write } for pid=15405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.766914][ T28] audit: type=1400 audit(1786184246.179:3570): avc: denied { write } for pid=15425 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.806989][T15429] netlink: 'syz.4.1819': attribute type 39 has an invalid length. [ 264.840596][T15273] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 264.853146][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.863643][T15273] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 264.879973][ T28] audit: type=1400 audit(1786184246.299:3571): avc: denied { write } for pid=15427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.904782][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.943750][ T28] audit: type=1400 audit(1786184246.339:3572): avc: denied { write } for pid=15441 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.982216][T15447] netlink: 'syz.3.1820': attribute type 16 has an invalid length. [ 264.999075][T15447] netlink: 'syz.3.1820': attribute type 17 has an invalid length. [ 265.008822][T15447] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 265.032562][T15273] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.048693][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.059702][T15273] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.088902][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.093232][ T28] audit: type=1400 audit(1786184246.509:3573): avc: denied { setattr } for pid=15454 comm="syz.3.1821" name="" dev="pipefs" ino=45875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 265.105936][T15182] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 265.148977][T15182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.158065][ T28] audit: type=1400 audit(1786184246.549:3574): avc: denied { write } for pid=15448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.194195][T15182] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 265.216876][T15182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.233373][T15182] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 265.247948][ T28] audit: type=1400 audit(1786184246.569:3575): avc: denied { write } for pid=15461 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.279369][T15182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.316986][T15182] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 265.330569][T15182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.355720][T15484] batadv_slave_1: entered promiscuous mode [ 265.363320][ T28] audit: type=1400 audit(1786184246.779:3576): avc: denied { write } for pid=15471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.385188][T15182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.394446][T15483] batadv_slave_1: left promiscuous mode [ 265.409332][ T28] audit: type=1400 audit(1786184246.829:3577): avc: denied { write } for pid=15496 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.447629][ T3017] 8021q: adding VLAN 0 to HW filter on device eth17 [ 265.456648][T15182] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.488610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.495724][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.508210][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.515282][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.533443][T15273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.562154][T15273] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.573917][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.580999][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.597247][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.604388][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.626610][T15273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.683054][T15273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.689443][ T28] audit: type=1400 audit(1786184247.109:3578): avc: denied { write } for pid=15501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.059187][T15182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.204780][ T3017] 8021q: adding VLAN 0 to HW filter on device eth18 [ 266.344713][T15561] batadv_slave_1: entered promiscuous mode [ 266.375255][T15569] loop3: detected capacity change from 0 to 512 [ 266.388928][T15569] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1836: corrupted in-inode xattr: e_name out of bounds [ 266.408639][T15569] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.409712][T15569] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1836: couldn't read orphan inode 15 (err -117) [ 266.418887][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 266.418903][ C0] EXT4-fs (loop3): initial error at time 1786184247: ext4_iget_extra_inode:5180: inode 15 [ 266.418938][ C0] EXT4-fs (loop3): last error at time 1786184247: ext4_iget_extra_inode:5180: inode 15 [ 266.457090][T15569] loop3: lost filesystem error report for type 5 error -117 [ 266.458767][T15569] EXT4-fs mount: 10 callbacks suppressed [ 266.458849][T15569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.486295][T15561] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1835'. [ 266.501192][T15273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.509306][ T3017] 8021q: adding VLAN 0 to HW filter on device eth19 [ 266.537505][T15559] batadv_slave_1: left promiscuous mode [ 266.550760][T15182] veth0_vlan: entered promiscuous mode [ 266.558773][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.580953][T15182] veth1_vlan: entered promiscuous mode [ 266.630949][T15182] veth0_macvtap: entered promiscuous mode [ 266.637410][T15601] serial 00:03: in use; can't configure [ 266.656997][T15182] veth1_macvtap: entered promiscuous mode [ 266.681384][T15601] serial 00:03: in use; can't configure [ 266.698067][T15182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.733112][T15182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.839825][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.869455][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.900076][ T3017] 8021q: adding VLAN 0 to HW filter on device eth20 [ 266.931785][T15273] veth0_vlan: entered promiscuous mode [ 266.952513][T15636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.955114][T15273] veth1_vlan: entered promiscuous mode [ 266.985680][T15648] loop3: detected capacity change from 0 to 512 [ 266.996974][T15636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.017540][T15648] EXT4-fs (loop3): Invalid log block size: 20 [ 267.021258][T15273] veth0_macvtap: entered promiscuous mode [ 267.057854][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.100740][T15273] veth1_macvtap: entered promiscuous mode [ 267.119481][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.133597][T15657] batadv_slave_1: entered promiscuous mode [ 267.153392][T15273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.175962][T15273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.208126][T15657] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 267.218421][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.262512][T15656] batadv_slave_1: left promiscuous mode [ 267.280587][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.300654][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.349283][T12301] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.536935][T15688] netlink: 'syz.7.1851': attribute type 16 has an invalid length. [ 267.570191][T15688] netlink: 'syz.7.1851': attribute type 17 has an invalid length. [ 267.601539][T15688] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 267.733894][T10115] IPVS: starting estimator thread 0... [ 267.783902][T15717] loop5: detected capacity change from 0 to 512 [ 267.796197][T15722] erspan0: entered promiscuous mode [ 267.816045][T15717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.827944][T15716] IPVS: using max 2544 ests per chain, 127200 per kthread [ 267.837378][T15725] batadv_slave_1: entered promiscuous mode [ 267.853372][T15717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.890539][T15717] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.914944][T14326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.925496][T15724] batadv_slave_1: left promiscuous mode [ 267.933776][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 267.987334][T15742] loop7: detected capacity change from 0 to 512 [ 268.032376][T15749] Config c/1 of g1 needs at least one function. [ 268.039223][T15742] EXT4-fs: Ignoring removed nobh option [ 268.054285][T15749] udc usbip-vudc.0: failed to start g1: -22 [ 268.076966][T15757] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1862'. [ 268.087867][T15742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.091049][T15749] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 268.117354][T15742] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.141120][T15749] UDC core: g1: couldn't find an available UDC or it's busy [ 268.156526][T15766] loop3: detected capacity change from 0 to 128 [ 268.276957][T15775] syz_tun: entered allmulticast mode [ 268.286145][T15776] netlink: 'syz.9.1871': attribute type 10 has an invalid length. [ 268.322311][T15776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.344183][T15776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.394850][T15776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.413761][T15776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.432054][T15799] netlink: 'syz.3.1875': attribute type 10 has an invalid length. [ 268.612218][T15273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.659728][T15799] team0: Device wg2 is of different type [ 268.742062][T15804] syz_tun: entered allmulticast mode [ 268.747538][T15772] syz_tun: left allmulticast mode [ 268.756996][T15795] syz_tun: left allmulticast mode [ 268.768163][T15834] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.1877'. [ 268.826110][T15848] FAULT_INJECTION: forcing a failure. [ 268.826110][T15848] name failslab, interval 1, probability 0, space 0, times 0 [ 268.853147][T15848] CPU: 0 UID: 0 PID: 15848 Comm: syz.4.1879 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 268.853193][T15848] Tainted: [W]=WARN [ 268.853199][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.853211][T15848] Call Trace: [ 268.853217][T15848] [ 268.853270][T15848] __dump_stack+0x1d/0x30 [ 268.853321][T15848] dump_stack_lvl+0x95/0xd0 [ 268.853338][T15848] dump_stack+0x15/0x1b [ 268.853355][T15848] should_fail_ex+0x25e/0x270 [ 268.853380][T15848] should_failslab+0x8c/0xb0 [ 268.853402][T15848] __kmalloc_noprof+0xd4/0x4a0 [ 268.853450][T15848] ? security_sk_alloc+0x52/0x120 [ 268.853514][T15848] ? security_sk_alloc+0x52/0x120 [ 268.853576][T15848] ? kmem_cache_alloc_noprof+0x1f1/0x3c0 [ 268.853593][T15848] security_sk_alloc+0x52/0x120 [ 268.853614][T15848] sk_prot_alloc+0xc2/0x180 [ 268.853645][T15848] sk_alloc+0x34/0x3e0 [ 268.853668][T15848] inet_create+0x3cb/0x790 [ 268.853690][T15848] __sock_create+0x2e5/0x580 [ 268.853718][T15848] sock_create_kern+0x38/0x50 [ 268.853743][T15848] smc_create+0x3ea/0x480 [ 268.853776][T15848] __sock_create+0x2e5/0x580 [ 268.853893][T15848] __sys_socket+0xaf/0x180 [ 268.853917][T15848] __x64_sys_socket+0x3f/0x50 [ 268.853939][T15848] x64_sys_call+0x11fc/0x3020 [ 268.853974][T15848] do_syscall_64+0x136/0x3c0 [ 268.854073][T15848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.854093][T15848] RIP: 0033:0x7f807846e0d9 [ 268.854109][T15848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.854127][T15848] RSP: 002b:00007f8076ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 268.854147][T15848] RAX: ffffffffffffffda RBX: 00007f80786f5fa0 RCX: 00007f807846e0d9 [ 268.854200][T15848] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 268.854211][T15848] RBP: 00007f8076ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 268.854222][T15848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.854232][T15848] R13: 00007f80786f6038 R14: 00007f80786f5fa0 R15: 00007ffcab128d48 [ 268.854249][T15848] [ 269.071843][T15850] syzkaller0: entered promiscuous mode [ 269.078004][T15850] syzkaller0: entered allmulticast mode [ 269.152272][T15858] netlink: 'syz.3.1882': attribute type 10 has an invalid length. [ 269.183288][T15858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.216624][T15886] loop3: detected capacity change from 0 to 128 [ 269.219371][T15858] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 269.245755][T15891] FAULT_INJECTION: forcing a failure. [ 269.245755][T15891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.272007][T15889] batadv_slave_1: entered promiscuous mode [ 269.283476][T15885] batadv_slave_1: entered promiscuous mode [ 269.283647][T15886] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.303341][T15873] batadv_slave_1: left promiscuous mode [ 269.303970][T15891] CPU: 0 UID: 0 PID: 15891 Comm: syz.4.1890 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 269.304000][T15891] Tainted: [W]=WARN [ 269.304006][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.304017][T15891] Call Trace: [ 269.304024][T15891] [ 269.304032][T15891] __dump_stack+0x1d/0x30 [ 269.304106][T15891] dump_stack_lvl+0x95/0xd0 [ 269.304124][T15891] dump_stack+0x15/0x1b [ 269.304141][T15891] should_fail_ex+0x25e/0x270 [ 269.304218][T15891] should_fail+0xb/0x20 [ 269.304239][T15891] should_fail_usercopy+0x1a/0x20 [ 269.304265][T15891] _copy_to_user+0x20/0xa0 [ 269.304364][T15891] msr_read+0xc4/0x150 [ 269.304449][T15891] ? __pfx_msr_read+0x10/0x10 [ 269.304470][T15891] vfs_read+0x18e/0x7c0 [ 269.304487][T15891] ? __rcu_read_unlock+0x4e/0x70 [ 269.304558][T15891] ? __fget_files+0x184/0x1c0 [ 269.304583][T15891] ksys_read+0xdc/0x1a0 [ 269.304600][T15891] __x64_sys_read+0x40/0x50 [ 269.304618][T15891] x64_sys_call+0x2886/0x3020 [ 269.304639][T15891] do_syscall_64+0x136/0x3c0 [ 269.304747][T15891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.304767][T15891] RIP: 0033:0x7f807846e0d9 [ 269.304782][T15891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.304799][T15891] RSP: 002b:00007f8076ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.304824][T15891] RAX: ffffffffffffffda RBX: 00007f80786f5fa0 RCX: 00007f807846e0d9 [ 269.304909][T15891] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 269.304926][T15891] RBP: 00007f8076ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.305005][T15891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.305017][T15891] R13: 00007f80786f6038 R14: 00007f80786f5fa0 R15: 00007ffcab128d48 [ 269.305035][T15891] [ 269.305267][T15886] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.457614][T15911] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1891'. [ 269.557100][T15882] batadv_slave_1: left promiscuous mode [ 269.603596][T15915] netlink: 'syz.5.1893': attribute type 2 has an invalid length. [ 269.614605][T15921] vlan2: entered promiscuous mode [ 269.623029][T15915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1893'. [ 269.630774][T15921] bridge0: entered promiscuous mode [ 269.639106][T14257] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.686604][T15931] loop3: detected capacity change from 0 to 512 [ 269.698954][T15931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.705650][T15931] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.713332][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 269.713345][ T28] audit: type=1400 audit(1786184251.129:3617): avc: denied { write } for pid=15918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.762125][T15931] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 269.765741][ T28] audit: type=1400 audit(1786184251.179:3618): avc: denied { write } for pid=15942 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.794810][T15931] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 269.804059][T15931] EXT4-fs (loop3): 1 truncate cleaned up [ 269.810313][T15931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.824710][T15930] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.1897: lblock 0 mapped to illegal pblock 4 (length 1) [ 269.841142][ T28] audit: type=1400 audit(1786184251.239:3619): avc: denied { write } for pid=15929 comm="syz.3.1897" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.863091][T15940] loop9: detected capacity change from 0 to 8192 [ 269.869797][T15940] msdos: Unknown parameter '}80T൥ql0d#Snjvu#?ڠQsxyԒޥe\䯠P3w̝lg iv8zY>ųE1fv @Hlh(蛶b 6J' ]' [ 269.888521][ T28] audit: type=1400 audit(1786184251.239:3620): avc: denied { create } for pid=15929 comm="syz.3.1897" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 269.931172][T15930] EXT4-fs (loop3): Remounting filesystem read-only [ 269.949661][ T28] audit: type=1400 audit(1786184251.359:3621): avc: denied { write } for pid=15929 comm="syz.3.1897" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.005728][ T28] audit: type=1400 audit(1786184251.419:3622): avc: denied { bind } for pid=15939 comm="syz.7.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 270.035693][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.040999][ T28] audit: type=1400 audit(1786184251.449:3623): avc: denied { read } for pid=15927 comm="syz.9.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 270.082252][ T28] audit: type=1326 audit(1786184251.479:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15955 comm="syz.5.1902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f4a1e0d9 code=0x7fc00000 [ 270.203892][T15981] loop9: detected capacity change from 0 to 512 [ 270.212558][T15977] loop5: detected capacity change from 0 to 512 [ 270.212629][T15981] ================================================================== [ 270.212652][T15981] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 270.212684][T15981] [ 270.212691][T15981] write to 0xffffffff86c6a758 of 8 bytes by task 15977 on cpu 0: [ 270.212706][T15981] data_alloc+0x308/0x380 [ 270.212723][T15981] prb_reserve+0x8e3/0xaf0 [ 270.212742][T15981] vprintk_store+0x54a/0x910 [ 270.212763][T15981] vprintk_emit+0x1a4/0x600 [ 270.261381][T15981] vprintk_default+0x26/0x30 [ 270.265978][T15981] vprintk+0x1d/0x30 [ 270.269876][T15981] _printk+0x79/0xa0 [ 270.273773][T15981] set_capacity_and_notify+0x1d5/0x230 [ 270.279240][T15981] loop_set_size+0x2e/0x70 [ 270.283666][T15981] loop_configure+0x826/0x9c0 [ 270.288341][T15981] lo_ioctl+0x1e1/0x1390 [ 270.292587][T15981] blkdev_ioctl+0x387/0x460 [ 270.297100][T15981] __se_sys_ioctl+0xce/0x140 [ 270.301698][T15981] __x64_sys_ioctl+0x43/0x50 [ 270.306288][T15981] x64_sys_call+0x1563/0x3020 [ 270.310970][T15981] do_syscall_64+0x136/0x3c0 [ 270.315567][T15981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.321463][T15981] [ 270.323783][T15981] read to 0xffffffff86c6a758 of 8 bytes by task 15981 on cpu 1: [ 270.331414][T15981] prb_reserve+0x21a/0xaf0 [ 270.335832][T15981] vprintk_store+0x54a/0x910 [ 270.340429][T15981] vprintk_emit+0x1a4/0x600 [ 270.344936][T15981] vprintk_default+0x26/0x30 [ 270.349537][T15981] vprintk+0x1d/0x30 [ 270.353433][T15981] _printk+0x79/0xa0 [ 270.357327][T15981] __ext4_msg+0x1aa/0x1c0 [ 270.361662][T15981] ext4_check_feature_compatibility+0x5ea/0x5f0 [ 270.367913][T15981] ext4_fill_super+0x1c77/0x3760 [ 270.372860][T15981] get_tree_bdev_flags+0x291/0x300 [ 270.377972][T15981] get_tree_bdev+0x1f/0x30 [ 270.382390][T15981] ext4_get_tree+0x1c/0x30 [ 270.386810][T15981] vfs_get_tree+0x57/0x1d0 [ 270.391226][T15981] do_new_mount+0x288/0x8d0 [ 270.395727][T15981] path_mount+0x4ad/0xb90 [ 270.400065][T15981] __se_sys_mount+0x28c/0x2e0 [ 270.404742][T15981] __x64_sys_mount+0x67/0x80 [ 270.409327][T15981] x64_sys_call+0x2d61/0x3020 [ 270.414007][T15981] do_syscall_64+0x136/0x3c0 [ 270.418603][T15981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.424503][T15981] [ 270.426822][T15981] value changed: 0xfffffffffffd1a30 -> 0x00000000000774c8 [ 270.433931][T15981] [ 270.436244][T15981] Reported by Kernel Concurrency Sanitizer on: [ 270.442386][T15981] CPU: 1 UID: 0 PID: 15981 Comm: syz.9.1907 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 270.453317][T15981] Tainted: [W]=WARN [ 270.457109][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.467156][T15981] ================================================================== [ 270.212506][T15981] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 270.488314][ T28] audit: type=1400 audit(1786184251.629:3625): avc: denied { write } for pid=15950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.501332][ T28] audit: type=1400 audit(1786184251.629:3626): avc: denied { write } for pid=15983 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.559670][T15979] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1906'. [ 270.567372][T15981] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 270.579484][T15981] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1907: bad orphan inode 4 [ 270.589663][T15981] loop9: lost filesystem error report for type 5 error -117 [ 270.597450][T15981] EXT4-fs (loop9): 1 orphan inode deleted [ 270.604924][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 270.604939][ C0] EXT4-fs (loop9): initial error at time 1786184252: ext4_orphan_get:1425 [ 270.604958][ C0] EXT4-fs (loop9): last error at time 1786184252: ext4_orphan_get:1425 [ 270.622150][T15977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.643117][T15981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.659873][T15977] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.682250][T15981] EXT4-fs (loop9): shut down requested (2) [ 270.704475][T15182] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.775812][T14326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.980806][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 271.881374][ T3017] 8021q: adding VLAN 0 to HW filter on device eth24 [ 271.968706][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 272.055372][ T3017] 8021q: adding VLAN 0 to HW filter on device eth23 [ 272.140348][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 272.673420][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 272.758754][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 272.843612][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 272.929261][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 273.269421][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 273.355630][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 273.442158][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 273.526558][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 273.741944][ T3017] 8021q: adding VLAN 0 to HW filter on device eth25 [ 273.872755][ T3017] 8021q: adding VLAN 0 to HW filter on device eth26 [ 280.040283][ T49] bridge_slave_1: left allmulticast mode [ 280.046013][ T49] bridge_slave_1: left promiscuous mode [ 280.051742][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.059567][ T49] bridge_slave_0: left allmulticast mode [ 280.065254][ T49] bridge_slave_0: left promiscuous mode [ 280.071140][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.145216][T12301] smc: removing ib device syz0